Assume that gather_facts is set to False, run the setup module when it's safe.

README.rst

@@ -2,8 +2,10 @@ Ansible-common
 ##############
 
 An Ansible role with common tasks that ran on all (or most) hosts.
-The tls_key_path, tls_cert_path and tls_ca_cert_path facts are added to point to
-the path of the host's key and cert.
+The tls_key_path, tls_cert_path and tls_ca_cert_path facts are added to point
+to the path of the host's key and cert. Gathering facts on the first run on an
+OpenBSD system fails, so the role runs the setup module in case gather_facts
+was set to False.
 
 Requirements
 ------------
@@ -50,6 +52,7 @@ Example Playbook
 
     - hosts:
       - all
+      gather_facts: False
       roles:
       - role: common
         extra_tls_certs: ['vagrant.crt', 'example.com.crt']

tasks/main.yml

@@ -4,6 +4,9 @@
 - include: openbsd_bootstrap.yml
   when: openbsd_bootstrap is defined
 
+- setup:
+  when: openbsd_bootstrap is undefined
+
 - name: Assert
   assert:
     that: ansible_os_family in [ 'Debian', 'OpenBSD' ]