From a3d24a441d4293139314338c472fc5c6013408b5 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Sun, 20 Nov 2022 21:21:14 +0100
Subject: wireguard modules are in mainline linux since a while now...

---
 roles/network/wireguard/base/tasks/main.yml | 52 ++++++++++++++++-------------
 1 file changed, 29 insertions(+), 23 deletions(-)

diff --git a/roles/network/wireguard/base/tasks/main.yml b/roles/network/wireguard/base/tasks/main.yml
index 4d60150d..f096801c 100644
--- a/roles/network/wireguard/base/tasks/main.yml
+++ b/roles/network/wireguard/base/tasks/main.yml
@@ -4,30 +4,36 @@
   import_role:
     name: apt-repo/spreadspace
 
-- name: install dkms
-  import_role:
-    name: prepare-dkms
+- name: install wireguard modules via dkms (legacy systems only)
+  when: (ansible_distribution == 'Debian' and (ansible_distribution_major_version | int) < 11) or (ansible_distribution == 'Ubuntu' and (ansible_distribution_major_version | int) < 22)
+  block:
+  - name: install dkms
+    import_role:
+      name: prepare-dkms
 
-- name: install wireguard packages
-  apt:
-    name:
-    - wireguard-dkms
-    - wireguard-tools
-    state: present
+  - name: install wireguard-dkms package
+    apt:
+      name: wireguard-dkms
+      state: present
 
-- name: check if module is available for the currently running kernel
-  command: modprobe --dry-run wireguard
-  check_mode: no
-  register: wireguard_module_available
-  failed_when: false
-  changed_when: false
+  - name: check if module is available for the currently running kernel
+    command: modprobe --dry-run wireguard
+    check_mode: no
+    register: wireguard_module_available
+    failed_when: false
+    changed_when: false
 
-- name: rebuild wireguard module
-  when: wireguard_module_available.rc != 0
-  command: dpkg-reconfigure wireguard-dkms
+  - name: rebuild wireguard module
+    when: wireguard_module_available.rc != 0
+    command: dpkg-reconfigure wireguard-dkms
 
-- name: check again if module is available for the currently running kernel
-  when: wireguard_module_available.rc != 0
-  command: modprobe --dry-run wireguard
-  check_mode: no
-  changed_when: false
+  - name: check again if module is available for the currently running kernel
+    when: wireguard_module_available.rc != 0
+    command: modprobe --dry-run wireguard
+    check_mode: no
+    changed_when: false
+
+- name: install wireguard tools
+  apt:
+    name: wireguard-tools
+    state: present
-- 
cgit v1.2.3