diff --git a/playbook.yml b/playbook.yml
index fb9168c..50d7bce 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -3,6 +3,7 @@
   become: yes
   roles:
     - { role: base, tags: ['base'] }
+    - { role: grub, tags: ['grub'] }
     - { role: sudo, tags: ['sudo'] }
     - { role: gnupg, tags: ['gnupg'] }
     - { role: sysmon, tags: ['sysmon'] }
diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index 1d09876..be5cfa4 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -18,18 +18,6 @@
     name: "{{ hostname }}"
   when: hostname is defined
 
-- name: Set kernel parameters
-  lineinfile:
-    dest: /etc/default/grub
-    regexp: '^GRUB_CMDLINE_LINUX_DEFAULT'
-    state: present
-    line: 'GRUB_CMDLINE_LINUX_DEFAULT="{{ kernel_parameters }}"'
-  when: kernel_parameters is defined and bootloader == 'grub'
-  notify:
-    - rebuild grub
-  tags:
-    - kernelparams
-
 - include_tasks: shell.yml
 - include_tasks: user.yml
 - include_tasks: packages.yml
diff --git a/roles/grub/tasks/main.yml b/roles/grub/tasks/main.yml
new file mode 100644
index 0000000..b10177c
--- /dev/null
+++ b/roles/grub/tasks/main.yml
@@ -0,0 +1,10 @@
+---
+- name: Set kernel parameters
+  lineinfile:
+    dest: /etc/default/grub
+    regexp: '^GRUB_CMDLINE_LINUX_DEFAULT'
+    state: present
+    line: 'GRUB_CMDLINE_LINUX_DEFAULT="{{ kernel_parameters }}"'
+  when: kernel_parameters is defined and bootloader == 'grub'
+  notify:
+    - rebuild grub