Initial dragon playbook

host_vars/dragon.archlinux.org

 ---
 hostname: "dragon"
-
+network_interface: "eth2"
 ipv4_address: "195.201.167.210"
 ipv4_netmask: "/26"
 ipv6_address: "2a01:4f8:13a:102a::2"

playbooks/dragon.yml

+---
+
+- name: setup dragon
+  hosts: dragon.archlinux.org
+  remote_user: root
+  roles:
+    - { role: common, tags: ['common'] }
+    - { role: tools, tags: ['tools'] }
+    - { role: sshd, tags: ['sshd'] }
+    - { role: unbound }
+    - { role: root_ssh, tags: ['root_ssh'] }
+    - { role: archusers, tags: ['archusers'] }
+    - { role: sudo, tags: ['sudo', 'archusers'] }
+    - { role: archbuild, tags: ['archbuild'] }

roles/install_arch/tasks/main.yml

@@ -82,8 +82,16 @@
 - name: populate pacman keyring inside bootstrap chroot
   command: chroot /tmp/root.x86_64 pacman-key --populate archlinux
 
+- name: install ucode update for Intel
+  set_fact: ucode="intel-ucode"
+  when: "'GenuineIntel' in ansible_facts['processor']"
+
+- name: install ucode update for AMD
+  set_fact: ucode="amd-ucode"
+  when: "'AuthenticAMD' in ansible_facts['processor']"
+
 - name: install arch base from bootstrap chroot
-  command: chroot /tmp/root.x86_64 pacstrap /mnt base base-devel btrfs-progs grub openssh python creates=/tmp/root.x86_64/mnt/bin
+  command: chroot /tmp/root.x86_64 pacstrap /mnt base base-devel btrfs-progs grub openssh python {{ ucode }} creates=/tmp/root.x86_64/mnt/bin
 
 - name: mount /proc to new chroot
   command: mount --rbind /proc /mnt/proc creates=/mnt/proc/uptime