unattended-upgrades moved to the security role

roles/common/tasks/main.yml

@@ -46,16 +46,9 @@
     - coreutils
     - rsyslog
     - sendmail
-    - unattended-upgrades
     - iptables-persistent
     - cgroup-tools
 
-- name: Configure unattended-upgrades
-  template: src=50unattended-upgrades.j2 dest=/etc/apt/apt.conf.d/50unattended-upgrades owner=root group=root mode=0644
-
-- name: Periodic upgrades configured
-  template: src=10periodic.j2 dest=/etc/apt/apt.conf.d/10periodic owner=root group=root mode=0644
-
 - name: Loopback for services configured
   template: src=10-loopback-services.cfg.j2 dest=/etc/network/interfaces.d/10-loopback-services.cfg
   notify:

roles/security/tasks/main.yml

@@ -1,3 +1,14 @@
+- name: Install tools
+  apt: name="{{ item }}" state=latest
+  with_items:
+    - unattended-upgrades
+    
+- name: Configure unattended-upgrades
+  template: src=50unattended-upgrades.j2 dest=/etc/apt/apt.conf.d/50unattended-upgrades owner=root group=root mode=0644
+
+- name: Periodic upgrades configured
+  template: src=10periodic.j2 dest=/etc/apt/apt.conf.d/10periodic owner=root group=root mode=0644    
+
 # Using a two-pass approach for checking directories in order to support symlinks.
 - name: Find directories for minimizing access
   stat: