https://github.com/joshbeard/ansible-role-os-patching

Ansible role for patching Linux systems
https://github.com/joshbeard/ansible-role-os-patching

ansible patching proxmox updates

Last synced: 2 days ago
JSON representation

Ansible role for patching Linux systems

• Host: GitHub
• URL: https://github.com/joshbeard/ansible-role-os-patching
• Owner: joshbeard
• Created: 2024-08-03T16:30:14.000Z (6 months ago)
• Default Branch: master
• Last Pushed: 2024-10-16T02:54:45.000Z (3 months ago)
• Last Synced: 2025-01-19T20:08:19.054Z (8 days ago)
• Topics: ansible, patching, proxmox, updates
• Language: Shell
• Homepage:
• Size: 40 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Ansible OS Patching Role

An Ansible role for OS patching.

This is a basic role for use on my personal homelab servers, so OS support is

limited.

## OS Support

* Debian/Ubuntu: Uses `apt`

* EL: Uses `dnf`

* FreeBSD: Uses `pkg-ng`

## Usage

### Tags

- `check`: Check for available updates without installing them.

- `reboot`: Reboot the system after patching if necessary.

When no tags are specified, the system will be patched without rebooting.

### Variables

- `patching_reboot_ok`: If `true`, the system will be rebooted if necessary

  after patching. Default is `false`.

### Example Playbook

```yaml

- name: "OS Patching"

  hosts: proxmox_all_running

  gather_facts: true

  become: true

  vars:

    patching_reboot_ok: true

  roles:

    - jbeard-os_patching

```

See [example/proxmox](example/proxmox) for a full playbook example that

uses the [`community.general.proxmox`](https://docs.ansible.com/ansible/latest/collections/community/general/proxmox_inventory.html)

inventory source.

The [`example/proxmox/patch.sh`](example/proxmox/patch.sh) script can be used

generically and makes running the playbook easier, including support for

retrieving credentials from 1Password.

### Rebooting

If the `patching_reboot_ok` variable is set to `true` and the `reboot` tag is

set, the system will be rebooted if the system requires a reboot after

patching.