running the ansible role 2x in a row sho 3 changed steps

[toralf]

I do wonder why running https://github.com/toralf/tor-relays/blob/main/site.yml gives at the 2nd time those changes (kasimir is the bridge hostname):

tfoerste@t44 ~/devel/tor-relays $ ./site.yml 

PLAY [Deploy Tor Bridges] *******************************************************************************************************************************************************************

TASK [Gathering Facts] **********************************************************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Set OS specific variables] ***************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Update system] ***************************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Packages installation] *******************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Ensure FreeBSD conf directory exists] ****************************************************************************************************************
skipping: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Configure FreeBSD to use HTTPS] **********************************************************************************************************************
skipping: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Packages installation (FreeBSD)] *********************************************************************************************************************
skipping: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Unattended upgrades config file] *********************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Auto upgrades config file] ***************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Configuring Tor repository] **************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Adding Tor Projects key] *****************************************************************************************************************************
changed: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Update system] ***************************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Packages installation] *******************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Install Tor packages] ********************************************************************************************************************************
skipping: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Configure Torrc file] ********************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Set cap_net_bind_service on obfs4] *******************************************************************************************************************
changed: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Override systemd configuration to use privileged ports] **********************************************************************************************
ok: [kasimir] => (item=tor@default.service)
ok: [kasimir] => (item=tor@.service)

TASK [alphacorvus.ansible_tor_bridge : Override systemd configuration to use privileged ports] **********************************************************************************************
ok: [kasimir] => (item=tor@default.service)
ok: [kasimir] => (item=tor@.service)

TASK [alphacorvus.ansible_tor_bridge : Restart Tor service] *********************************************************************************************************************************
changed: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Enabling Tor daemon service] *************************************************************************************************************************
ok: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Enable set Tor uid] **********************************************************************************************************************************
skipping: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Enable Tor] ******************************************************************************************************************************************
skipping: [kasimir]

TASK [alphacorvus.ansible_tor_bridge : Restart Tor service] *********************************************************************************************************************************
skipping: [kasimir]

PLAY RECAP **********************************************************************************************************************************************************************************
kasimir                    : ok=16   changed=3    unreachable=0    failed=0    skipped=7    rescued=0    ignored=0   

[lilianbaz]

It's due to a lack of check before applying the changes on certain tasks:

• Adding Tor Projects key: when this task is run, it downloads and install the last GPG key of Tor project, without checking if you already have it in your keyring;
• Set cap_net_bind_service on obfs4: this task requires the capability to be set on the OBFS4 binary, but always return a change even if it was previously set;
• Restart Tor service: well... it always restarts the service so it's normal :)