From 85f834f2978120d951a97bce6db8681aea3fe28e Mon Sep 17 00:00:00 2001
From: Devan Carpenter <dvn@pep-project.org>
Date: Wed, 4 Nov 2020 12:43:19 +0100
Subject: [PATCH] kvm: correct syntax for task

Ansible doesn't want another task list here, so we just put the CPU
mitigation steps as their own individual tasks.
---
 roles/kvm/tasks/main.yml | 25 +++++++++++--------------
 1 file changed, 11 insertions(+), 14 deletions(-)

diff --git a/roles/kvm/tasks/main.yml b/roles/kvm/tasks/main.yml
index 422ffbe..3fe11b7 100644
--- a/roles/kvm/tasks/main.yml
+++ b/roles/kvm/tasks/main.yml
@@ -72,18 +72,15 @@
     - reboot
   when: ansible_system_vendor != "QEMU"
 
+- name: Check if CPU is Intel
+  shell: grep -c AMD /proc/cpuinfo
+  register: intel_check
 
-- name: Disable the kernel's CPU mitigations
-  tasks:
-    - name: Check if CPU is Intel
-      shell: grep -c AMD /proc/cpuinfo
-      register: intel_check
-
-    - name: Install grub config with mitigations off
-      copy:
-        src: grub-mitigations.conf
-        dest: /etc/sysconfig/grub
-        mode: 0644
-      notify:
-        - reboot
-      when: intel_check.stdout != "0"
+- name: Install grub config to disable CPU mitigations
+  copy:
+    src: grub-mitigations.conf
+    dest: /etc/sysconfig/grub
+    mode: 0644
+  notify:
+    - reboot
+  when: intel_check.stdout != "0"