microcode

tasks/kernel/xanmod-cpus/AuthenticAMD.yml

+- name: install amd microcode
+  become: true
+  apt:
+    name: amd64-microcode
+    state: latest
+  when: not amd64_microcode_installed is defined
+- name: set installed fact
+  set_fact:
+    amd64_microcode_installed: true
+  when: not amd64_microcode_installed is defined

tasks/kernel/xanmod-cpus/GenuineIntel.yml

+- name: install intel microcode
+  become: true
+  apt:
+    name: intel-microcode,iucode-tool
+    state: latest
+  when: not intel_microcode_installed is defined
+- name: set installed fact
+  set_fact:
+    intel_microcode_installed: true
+  when: not intel_microcode_installed is defined

tasks/kernel/xanmod.yml

@@ -17,3 +17,7 @@
     name: linux-xanmod
     state: latest
     update_cache: true
+- name: microcode
+  include_tasks: './xanmod-cpus/{{item}}.yml'
+  with_items: '{{ansible_processor}}'
+  when: ansible_architecture == 'x86_64' and (item == 'GenuineIntel' or item == 'AuthenticAMD')