Ensure libseccomp is installed before starting containerd on CentOS 8 (#6922)

* Ensure libseccomp is installed before starting containerd on CentOS 8

* Simplify libseccomp install on CentOS 8

- Uses `package` module
- Replaces complex version check with 'state: latest'. The version must
  be > 2.3 when using with cri-o.
- Removes unnecessary `not is_ostree` condition as CentOS 8 does not use
  ostree

roles/container-engine/cri-o/tasks/main.yaml

@@ -83,19 +83,13 @@
   retries: 4
   delay: "{{ retry_stagger | d(3) }}"
 
-- name: Gather the rpm package facts
-  package_facts:
-    manager: auto
+- name: Ensure latest version of libseccomp installed  # noqa 403
+  package:
+    name: libseccomp
+    state: latest
   when:
     - ansible_distribution == "CentOS"
     - ansible_distribution_major_version == "8"
-
-- name: Ensure latest version of libseccom installed  # noqa 303
-  command: "yum update -y libseccomp"
-  when:
-    - ansible_distribution == "CentOS"
-    - ansible_distribution_major_version == "8"
-    - ansible_facts.packages['libseccomp'] | map(attribute='version') | map('regex_replace','^(?P<major>\\d+).(?P<minor>\\d+).(?P<patch>\\d+)$', '\\g<major>.\\g<minor>') | list | first == '2.3'
   notify: restart crio
 
 - name: Check if already installed