76 lines
2.7 KiB
YAML
76 lines
2.7 KiB
YAML
---
|
|
- name: System update for all managed hosts
|
|
hosts: all
|
|
become: yes
|
|
gather_facts: yes
|
|
|
|
tasks:
|
|
# 1. Показываем текущую версию ОС и ядра (для контекста)
|
|
- name: Show OS and kernel version
|
|
debug:
|
|
msg:
|
|
- "Host: {{ inventory_hostname }}"
|
|
- "OS: {{ ansible_distribution }} {{ ansible_distribution_version }}"
|
|
- "Kernel: {{ ansible_kernel }}"
|
|
|
|
# 2. Обновляем кэш apt и запоминаем, изменился ли он
|
|
- name: Update apt cache
|
|
apt:
|
|
update_cache: yes
|
|
cache_valid_time: 3600
|
|
register: apt_update_result
|
|
|
|
- name: Show apt cache update status
|
|
debug:
|
|
msg: "Apt cache was {{ 'updated' if apt_update_result.changed else 'already up to date' }}"
|
|
|
|
# 3. Получаем список пакетов, которые можно обновить (до обновления)
|
|
- name: Get list of upgradable packages
|
|
command: apt list --upgradable
|
|
register: upgradable_before
|
|
changed_when: false
|
|
ignore_errors: yes # если команда недоступна, продолжить
|
|
|
|
- name: Show upgradable packages before update
|
|
debug:
|
|
var: upgradable_before.stdout_lines
|
|
when: upgradable_before.stdout_lines | length > 0
|
|
|
|
# 4. Выполняем полное обновление (dist-upgrade)
|
|
- name: Perform dist-upgrade (full upgrade)
|
|
apt:
|
|
upgrade: dist
|
|
autoremove: yes
|
|
autoclean: yes
|
|
register: apt_upgrade_result
|
|
|
|
# 5. Показываем результат обновления (что изменилось)
|
|
- name: Show upgrade results
|
|
debug:
|
|
msg:
|
|
- "Packages upgraded: {{ apt_upgrade_result.results | default([]) | map(attribute='packages') | list | flatten | unique | join(', ') if apt_upgrade_result.results is defined else 'No package list available' }}"
|
|
when: apt_upgrade_result.changed
|
|
|
|
# 6. Если изменений не было – сообщаем об этом
|
|
- name: No packages were upgraded
|
|
debug:
|
|
msg: "All packages are up to date."
|
|
when: not apt_upgrade_result.changed
|
|
|
|
# 7. Проверяем, требуется ли перезагрузка (наличие /var/run/reboot-required)
|
|
- name: Check if reboot is required
|
|
stat:
|
|
path: /var/run/reboot-required
|
|
register: reboot_required_file
|
|
|
|
- name: Reboot if required
|
|
reboot:
|
|
reboot_timeout: 600
|
|
pre_reboot_delay: 30
|
|
post_reboot_delay: 30
|
|
when: reboot_required_file.stat.exists
|
|
|
|
- name: Reboot not required
|
|
debug:
|
|
msg: "No reboot required."
|
|
when: not reboot_required_file.stat.exists |