7984b46eb7
Since we no longer have any machines in phx2, I have tried to remove them from ansible. Note that there are still some places where we need to remove them still: nagios, dhcp, named were not touched, and in cases where it wasn't pretty clear what a conditional was doing I left it to be cleaned up later. Signed-off-by: Kevin Fenzi <kevin@scrye.com>
65 lines
1.4 KiB
YAML
65 lines
1.4 KiB
YAML
#
|
|
# This playboook updates every host in inventory
|
|
#
|
|
|
|
- name: set downtime
|
|
hosts: all
|
|
gather_facts: False
|
|
user: root
|
|
serial: 1
|
|
|
|
tasks:
|
|
|
|
- name: silence nagios completely
|
|
nagios: action=silence
|
|
delegate_to: noc01.iad2.fedoraproject.org
|
|
ignore_errors: true
|
|
failed_when: no
|
|
when: nonagios is not defined or not "true" in nonagios
|
|
|
|
- name: update the world
|
|
hosts: all
|
|
gather_facts: True
|
|
user: root
|
|
|
|
tasks:
|
|
|
|
- name: Apply updates
|
|
package:
|
|
state: latest
|
|
name: "*"
|
|
update_cache: true
|
|
async: 7200
|
|
poll: 30
|
|
when: package_excludes is not defined
|
|
|
|
- debug:
|
|
msg:
|
|
- '!!!!!!!!!!!!!!!!!!! host {{ inventory_hostname }} has EXCLUDES OF {{ package_excludes }} !!!!!!!!!!!!!'
|
|
- '!!!!!!!!!!!!!!!!!!! DANGER DANGER DANGER ^ CHECK THAT EXCLUDES ARE STILL NEEDED ^ !!!!!!!!!!!!!!!!!!!!'
|
|
when: package_excludes is defined
|
|
changed_when: true
|
|
|
|
- name: Apply updates with excludes
|
|
package:
|
|
state: latest
|
|
name: "*"
|
|
update_cache: true
|
|
exclude: "{{ package_excludes }}"
|
|
async: 7200
|
|
poll: 30
|
|
when: package_excludes is defined
|
|
|
|
- name: run rkhunter if installed
|
|
hosts: all
|
|
user: root
|
|
|
|
tasks:
|
|
- name: check for rkhunter
|
|
command: /usr/bin/test -f /usr/bin/rkhunter
|
|
register: rkhunter
|
|
ignore_errors: true
|
|
|
|
- name: run rkhunter --propupd
|
|
command: /usr/bin/rkhunter --propupd
|
|
when: rkhunter is success
|