ansible-hardening/doc/source/developer-notes/V-38676.rst

Neither Ubuntu nor openstack-ansible install the X windows server by default. The ansible tasks will remove the xserver-xorg package if it is present.

To opt-out of the change, set the following Ansible variable to no:

remove_services['xorg']: no