{"id":15694114,"url":"https://github.com/jtyr/ansible-errata","last_synced_at":"2025-05-08T06:07:08.930Z","repository":{"id":69603072,"uuid":"80614070","full_name":"jtyr/ansible-errata","owner":"jtyr","description":"Ansible role which helps to patch RedHat-based systems.","archived":false,"fork":false,"pushed_at":"2017-05-12T10:12:24.000Z","size":3,"stargazers_count":8,"open_issues_count":0,"forks_count":3,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-05-08T06:06:59.805Z","etag":null,"topics":["ansible","security"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jtyr.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-02-01T11:31:05.000Z","updated_at":"2024-03-09T05:46:20.000Z","dependencies_parsed_at":null,"dependency_job_id":"e81d5cb4-df87-4a50-a891-dcc134f09b0a","html_url":"https://github.com/jtyr/ansible-errata","commit_stats":null,"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jtyr%2Fansible-errata","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jtyr%2Fansible-errata/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jtyr%2Fansible-errata/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jtyr%2Fansible-errata/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jtyr","download_url":"https://codeload.github.com/jtyr/ansible-errata/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253009905,"owners_count":21839717,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ansible","security"],"created_at":"2024-10-03T18:52:41.064Z","updated_at":"2025-05-08T06:07:08.862Z","avatar_url":"https://github.com/jtyr.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"errata\n======\n\nAnsible role which helps to patch RedHat-based systems.\n\nThe configuration of the role is done in such way that it should not be\nnecessary to change the role for any kind of configuration. All can be\ndone either by changing role parameters or by declaring completely new\nconfiguration as a variable. That makes this role absolutely\nuniversal. See the examples below for more details.\n\nPlease report any issues or send PR.\n\n\nExamples\n--------\n\n```\n---\n\n- name: Fix all erratas\n  hosts: myhost1\n  roles:\n    - errata\n\n- name: Patch only security erratas\n  hosts: myhost2\n  vars:\n    # Enable security erratas only\n    errata_security: yes\n  roles:\n    - errata\n\n- name: Patch only security and bugfixes erratas\n  hosts: myhost3\n  vars:\n    # Enable security erratas\n    errata_security: yes\n    # Enable bugfixes erratas\n    errata_bugfix: yes\n  roles:\n    - errata\n\n- name: Patch only Critical and Important security erratas\n  hosts: myhost4\n  vars:\n    # Enable security erratas only\n    errata_security: yes\n    # Limit the severity to Critical and Important patches\n    errata_security_severity:\n      - Critical\n      - Important\n  roles:\n    - errata\n\n- name: Patch only specific security erratas if found\n  hosts: myhost5\n  vars:\n    # Enable security erratas\n    errata_security: yes\n    # Enable bugfixes erratas\n    errata_bugfix: yes\n    # List of erratas to patch\n    errata_list:\n      - RHBA-2016:2748\n      - RHSA-2016:1940\n      - RHSA-2016:2702\n      - RHSA-2016:2674\n  roles:\n    - errata\n\n- name: Print matching erratas but don't fix them\n  hosts: myhost6\n  vars:\n    # Enable printing of matching erratas\n    errata_print_match: yes\n    # Disable fixing\n    errata_fix: no\n  roles:\n    - errata\n```\n\n\nRole variables\n--------------\n\nVariables used by the role is as follows:\n\n```\n# YUM security plugin package (explicit version can be specified here)\nerrata_plugin_pkg: yum-plugin-security\n\n# Whether to clean YUM cache before searching for erratas\nerrata_clean: yes\n\n# List of erratas to check\n# (set to 'all' to fix all erratas)\nerrata_list: all\n\n# Whether to check for bugfixes advisories\nerrata_bugfix: no\n\n# Whether to check for security advisories\nerrata_security: no\n\n# List of security severities\nerrata_security_severity:\n  - Critical\n  - Important\n  - Moderate\n  - Low\n\n# Whether to print the list of found erratas\nerrata_print_found: no\n\n# Whether to print the list of matching erratas\nerrata_print_match: no\n\n# Whether to fix the found erratas\nerrata_fix: yes\n\n# Filter which produces the final list of found erratas\nerrata_filter: \"| grep -v 'not found' | sed 's/\\ .*//' | sort | uniq\"\n```\n\n\nLicense\n-------\n\nMIT\n\n\nAuthor\n------\n\nJiri Tyr\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjtyr%2Fansible-errata","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjtyr%2Fansible-errata","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjtyr%2Fansible-errata/lists"}