Attempt to run the restart_unbound sequence on reboot if necessary.

playbooks/restart_unbound.yml

@@ -10,11 +10,4 @@
   user: root
 
   tasks:
-  - name: set selinux permissive
-    selinux: policy=targeted state=permissive
-
-  - name: restart unbound
-    service: name=unbound state=restarted
-
-  - name: set selinux back to enforcing
-    selinux: policy=targeted state=enforcing
+  - include: $tasks/restart_unbound.yml

playbooks/vhost_reboot.yml

@@ -96,6 +96,15 @@
     command: /root/fix-iptables.sh
     when: inventory_hostname_short.startswith('serverbeach')
 
+- name: Fix unbound if necessary
+  # intersection - hosts that are in our dynamic group and also in unbound-dns
+  hosts: "myvms_new:&unbound-dns"
+  accelerate: true
+  user: root
+
+  tasks:
+  - include: $tasks/restart_unbound.yml
+
 #  - name: get info on guests (postreboot)
 #    virt: command=info
 #    register: vminfo_post

tasks/restart_unbound.yml

@@ -0,0 +1,10 @@
+# Restart unbound after reboots.
+
+- name: set selinux permissive
+  selinux: policy=targeted state=permissive
+
+- name: restart unbound
+  service: name=unbound state=restarted
+
+- name: set selinux back to enforcing
+  selinux: policy=targeted state=enforcing