You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
ansible-role-wireguard/tasks/setup-centos-7.yml

78 lines
2.6 KiB
YAML

---
# Copyright (C) 2020 Roman Danko
# SPDX-License-Identifier: GPL-3.0-or-later
- name: (CentOS 7) Tasks for standard kernel
when:
- wireguard_centos7_installation_method == "standard"
block:
- name: (CentOS 7) Install EPEL & ELRepo repository
ansible.builtin.yum:
name:
- epel-release
- https://www.elrepo.org/elrepo-release-7.el7.elrepo.noarch.rpm
update_cache: "{{ wireguard_update_cache }}"
- name: (CentOS 7) Install yum-plugin-elrepo
ansible.builtin.yum:
name: yum-plugin-elrepo
update_cache: "{{ wireguard_update_cache }}"
- name: (CentOS 7) Install WireGuard packages
ansible.builtin.yum:
name:
- "kmod-wireguard"
- "wireguard-tools"
state: present
register: wireguard__centos7_yum_updates
- name: (CentOS 7) Reboot Instance to update kernel
when:
- wireguard_centos7_standard_reboot
- wireguard__centos7_yum_updates.changed
ansible.builtin.reboot:
reboot_timeout: "{{ wireguard_centos7_standard_reboot_timeout }}"
- name: (CentOS 7) Ensure WireGuard DKMS package is removed
ansible.builtin.yum:
name:
- "wireguard-dkms"
state: absent
- name: (CentOS 7 - kernel-plus) Tasks for kernel-plus
when:
- wireguard_centos7_installation_method == "kernel-plus"
block:
- name: (CentOS 7) Install EPEL repository & yum utils
ansible.builtin.yum:
name:
- epel-release
- yum-utils
update_cache: "{{ wireguard_update_cache }}"
- name: (CentOS 7 - kernel-plus) Enable CentosPlus repo
ansible.builtin.command: yum-config-manager --setopt=centosplus.includepkgs=kernel-plus --enablerepo=centosplus --save
changed_when: false
- name: (CentOS 7 - kernel-plus) Update to kernel-plus
ansible.builtin.replace:
path: /etc/sysconfig/kernel
regexp: '^DEFAULTKERNEL=kernel$'
replace: 'DEFAULTKERNEL=kernel-plus'
- name: (CentOS 7 - kernel-plus) Install WireGuard packages
ansible.builtin.yum:
name:
- "kernel-plus"
- "wireguard-tools"
state: present
register: wireguard__centos7_yum_updates
- name: (CentOS 7 - kernel-plus) Reboot Instance to update kernel
when:
- wireguard_centos7_kernel_plus_reboot
- wireguard__centos7_yum_updates.changes is defined
- wireguard__centos7_yum_updates.changes.installed|flatten|select('regex', '^kernel-plus$') is any
ansible.builtin.reboot:
reboot_timeout: "{{ wireguard_centos7_kernel_plus_reboot_timeout }}"