seccomp fix

Author: clwells

handlers/main.yml

@@ -10,3 +10,22 @@
     name: "{{ ntp_cron_daemon }}"
     state: restarted
   when: ntp_cron_handler_enabled | bool
+
+## seccomp "fixes" for arm64 / container
+- name: Create chronyd override to disable seccomp
+  copy:
+    dest: /etc/systemd/system/chronyd.service.d/no-seccomp.conf
+    content: |
+      [Service]
+      SystemCallFilter=
+    mode: '0644'
+  register: override_created
+  when: ansible_architecture in ['aarch64', 'arm64']
+
+
+- name: Reload systemd and restart chronyd
+  systemd:
+    name: chronyd
+    daemon_reload: yes
+    state: restarted
+  when: override_created.changed