Configure 'needrestart' package

ansible/roles/os/tasks/packages.yml

@@ -1,14 +1,27 @@
+- name: Configure 'needrestart' package
+  ansible.builtin.lineinfile:
+    path: /etc/needrestart/needrestart.conf
+    regexp: "{{ item.regexp }}"
+    line: "{{ item.line }}"
+  loop:
+    - regexp: "^#\\$nrconf\\{restart\\} = 'i';"
+      line: "$nrconf{restart} = 'a';"
+    - regexp: "^#\\$nrconf\\{kernelhints\\} = -1;"
+      line: "$nrconf{kernelhints} = -1;"
+
 - name: Install additional packages
   ansible.builtin.apt:
     name: "{{ item }}"
     state: latest
     update_cache: yes
   loop: "{{ packages }}"
+
 - name: Upgrade all packages
   ansible.builtin.apt:
     name: "*"
     state: latest
     update_cache: yes
+
 - name: Cleanup
   ansible.builtin.apt:
     autoremove: yes