add update playbook to allow updating host through ansible

README.md

@@ -9,6 +9,10 @@ roles
 * Common
  * provides **common** configuration
  * https://github.com/nojhan/liquidprompt <3
+* Update
+ * allow install all update on  hosts (tag normal)
+ * allow update specific packages from list (tags packages)
+   * use host_vars, group_vars or default vars to update packages list
 * Wallabag
  * provides **Wallabag** configuration
  * Imported with <3 from https://github.com/al3x/sovereign/

roles/update/defaults/main.yml

@@ -0,0 +1,7 @@
+---
+
+deb_packages_to_update:
+  - wget
+
+centos_packages_to_update:
+  - vim

roles/update/tasks/by_packages.yml

@@ -0,0 +1,15 @@
+---
+
+- name: debian update package
+  tags: packages
+  apt: pkg={{item}} state=latest update_cache=yes
+  with_items: deb_packages_to_update
+  when: ansible_distribution == 'Debian'
+
+
+- name: centos update packages
+  tags: packages
+  yum: name={{item}} state=latest update_cache=yes
+  with_items: yum_packages_to_update
+  when: ansible_distribution == 'CentOS' or ansible_distribution == 'CloudLinux'
+

roles/update/tasks/main.yml

@@ -0,0 +1,12 @@
+---
+
+- include: normal.yml
+- include: by_packages.yml
+
+- name: ldconfig
+  tags:
+    - normal
+    - packages
+    - ldconfig
+  shell: ldconfig
+

roles/update/tasks/normal.yml

@@ -0,0 +1,17 @@
+---
+
+- name: apt-get update
+  tags: normal
+  apt: update_cache=yes
+  ignore_errors: no
+  when: ansible_distribution == 'Debian'
+
+- name: apt-get upgrade (safe)
+  tags: normal
+  apt: upgrade=safe # http://docs.ansible.com/apt_module.html
+  when: ansible_distribution == 'Debian'
+
+- name: yum update
+  tags: normal
+  yum: name=* state=latest
+  when: ansible_distribution == 'CentOS' or ansible_distribution == 'CloudLinux'

update.yml

@@ -0,0 +1,13 @@
+---
+
+- name: Update host --- tags - grsec, init, normal
+  hosts: all
+  user: root
+  gather_facts: yes
+  serial: 1
+  max_fail_percentage: 1
+           
+  
+  roles:
+    - role: update
+