- hosts: localhost
  tasks:
    - name: cgroup mode
      lineinfile:
        path: "/etc/rc.conf"
        regexp: "^rc_cgroup_mode.?=.?"
        line: rc_cgroup_mode="unified"
    - name: cgroups service
      service:
        name: cgroups
        enabled: true
    - name: rootless modules
      lineinfile:
        state: present
        path: /etc/modules
        insertafter: EOF
        line: |
          tun
          fuse
          ip_tables
    - name: subgid
      lineinfile:
        state: present
        path: /etc/subgid
        insertafter: EOF
        line: puser:100000:65536
    - name: subuid
      lineinfile:
        state: present
        path: /etc/subuid
        insertafter: EOF
        line: puser:100000:65536