--- # tasks file for ensure_timezone - name: Assert Target OS Is Supported when: - ansible_facts["system"] is defined ansible.builtin.assert: fail_msg: "Unsupported OS: {{ ansible_facts['distribution'] | default('unknown') }}" quiet: true that: - ansible_facts["system"] == 'Linux' - >- ansible_facts["distribution"] in ['AlmaLinux', 'CentOS', 'Debian', 'Fedora', 'OracleLinux', 'Rocky', 'Ubuntu'] - name: Include Variables ansible.builtin.include_vars: file: '{{ lookup("first_found", findme) }}' name: ensure_timezone vars: findme: files: - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml' - '{{ ansible_facts["distribution"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml' - '{{ ansible_facts["distribution"] }}-default.yml' - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-{{ ansible_facts["architecture"] }}.yml' - '{{ ansible_facts["os_family"] }}-{{ ansible_facts["distribution_major_version"] }}-default.yml' - '{{ ansible_facts["os_family"] }}-default.yml' - default.yml paths: [../vars/] errors: ignore - name: Package Discovery when: - ansible_facts["packages"] is not defined ansible.builtin.package_facts: - name: Service Discovery when: - ansible_facts["services"] is not defined ansible.builtin.service_facts: - name: Set Timezone community.general.timezone: hwclock: '{{ timezone_hwclock }}' name: '{{ timezone_name }}' notify: - Ensure_Timezone.Package_Facts - Ensure_Timezone.Service_Facts - Ensure_Timezone.Service_Restart - name: Ensure Packages when: - ensure_timezone is defined - ensure_timezone.package_list is defined - ensure_timezone.package_list is iterable ansible.builtin.package: name: '{{ item.name }}' state: '{{ item.state }}' loop: '{{ ensure_timezone.package_list }}' loop_control: label: '{{ item.name }} will be {{ item.state }}' notify: [Ensure_Timezone.Package_Facts, Ensure_Timezone.Service_Facts] - name: Ensure Configurations when: - ensure_timezone is defined - ensure_timezone.template_list is defined - ensure_timezone.template_list is iterable ansible.builtin.template: backup: 'no' dest: '{{ item.dest }}' group: '{{ item.group | default(omit) }}' mode: '{{ item.mode | default(omit) }}' owner: '{{ item.owner | default(omit) }}' selevel: '{{ item.selevel | default(omit) }}' serole: '{{ item.serole | default(omit) }}' setype: '{{ item.setype | default(omit) }}' seuser: '{{ item.seuser | default(omit) }}' src: '{{ item.src }}' loop: '{{ ensure_timezone.template_list }}' loop_control: label: '{{ item.dest }} will be ensured' notify: - Ensure_Timezone.Package_Facts - Ensure_Timezone.Service_Facts - Ensure_Timezone.Service_Reload - Ensure_Timezone.Service_Restart - name: Ensure Services when: - ensure_timezone is defined - ensure_timezone.service_list is defined - ensure_timezone.service_list is iterable ansible.builtin.service: enabled: '{{ item.enabled }}' name: '{{ item.name }}' state: '{{ item.state }}' loop: '{{ ensure_timezone.service_list }}' loop_control: label: '{{ item.name }} will be {{ item.state }}' notify: [Ensure_Timezone.Package_Facts, Ensure_Timezone.Service_Facts] - name: Ensure Selinux Is Configured when: - ensure_timezone is defined - ensure_timezone.selinux_policy is defined - ensure_timezone.selinux_state is defined ansible.posix.selinux: policy: '{{ ensure_timezone.selinux_policy }}' state: '{{ ensure_timezone.selinux_state }}' register: ensure_timezone_results - name: Reboot If Required when: - ensure_timezone is defined - ensure_timezone.selinux_policy is defined - ensure_timezone.selinux_state is defined - ensure_timezone_results is defined - ensure_timezone_results.reboot_required is defined - ensure_timezone_results.reboot_required ansible.builtin.reboot: - name: Ensure Seboolean when: - ensure_timezone is defined - ensure_timezone.seboolean_list is defined - ensure_timezone.seboolean_list is iterable ansible.posix.seboolean: name: '{{ item.name }}' persistent: '{{ item.persistent }}' state: '{{ item.state }}' loop: '{{ ensure_timezone.seboolean_list }}' loop_control: label: '{{ item.name }} will be {{ item.state }}' - name: Flush Handlers ansible.builtin.meta: flush_handlers - name: Post Verification Service Discovery when: - ensure_timezone is defined - ensure_timezone.service_list is defined - ensure_timezone.service_list is iterable ansible.builtin.service_facts: - name: Assert Managed Services Are Active when: - ensure_timezone is defined - ensure_timezone.service_list is defined - ensure_timezone.service_list is iterable ansible.builtin.assert: fail_msg: "Service {{ item.name }} is not active" quiet: true that: - >- item.state != 'started' or (ansible_facts['services'][item.name ~ '.service'] is defined and ansible_facts['services'][item.name ~ '.service']['state'] == 'running') or (ansible_facts['services'][item.name] is defined and ansible_facts['services'][item.name]['state'] == 'running') loop: "{{ ensure_timezone.service_list }}" loop_control: label: "{{ item.name }} will be verified"