Split incus role from playbook

ansible/roles/system/tasks/main.yaml

@@ -0,0 +1,38 @@
+---
+- name: Ensure aptitude installed
+  ansible.builtin.apt:
+    name: "aptitude"
+    state: present
+  tags:
+    - apt
+  become: true
+
+- name: Ensure OS upgraded
+  ansible.builtin.apt:
+    upgrade: dist
+  tags:
+    - apt
+    - update
+    - os
+  become: true
+
+- name: Check if reboot is necessary
+  register: reboot_required_file
+  ansible.builtin.stat:
+    path: /var/run/reboot-required
+    get_checksum: false
+  tags:
+    - os
+    - reboot
+  notify: Reboot host
+
+- name: All system packages updated
+  ansible.builtin.apt:
+    name: "*"
+    state: latest # noqa package-latest
+  tags:
+    - apt
+    - update
+    - packages
+  become: true
+