2020-10-08 16:33:19 -05:00
|
|
|
---
|
|
|
|
|
# patching.yml
|
|
|
|
|
#
|
2021-12-19 21:32:19 -06:00
|
|
|
# This playbook can be used to patch all the servers in an inventory to the latest software available.
|
|
|
|
|
# Because we typically encrypt our disk storage, we don't wait for the connection to become available again.
|
2020-10-08 16:33:19 -05:00
|
|
|
# Variables:
|
2021-12-19 21:32:19 -06:00
|
|
|
# - target: the host grouper in the inventory -- default: all
|
2020-10-08 16:33:19 -05:00
|
|
|
#
|
|
|
|
|
# Patch then restart a node
|
2023-11-30 02:44:01 -06:00
|
|
|
#
|
|
|
|
|
#
|
|
|
|
|
- hosts: physical,virtual
|
|
|
|
|
order: sorted
|
|
|
|
|
serial: 4
|
|
|
|
|
vars:
|
|
|
|
|
ansible_become: yes
|
|
|
|
|
ansible_become_method: sudo
|
|
|
|
|
tasks:
|
|
|
|
|
- package:
|
|
|
|
|
name: archlinux-keyring
|
|
|
|
|
state: latest
|
2022-04-19 12:01:03 -05:00
|
|
|
|
2022-12-18 22:23:17 -06:00
|
|
|
- hosts: virtual,geth-hubs
|
2020-10-08 16:33:19 -05:00
|
|
|
order: sorted
|
2022-12-18 22:23:17 -06:00
|
|
|
serial: 4
|
2020-10-08 16:33:19 -05:00
|
|
|
vars:
|
|
|
|
|
ansible_become: yes
|
|
|
|
|
ansible_become_method: sudo
|
|
|
|
|
vars_files:
|
2021-12-19 21:32:19 -06:00
|
|
|
- "{{ lookup('env', 'ANSIBLE_VAULT_FILE') }}"
|
2022-04-19 12:01:03 -05:00
|
|
|
roles:
|
|
|
|
|
- patching
|
2021-12-19 21:32:19 -06:00
|
|
|
|
2022-12-18 22:23:17 -06:00
|
|
|
- hosts: physical
|
2022-04-19 12:01:03 -05:00
|
|
|
order: sorted
|
|
|
|
|
ignore_unreachable: true
|
|
|
|
|
serial: 4
|
|
|
|
|
vars:
|
|
|
|
|
ansible_become: yes
|
|
|
|
|
ansible_become_method: sudo
|
|
|
|
|
vars_files:
|
|
|
|
|
- "{{ lookup('env', 'ANSIBLE_VAULT_FILE') }}"
|
|
|
|
|
roles:
|
|
|
|
|
- patching
|
