Configure running services

In particular, disable unattended-upgrades as it may interfere with ansible-pull

roles/common/tasks/main.yml

@@ -43,4 +43,6 @@
           - "97-overlayroot"
     - name: Configure Ansible user
       include_tasks: ansibleuser.yml
+    - name: Configure services
+      include_tasks: services.yml
   become: yes

roles/common/tasks/services.yml

@@ -0,0 +1,11 @@
+#!/usr/bin/ansible-playbook
+# vim:ft=ansible:
+---
+- name: Configure services
+  systemd:
+    name: "{{ item.name }}"
+    state: "{{ item.state }}"
+    enabled: "{{ item.enabled }}"
+  loop:
+    - { name: "unattended-upgrades", state: "stopped", enabled: no }
+  become: yes