diff --git a/roles/ipabackup/vars/Ubuntu-18.04.yml b/roles/ipabackup/vars/Ubuntu-18.04.yml
new file mode 100644
index 0000000000000000000000000000000000000000..3dddac75fafb989a96b1c6d0dd756b0d4fc73b4a
--- /dev/null
+++ b/roles/ipabackup/vars/Ubuntu-18.04.yml
@@ -0,0 +1,9 @@
+# vars/Ubuntu.yml
+ipaserver_packages: [ "freeipa-server" ]
+ipaserver_packages_dns: [ "freeipa-server-dns" ]
+ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ]
+ipaserver_packages_firewalld: [ "firewalld" ]
+# Ubuntu Bionic Beaver must use python2 as Python interpreter due
+# to the way python-ipalib package is defined.
+# Package python2.7 must be installed before executing this role.
+ansible_python_interpreter: '/usr/bin/python2.7'
diff --git a/roles/ipaclient/vars/Debian-10.yml b/roles/ipaclient/vars/Debian-10.yml
new file mode 100644
index 0000000000000000000000000000000000000000..8de5dc8e2e2ceb389f9b5f9538c2248e0737091f
--- /dev/null
+++ b/roles/ipaclient/vars/Debian-10.yml
@@ -0,0 +1,7 @@
+---
+# vars/Debian.yml
+ipaclient_packages: [ "freeipa-client" ]
+# Debian Buster must use python2 as Python interpreter due
+# to the way freeipa-client package is defined.
+# You must install package python2.7 before executing this role.
+ansible_python_interpreter: '/usr/bin/python2'
diff --git a/roles/ipaclient/vars/Ubuntu-18.04.yml b/roles/ipaclient/vars/Ubuntu-18.04.yml
new file mode 100644
index 0000000000000000000000000000000000000000..26c6fbbf77a9b1eb3af5932efd6c10aedd4e9441
--- /dev/null
+++ b/roles/ipaclient/vars/Ubuntu-18.04.yml
@@ -0,0 +1,6 @@
+# vars/Ubuntu-18.04.yml
+ipaclient_packages: [ "freeipa-client" ]
+# Ubuntu Bionic Beaver must use python2 as Python interpreter due
+# to the way python-ipalib package is defined.
+# Package python2.7 must be installed before executing this role.
+ansible_python_interpreter: '/usr/bin/python2.7'
diff --git a/roles/ipareplica/vars/Ubuntu-18.04.yml b/roles/ipareplica/vars/Ubuntu-18.04.yml
new file mode 100644
index 0000000000000000000000000000000000000000..c21bfcd1b354e962b2918e5acb591c2f3e9065f1
--- /dev/null
+++ b/roles/ipareplica/vars/Ubuntu-18.04.yml
@@ -0,0 +1,9 @@
+# vars/Ubuntu.yml
+ipareplica_packages: [ "freeipa-server" ]
+ipareplica_packages_dns: [ "freeipa-server-dns" ]
+ipareplica_packages_adtrust: [ "freeipa-server-trust-ad" ]
+ipareplica_packages_firewalld: [ "firewalld" ]
+# Ubuntu Bionic Beaver must use python2 as Python interpreter due
+# to the way python-ipalib package is defined.
+# Package python2.7 must be installed before executing this role.
+ansible_python_interpreter: '/usr/bin/python2.7'
diff --git a/roles/ipaserver/vars/Ubuntu-18.04.yml b/roles/ipaserver/vars/Ubuntu-18.04.yml
new file mode 100644
index 0000000000000000000000000000000000000000..3dddac75fafb989a96b1c6d0dd756b0d4fc73b4a
--- /dev/null
+++ b/roles/ipaserver/vars/Ubuntu-18.04.yml
@@ -0,0 +1,9 @@
+# vars/Ubuntu.yml
+ipaserver_packages: [ "freeipa-server" ]
+ipaserver_packages_dns: [ "freeipa-server-dns" ]
+ipaserver_packages_adtrust: [ "freeipa-server-trust-ad" ]
+ipaserver_packages_firewalld: [ "firewalld" ]
+# Ubuntu Bionic Beaver must use python2 as Python interpreter due
+# to the way python-ipalib package is defined.
+# Package python2.7 must be installed before executing this role.
+ansible_python_interpreter: '/usr/bin/python2.7'