---
- name: "[GRUB] update-grub"
  listen:
    - update-grub for DeAppArmor
  ansible.builtin.command:
    cmd: update-grub
  ignore_errors: True
  register: deapparmor_update_grub


- name: "[GRUB] Do NOT reboot machine"
  listen:
    - update-grub for DeAppArmor
  set_fact:
    deapparmor_reboot: False
  when: deapparmor_update_grub is failed


- name: "[GRUB] Attention to update-grub"
  listen:
    - update-grub for DeAppArmor
  pause:
    prompt: "'update-grub' failed! Please check contents of /etc/default/grub"
    minutes: 1
  when: deapparmor_update_grub is failed


- name: Reboot machine for DeAppArmor
  ansible.builtin.reboot:
    msg: Rebooting for changes taking effect
    search_paths:
      - /lib/molly-guard
      - /usr/sbin
  when: deapparmor_reboot == True