Ansible Role: update-management

Description

Manage the update settings on Debian/Ubuntu, CentOS and Windows systems.

Installation

ansible-galaxy install sbaerlocher.update_management

Requirements

None

Role Variables

CentOS

Variable	Default	Comments (type)
update_management_CentOS_enable	true
update_management_update_cmd.hourly	'security'
update_management_update_cmd.daily	'default'
update_management_update_messages.hourly	'no'
update_management_update_messages.daily	'yes'
update_management_download_updates.hourly	'no'
update_management_download_updates.daily	'yes'
update_management_apply_updates.hourly	'no'
update_management_apply_updates,daily	'no'
update_management_random_sleep.daily	360
update_management_random_sleep.hourly	15
update_management_system_name	None
update_management_emit_via	stdio
update_management_output_width	80
update_management_email_from	root@localhost
update_management_email_to	root
update_management_email_host	localhost
update_management_group_list	None
update_management_group_package_types	mandatory,default
update_management_debuglevel	"-2"
update_management_mdpolicy	"group:main"

Debian / Ubuntu

Variable	Default	Comments (type)
update_management_Debian_enable	true
update_management_UpdatePackageLists	1	Do "apt-get update" automatically every n-days (0=disable)
update_management_DownloadUpgradeablePackages	0	Do "apt-get upgrade --download-only" every n-days (0=disable)
update_management_AutocleanInterval	7	Do "apt-get autoclean" every n-days (0=disable)
update_management_CleanInterval	7	Do "apt-get clean" every n-days (0=disable)
update_management_Verbose	0
update_management_Package_Blacklist
update_management_AutoFixInterruptedDpkg	true
update_management_MinimalSteps	false
update_management_InstallOnShutdown	false
update_management_Mail	false
update_management_MailOnlyOnError	false
update_management_Remove_Unused_Dependencies	false
update_management_Automatic_Reboot	false
update_management_Automatic_Reboot_Time	false
update_management_IgnoreAppsRequireRestart	false
update_management_Dpkg_Options	[]
update_management_Dl_Limit	70

Windows

Variable	Default	Comments (type)
update_management_GPO_enable	false	If the updates are regulated by GPO, then set to true
update_management_Windows_enable	true
update_management_SetActiveHours_enabled	true
update_management_ActiveHoursStart	"8"
update_management_ActiveHoursEnd	"17"
update_management_NoAutoUpdate_enable	false
update_management_ScheduledInstallDay	6
update_management_ScheduledInstallTime	17
update_management_ScheduledInstallEveryWeek	1
update_management_AllowMUUpdateService	1
update_management_SetAutoRestartNotificationDisable	1
update_management_IncludeRecommendedUpdates	1
update_management_AutoRestartDeadlinePeriodInDays	3
update_management_SetAutoRestartDeadline	1
update_management_DetectionFrequencyEnabled	1
update_management_DetectionFrequency	16
update_management_SetEngagedRestartTransitionSchedule	1
update_management_EngagedRestartTransitionSchedule	7
update_management_EngagedRestartSnoozeSchedule	1
update_management_EngagedRestartDeadline	14
update_management_SetDisableUXWUAccess	1
update_management_DeferFeatureUpdates	1
update_management_BranchReadinessLevel	32
update_management_DeferFeatureUpdatesPeriodInDays	0
update_management_PauseFeatureUpdatesStartTime	""
update_management_Noincludedrivers_enable	false
update_management_UseWUServer_enable	false
update_management_WUServer	""
update_management_WUStatusServer	""
update_management_UpdateServiceUrlAlternate	""

Dependencies

None

Example Playbook

- hosts: all
  roles:
    - sbaerlocher.update-management

Changelog

1.0.0

• inital commit

Author

• Simon Bärlocher

License

This project is under the MIT License. See the LICENSE file for the full license text.

Copyright

(c) 2020, Arillso