feat: add tmpfs role

Author: bruzina

README.md

@@ -14,6 +14,7 @@ This Ansible collection provides a set of roles designed for configuring Kubuntu
 | [xebis.ansible.nftables_firewall](roles/nftables_firewall/README.md) | nftables firewall                                                                                                                          | `xebis.ansible.apt`            |
 | `xebis.ansible.openssh_server`                                       | Installs OpenSSH server and provides `Restart ssh` handler.                                                                                | `xebis.ansible.apt`            |
 | [xebis.ansible.system](roles/system/README.md)                       | System-related tasks such as reboot handler or reboot when required handler.                                                               |                                |
+| [xebis.ansible.tmpfs](roles/tmpfs/README.md)                         | Sets to mount directories as tmpfs during startup.                                                                                         | `xebis.ansible.system`         |
 | [`xebis.ansible.users`](roles/users/README.md)                       | Ansible role for managing system users.                                                                                                    | `xebis.ansible.openssh_server` |
 
 ## Installation and Configuration

roles/tmpfs/README.md

@@ -0,0 +1,9 @@
+# Xebis.Ansible.Tmpfs
+
+Sets `tmpfs_dirs` directories to mount during startup.
+
+## Variables
+
+- `tmpfs_dirs` [list of strings]
+  - Directories to be mounted during the system startup.
+  - Default `[]`

roles/tmpfs/meta/main.yaml

@@ -0,0 +1,3 @@
+---
+dependencies:
+  - role: xebis.ansible.system # Uses "Reboot system" handler

roles/tmpfs/tasks/main.yaml

@@ -0,0 +1,19 @@
+---
+- name: Add Ansible managed section separator to /etc/fstab
+  become: true
+  ansible.builtin.lineinfile:
+    path: /etc/fstab
+    line: "# Ansible managed"
+    state: present
+  when: tmpfs_dirs | length > 0
+
+- name: Set directories to mount as tmpfs
+  become: true
+  ansible.builtin.lineinfile:
+    path: /etc/fstab
+    regexp: "^\\s*tmpfs\\s+{{ item }}"
+    line: "tmpfs {{ item }} tmpfs rw,nosuid,nodev"
+    create: false
+    state: present
+  loop: "{{ tmpfs_dirs | default([]) }}"
+  notify: Reboot system

test.yaml

@@ -4,6 +4,10 @@
     - role: xebis.ansible.grub
       vars:
         menu_timeout: 15
+    - role: xebis.ansible.tmpfs
+      vars:
+        tmpfs_dirs:
+          - /tmp
     - role: xebis.ansible.apt
       vars:
         autoclean: true