k3s-ansible/roles/ubuntu/tasks/main.yml

---
- name: Enable cgroup via boot commandline if not already enabled
  lineinfile:
    path: /boot/firmware/cmdline.txt
    backrefs: yes
    regexp: '^((?!.*\bcgroup_enable=cpuset cgroup_memory=1 cgroup_enable=memory\b).*)$'
    line: '\1 cgroup_enable=cpuset cgroup_memory=1 cgroup_enable=memory'
  when:
    - ansible_distribution == 'Ubuntu'

- name: Read /proc/cmdline to check for cgroups already running
  slurp:
    src: /proc/cmdline
  register: slurped_cmdline
  when:
    - ansible_distribution == 'Ubuntu'

- name: Decode slurped command line
  set_fact:
    cmdline: "{{ slurped_cmdline.content | b64decode }}"
  when:
    - ansible_distribution == 'Ubuntu'

- name: Reboot to enable cgroups if not already enabled
  reboot:
  when:
    - ansible_distribution == 'Ubuntu'
    - '"cgroup_enable=cpuset cgroup_memory=1 cgroup_enable=memory" not in cmdline'