From 8d0bb7b166f82011fd0e100281c7ce0dfeb71af3 Mon Sep 17 00:00:00 2001
From: alessandrovitali <mail@alessandrovitali.net>
Date: Fri, 4 Sep 2026 00:39:11 +0200
Subject: [PATCH] add conditional reboot on kernel upgrades

---
 roles/base/tasks/main.yml | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index 9535d89..5c673cc 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -26,7 +26,7 @@
     state: present
     update_cache: true
   become: true
-#
+
 # - name: Enable unattended-upgrades
 #   ansible.builtin.copy:
 #     dest: /etc/apt/apt.conf.d/20auto-upgrades
@@ -35,3 +35,14 @@
 #       APT::Periodic::Unattended-Upgrade "1";
 #     mode: "0644"
 #   when: ansible_facts['os_family'] == "Debian"
+
+- name: Check if reboot is required
+  ansible.builtin.stat:
+    path: /var/run/reboot-required
+  register: reboot_required_file
+
+- name: Reboot host if necessary
+  ansible.builtin.reboot:
+    post_reboot_delay: 10
+  become: true
+  when: reboot_required_file.stat.exists