# Ensure the ssh module is disabled, so a cloud-init config change doesn't regenerate the host keys for no reason. - name: check if cloud-init config file exists ansible.builtin.stat: path: /etc/cloud/cloud.cfg register: base_config__stat_cloud_cfg - name: ensure the cloud-init ssh module is disabled ansible.builtin.replace: path: /etc/cloud/cloud.cfg regexp: " - ssh$" replace: " #- ssh" become: true when: base_config__stat_cloud_cfg.stat.exists # Ensure a base set of admin tools is installed. - name: ensure a base set of admin tools is installed ansible.builtin.apt: name: - vim - joe - nano - htop - btop - ripgrep - fd-find - tmux - git - curl - rsync - dnsutils - usbutils - kitty become: true