Make AppArmor configurable separately from daemon installation

This may be useful in cases where we don't want to install the daemon,
but we do want to configure AppArmor for directory storage pools.

Author: markgoddard

README.md

@@ -143,6 +143,9 @@ systemd.socket for format. Default is unset.
 
 `libvirt_host_tls_cacert`: TLS CA certificate. Default is unset.
 
+`libvirt_host_configure_apparmor`: Whether to configure AppArmor for directory
+storage pools.
+
 Dependencies
 ------------
 

defaults/main.yml

@@ -105,3 +105,6 @@ libvirt_host_tls_server_key:
 libvirt_host_tls_client_cert:
 libvirt_host_tls_client_key:
 libvirt_host_tls_cacert:
+
+# Whether to configure AppArmor for directory storage pools.
+libvirt_host_configure_apparmor: "{{ libvirt_host_install_daemon | bool }}"

tasks/post-install-Debian.yml

@@ -33,7 +33,7 @@
     line: "  {{ item.path }}/** rwk,"
   become: true
   when:
-    - libvirt_host_install_daemon | bool
+    - libvirt_host_configure_apparmor | bool
     - ansible_facts.apparmor.status | default == 'enabled'
     - item.type == "dir"
   loop: "{{ libvirt_host_pools | flatten(levels=1) }}"