dandyrow.linux.systemd_boot role – Installs and configures systemd-boot

Note

This role is part of the dandyrow.linux collection (version 2.6.0).

To install it use: ansible-galaxy collection install dandyrow.linux.

To use it in a playbook, specify: dandyrow.linux.systemd_boot.

Entry point main – Installs and configures systemd-boot

Synopsis

  • Installs and configures systemd-boot.

  • Assumes no other boot loader is installed.

  • Use at your own risk.

  • I take no responsiblity for you breaking your bootloader after running this role.

Parameters

Parameter

Comments

auto_entries

boolean

If true, will show other boot entries found on boot partition.

Choices:

  • false

  • true ← (default)

auto_firmware

boolean

If true, will enable the “Reboot into firmware” entry.

If false, firmware can still be accessed using the f key.

Choices:

  • false

  • true ← (default)

auto_update

boolean

Whether to enable auto updating of systemd-boot.

Achieves this by enabling systemd-boot-update service.

Choices:

  • false

  • true ← (default)

beep

boolean

If true, PC speaker will be used to make sound.

If timeout enabled, beep every second, otherwise beep n times when n-th entry in boot menu is selected.

Only supported on x86 platform where it uses PC speaker.

Choices:

  • false ← (default)

  • true

console_mode

string

Configures resolution of the console in bootloader.

Choices:

  • "0"

  • "1"

  • "2"

  • "auto"

  • "max"

  • "keep" ← (default)

editor

boolean

If true, will enable the editor for boot loader entries.

This should be disabled if the machine can be accessed by unauthorised persons.

Choices:

  • false

  • true ← (default)

entry_title

string / required

Title of the boot entry for system root partition.

esp_path

path

Path to where the EFI system partition (ESP) is mounted.

Default is recommended path by systemd-boot.

Default: "/efi"

loader_timeout

integer

Length of time in seconds which the systemd-boot loader menu appears for until booting the default entry.

Default: 0

reboot_for_bitlocker

boolean

Work around bitlocker requiring a recovery key when the boot loader was updated.

See the loader.conf.5 man page for more detail.

Choices:

  • false ← (default)

  • true

secure_boot_enroll

string

Controls enrollment of secure boot keys found on the ESP if the system is in setup mode. See the loader.conf.5 man page for more detail.

Choices:

  • "off" ← (default)

  • "manual"

  • "if-safe"

  • "force"

Authors

  • Daniel Lowry (github.com/dandyrow)