---
- hosts: all

  gather_facts: no


  pre_tasks:
    - name: 'Output configured connection plugin via "ansible_connection" variable'
      debug:
        var: ansible_connection
      tags:
        - never
        - debug

    - name: End for non-LXContainer
      meta: end_host
      when: "'lxc' in ansible_connection|default('')"
      tags:
        - always

    - name: Manually gather facts (for LXC hosts only)
      ansible.builtin.gather_facts:
      tags:
        - always


  roles:
    - role: deapparmor
      deapparmor_reboot: True
      tags:
        - always

    - role: grub_add_cmdlineparameter
      grub_add_cmdlineparameter:
        systemd.unified_cgroup_hierarchy: 0
        cgroup_enable: memory
        swapaccount: 1
        vsyscall: emulate
      tags:
        - always

    - role: prepare_lxc_host
      tags:
        - always