---
# tasks file for common role
- include: networking.yml

- name: Ensure common packages
  yum: 
    name: "{{item}}"
    state: present
    enablerepo: epel
  with_items: "{{ common_packages }}"
  tags: packages
  
- name: Check if SELinux is installed
  stat:
    path: /etc/selinux/config
  register: se
  tags: security

- name: SELinux Management
  block:
    -  name: selinux | Ensure SELinux status
       selinux:
         state: disabled
       register: sestate
    - name: selinux | Message Output
      debug:
        msg: "SELinux {{ sestate.msg }}"
      when: sestate.changed
  when: se.stat.exists
  tags: security

- name: Create admin group
  group: name={{ADMIN_GROUP}} state=present

- name: Configure yum limit
  lineinfile:
    dest: /etc/yum.conf
    regexp: "installonly_limit="
    line: "installonly_limit=2"
  tags: packages


    
- name: Ensure Hostname is set
  hostname: 
    name: "{{ inventory_hostname }}.{{ domain }}"
    
- name: Change root password
  user: 
    name: root 
    password: "{{ root_pwd }}"
  changed_when: false

- include: grub.yml
- include: communication.yml
- include: motd.yml