+grub role

roles/grub/README.md

@@ -0,0 +1,6 @@
+grub
+=========
+
+Ansible Role for misc. `GRUB` bootloader opinions. Notably:
+
+- `GRUB_RECORDFAIL_TIMEOUT`: prevents requiring human intervention when the _last_ boot failed.

roles/grub/defaults/main.yml

@@ -0,0 +1,10 @@
+---
+# defaults file for grub
+#
+grub_cfgs:
+  debian: /etc/default/grub
+  redhat: /etc/sysconfig/grub  # likely a symlink, stub just in case
+
+grub_updatecmd:
+  debian: update-grub
+  redhat: grub2-mkconfig -o /etc/grub2.cfg

roles/grub/handlers/main.yml

@@ -0,0 +1,9 @@
+---
+# handlers file for grub
+#
+- name: Generate Config
+  ansible.builtin.command:
+    cmd: "{{ grub_updatecmd[ansible_os_family | lower] }}"
+  become: true
+  changed_when: true  # handler, assume this cmd is realizing changes/making more
+  listen: update_grubcfg

roles/grub/tasks/debian.yml

@@ -0,0 +1,9 @@
+---
+
+- name: Ensure 'GRUB_RECORDFAIL_TIMEOUT'
+  ansible.builtin.lineinfile:
+    path: "{{ grub_cfgs[ansible_os_family | lower] }}"
+    regexp: '^GRUB_RECORDFAIL_TIMEOUT'
+    line: 'GRUB_RECORDFAIL_TIMEOUT=5'
+  become: true
+  notify: update_grubcfg

roles/grub/tasks/main.yml

@@ -0,0 +1,6 @@
+---
+# tasks file for grub
+#
+- name: Include tasks by OS family
+  ansible.builtin.include_tasks:
+    file: "{{ ansible_os_family | lower }}.yml"

roles/grub/tasks/redhat.yml

@@ -0,0 +1 @@
+---

roles/grub/vars/main.yml

@@ -0,0 +1,2 @@
+---
+# vars file for grub