# vim: set ft=yaml.jinja :

- name: enroll uefi mok
  shell: |
    mokutil --import /usr/local/share/dch/mok.crt <<EOF
    {{ mok_password }}
    {{ mok_password }}
    EOF
  notify:
  - reboot notify
  - reboot the system
  tags:
  - mok

- name: reboot notify
  pause:
    prompt: >-
      The machine will now reboot and you must manually enroll the MOK.
      Use this password when enrolling: {{ mok_password }}
      Press ENTER to continue

- name: reboot the system
  reboot:
    reboot_timeout: 300
  tags:
  - reboot