From b870daff58dd96f1fa5c45875464b57cf6bd5e14 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Sun, 7 Jan 2018 11:26:31 -0600
Subject: [PATCH] roles/base: Basic config management support

The *base* role performs the basic tasks needed to manage a node using
Ansible. Specifically, it installs the necessary packages for
manipulating SELinux policy.
---
 roles/base/tasks/main.yml    | 12 ++++++++++++
 roles/base/vars/defaults.yml |  3 +++
 2 files changed, 15 insertions(+)
 create mode 100644 roles/base/tasks/main.yml
 create mode 100644 roles/base/vars/defaults.yml

diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
new file mode 100644
index 0000000..737dd3c
--- /dev/null
+++ b/roles/base/tasks/main.yml
@@ -0,0 +1,12 @@
+- name: load distribution-specific values
+  include_vars: '{{ item }}'
+  with_first_found:
+  - '{{ ansible_distribution }}.yml'
+  - defaults.yml
+  tags:
+  - always
+
+- name: ensure selinux python bindings are installed
+  package:
+    name={{ selinux_python_libs|join(',') }}
+    state=present
diff --git a/roles/base/vars/defaults.yml b/roles/base/vars/defaults.yml
new file mode 100644
index 0000000..1faaf41
--- /dev/null
+++ b/roles/base/vars/defaults.yml
@@ -0,0 +1,3 @@
+selinux_python_libs:
+- libselinux-python3
+- policycoreutils-python3