X-Git-Url: https://gerrit.akraino.org/r/gitweb?p=ta%2Fcaas-security.git;a=blobdiff_plain;f=ansible%2Froles%2Fsecurity%2Ftasks%2Fmain.yml;h=acf307a02ba0b83517c317ba1b99daf37d499905;hp=22e31971b1155184cc4113fa84f0a5ff508c9d6d;hb=5cdce156c36b3c44ab3a3d63032f46b786256069;hpb=ed3cc46fca2da831bfe933c318ea7cf8f65d2120

diff --git a/ansible/roles/security/tasks/main.yml b/ansible/roles/security/tasks/main.yml
index 22e3197..acf307a 100644
--- a/ansible/roles/security/tasks/main.yml
+++ b/ansible/roles/security/tasks/main.yml
@@ -27,9 +27,18 @@
       - host_os is defined
       - host_os.grub2_password | default(False, True)
 
+  - name: check whether grub-efi exists
+    stat:
+      path: /boot/efi/EFI/centos/grub.cfg
+    register: grub_efi_file_stat
+
   - name: generate grub config
     command: /usr/sbin/grub2-mkconfig -o /boot/grub2/grub.cfg
 
+  - name: generate grub-efi config
+    command: /usr/sbin/grub2-mkconfig -o /boot/efi/EFI/centos/grub.cfg
+    when: grub_efi_file_stat.stat.exists == true
+
   - name: chsh/chfn right setting
     file:
       path: "{{ item }}"