Run playbooks during kickstart

[duncaninnes]

Feature Request or Enhancement

• Feature []
• Enhancement [Ability to run all playbooks during kickstart process]

Summary of Request
Would like to be able to run all playbooks during the kickstart process. This would require kickstarts to detect when they are running in a kickstart process and not attempt to stop/start any services. Services will still be stop/started during normal operation, just not during kickstart.

Describe Alternatives You've Considered
We don't run most of the playbooks during kickstart. This is a shame, as systems boot up half-configured and requiring the playbooks to be run ASAP on boot.

Suggested Code
Not sure how to detect when running in kickstart, but once an adequate detection can be made, parts of playbooks which cause trouble during kickstart would have a "when {{ not-kickstart }}" or similar added to their definition block. This would allow the playbooks to be fully run during kickstart, resulting in a fully configured and locked-down system before firstboot. All services will be enabled/disabled and configured during kickstart, but no attempt will be made to stop/start the services.

[duncaninnes]

Copy of the RHEL 8 issue: ansible-lockdown/RHEL8-CIS#417

I did not realise the RHEL8 issue only applied to the specific RHEL 8 codebase. Duplicating here for visibility.