refs #8025 #7892 defuser bug fix, disable apparmor

playbooks/debian.yml

@@ -2,6 +2,10 @@
   hosts: all
   vars_files: ../vault.yml
   tasks:
+  - name: Configure virtual machine or host
+    import_role:
+      name: debian-host
+    when: ansible_virtualization_role == 'host' or ansible_virtualization_type == 'kvm'
   - name: Configure base system
     import_role:
       name: debian-base
@@ -13,7 +17,3 @@
     import_role:
       name: debian-qemu
     when: ansible_virtualization_role == 'guest' and ansible_virtualization_type == 'kvm'
-  - name: Configure virtual machine or host
-    import_role:
-      name: debian-host
-    when: ansible_virtualization_role == 'host' or ansible_virtualization_type == 'kvm'

roles/debian-host/tasks/apparmor.yml

@@ -0,0 +1,5 @@
+- name: Disable AppArmor
+  service:
+    name: apparmor
+    state: stopped
+    enabled: no

roles/debian-host/tasks/hostname.yml

@@ -1,8 +1,8 @@
-- name: Set the hostname in /etc/hostname
+- name: Set the hostname
   hostname:
     name: "{{ inventory_hostname_short }}"
     use: debian
-- name: Configure hostname in hosts
+- name: Configure hosts file
   blockinfile:
     path: /etc/hosts
     marker_begin: '--- BEGIN VN ---'

roles/debian-host/tasks/main.yml

@@ -2,3 +2,5 @@
   tags: hostname
 - import_tasks: sysctl.yml
   tags: sysctl
+- import_tasks: apparmor.yml
+  tags: apparmor