Move kernel cleanup to after reboot

Otherwise, modules might fail etc. when the kernel package is purged
before reboot causing odd failures.

oneshot/update-pvc-cluster.yml

@@ -35,12 +35,6 @@
         autoclean: yes
         upgrade: full
 
-    - name: clean up obsolete kernels
-      command: /usr/local/sbin/kernel-cleanup.sh
-
-    - name: clean up obsolete packages
-      command: /usr/local/sbin/dpkg-cleanup.sh
-
     - name: clean apt archives
       file:
         dest: /var/cache/apt/archives
@@ -225,6 +219,12 @@
       become: no
       connection: local
 
+    - name: clean up obsolete kernels
+      command: /usr/local/sbin/kernel-cleanup.sh
+
+    - name: clean up obsolete packages
+      command: /usr/local/sbin/dpkg-cleanup.sh
+
 - hosts: all
   remote_user: deploy
   become: yes