From 82accb3b5ea009f90f850ade8a6d988839da83fc Mon Sep 17 00:00:00 2001
From: "Joshua M. Boniface" <joshua@boniface.me>
Date: Wed, 20 Sep 2023 16:43:08 -0400
Subject: [PATCH] Install intel-microcode on Intel CPUs

Required otherwise needrestart fails.
---
 roles/base/tasks/main.yml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index d045eef..0b7686a 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -296,6 +296,12 @@
   until: apt_res is success
   tags: base-packages
 
+- name: install Intel-specific microcode package
+  apt:
+    name:
+      - intel-microcode
+  when: "'GenuineIntel' in ansible_processor"
+
 - name: install cleanup scripts
   template:
     src: "{{ item.src }}"