ansible_role_resolvconf/tasks/main.yml

---
- name: run versionscheck
  ansible.builtin.include_tasks: versioncheck.yml
  when: submodules_versioncheck|bool

- name: resolv.conf is ino longer immutable.
  become: true
  ansible.builtin.file:
    path: '/etc/resolv.conf'
    attr: '-i'
  register: resolv_file
  changed_when: "resolv_file.changed and not resolveconf__immutable"
  ignore_errors: true

- name: deploy resolv.conf
  block:
    - name: "Configure resolv.conf"
      become: true
      ansible.builtin.template:
        src: 'templates/resolv.conf.j2'
        dest: '/etc/resolv.conf'
        mode: "{{ resolvconf__mode }}"
        owner: root
        group: root
  rescue:
    - name: Remove /etc/resolv.conf
      become: true
      ansible.builtin.file:
        path: '/etc/resolv.conf'
        state: absent

    - name: "try to deplpy resolv.conf again"
      become: true
      ansible.builtin.template:
        src: 'templates/resolv.conf.j2'
        dest: '/etc/resolv.conf'
        mode: "{{ resolvconf__mode }}"
        owner: root
        group: root

- name: Ensure resolv.conf is immutable.
  become: true
  ansible.builtin.file:
    path: '/etc/resolv.conf'
    attr: '+i'
  register: resolv_file
  changed_when: "not resolv_file.changed"
  when: resolveconf__immutable | bool