summaryrefslogtreecommitdiffstats
path: root/ansible/roles/enable_iommu_on_boot/tasks/main.yml
blob: 188b329153c6f04a316a3fb6a08d00834321df78 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
# Copyright (c) 2017-2018 Intel Corporation
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
---
- name: Set iommu_boot_params for Intel
  set_fact:
    iommu_boot_params: ' intel_iommu=on iommu=pt'
  when: hostvars[inventory_hostname]['ansible_system_vendor'] == "Intel Corporation"

- name: Set iommu_boot_params for AMD
  set_fact:
    iommu_boot_params: ' amd_iommu=on iommu=pt'
  when: hostvars[inventory_hostname]['ansible_system_vendor'] == "AuthenticAMD"

- block:
  - name: Define grub string for IOMMU
    set_fact:
      enable_iommu: 'GRUB_CMDLINE_LINUX="$GRUB_CMDLINE_LINUX{{ iommu_boot_params }}'

  - name: check if iommu is set by this role in {{ grub_file}}
    lineinfile:
      path: "{{ grub_file}}"
      regexp: '{{ iommu_help_string }}'
      line: '{{ iommu_help_string }}'
      state: absent
    check_mode: yes
    register: is_nsb_iommu_role
    ignore_errors: True

  - name: Check if IOMMU is set by someone else
    lineinfile:
      path: "{{ grub_file}}"
      regexp: "_iommu="
      line: '{{ iommu_help_string }}'
      state: absent
    check_mode: yes
    register: is_iommu
    ignore_errors: True

  - name: Send info that IOMMU is configured by someone else
    debug:
      msg: "INFO: NOT modified, IOMMU is already configured by someone."
    when:
      - not is_nsb_iommu_role.changed
      - is_iommu.changed

  - name: Add IOMMU when it is not set
    lineinfile:
      path: "{{ grub_file }}"
      regexp: "{{ iommu_help_string }}"
      line: '{{ enable_iommu }}" {{ iommu_help_string }}'
    when:
      - not is_nsb_iommu_role.changed
      - not is_iommu.changed

  - name: find boot grub.cfg
    find:
      paths: /boot
      file_type: file
      patterns: 'grub*.cfg'
      recurse: yes
    register: grub_files

  - include: manual_modify_grub.yml
    # only tested on Ubuntu, kernel line is probably different on other distros
    with_items: "{{ grub_files.files }}"
    when: ansible_distribution == "Ubuntu"
  when: iommu_boot_params is defined