ansible: Add system update playbook

ansible/roles/system-base-update/README.md

@@ -0,0 +1,24 @@
+System base update
+==================
+
+Update the base operating system components.  Supports the native
+update mechanisms for:
+
+- FreeBSD (freebsd-update)
+- Linux/RedHat (yum)
+- Linux/Debian (apt)
+- MacOS X (softwareupdate)
+- Windows
+
+Note that on systems with a package manager, this may update packages
+in addition to the base system.
+
+Requirements
+------------
+
+None.
+
+Author Information
+------------------
+
+ome-devel@lists.openmicroscopy.org.uk

ansible/roles/system-base-update/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+# Defaults

ansible/roles/system-base-update/meta/main.yml

@@ -0,0 +1 @@
+---

ansible/roles/system-base-update/tasks/darwin.yml

@@ -0,0 +1,4 @@
+---
+- name: Update MacOS X base system
+  raw: softwareupdate -i -a
+  become: yes

ansible/roles/system-base-update/tasks/debian.yml

@@ -0,0 +1,8 @@
+---
+- name: Update Debian APT repositories
+  apt:
+    update_cache: yes
+
+- name: Upgrade Debian packages
+  apt:
+    upgrade: dist

ansible/roles/system-base-update/tasks/freebsd.yml

@@ -0,0 +1,12 @@
+---
+- name: Fetch new FreeBSD updates
+  command: freebsd-update fetch --not-running-from-cron
+  register: result_update
+  changed_when: "'No updates needed' not in result_update.stdout"
+  become: yes
+
+- name: Install FreeBSD updates
+  command: freebsd-update install
+  when: ansible_distribution == 'FreeBSD' and result_update.changed
+  register: result_update_install
+  become: yes

ansible/roles/system-base-update/tasks/main.yml

@@ -0,0 +1,20 @@
+---
+- include: darwin.yml
+  when: ansible_os_family == 'Darwin'
+  tags: package
+
+- include: debian.yml
+  when: ansible_os_family == 'Debian'
+  tags: package
+
+- include: freebsd.yml
+  when: ansible_os_family == 'FreeBSD'
+  tags: package
+
+- include: redhat.yml
+  when: ansible_os_family == 'RedHat'
+  tags: package
+
+- include: windows.yml
+  when: ansible_os_family == 'Windows'
+  tags: package

ansible/roles/system-base-update/tasks/redhat.yml

@@ -0,0 +1,5 @@
+---
+- name: Upgrade all RPM packages
+  yum:
+    name: '*'
+    state: latest

ansible/roles/system-base-update/tasks/windows.yml

@@ -0,0 +1,8 @@
+---
+# Install all security, critical, and rollup updates
+- name: Install Windows updates
+  win_updates:
+    category_names:
+      - SecurityUpdates
+      - CriticalUpdates
+      - UpdateRollups

ansible/roles/system-package-update/README.md

@@ -0,0 +1,20 @@
+System package update
+=====================
+
+Update packages with the system package manager.  Supports the
+following systems:
+
+- FreeBSD (pkgng)
+- Linux/RedHat (yum)
+- Linux/Debian (apt)
+- MacOS X (homebrew)
+
+Requirements
+------------
+
+None.
+
+Author Information
+------------------
+
+ome-devel@lists.openmicroscopy.org.uk

ansible/roles/system-package-update/defaults/main.yml

@@ -0,0 +1,2 @@
+---
+# Defaults

ansible/roles/system-package-update/meta/main.yml

@@ -0,0 +1 @@
+---

ansible/roles/system-package-update/tasks/apt.yml

@@ -0,0 +1,8 @@
+---
+- name: Update Debian APT repositories
+  apt:
+    update_cache: yes
+
+- name: Upgrade Debian packages
+  apt:
+    upgrade: safe

ansible/roles/system-package-update/tasks/homebrew.yml

@@ -0,0 +1,14 @@
+---
+- name: Update and upgrade homebrew packages
+  homebrew:
+    update_homebrew: yes
+    upgrade_all: yes
+
+- name: Clean up homebrew
+  command: brew cleanup
+
+- name: Prune stale homebrew links
+  command: brew prune
+
+- name: Check homebrew for problems
+  command: brew doctor

ansible/roles/system-package-update/tasks/main.yml

@@ -0,0 +1,20 @@
+---
+- include: homebrew.yml
+  when: ansible_pkg_mgr == 'homebrew'
+  tags: package
+  become: true
+  become_user: "{{homebrew_user}}"
+  environment:
+    PATH: "/usr/local/bin:/usr/local/sbin:{{ ansible_env.PATH }}"
+
+- include: apt.yml
+  when: ansible_pkg_mgr == 'apt'
+  tags: package
+
+- include: pkgng.yml
+  when: ansible_pkg_mgr == 'pkgng'
+  tags: package
+
+- include: yum.yml
+  when: ansible_pkg_mgr == 'yum'
+  tags: package

ansible/roles/system-package-update/tasks/pkgng.yml

@@ -0,0 +1,12 @@
+---
+- name: Update FreeBSD package list
+  command: pkg update -q
+  become: yes
+
+- name: Upgrade FreeBSD packages
+  command: pkg upgrade -y
+  become: yes
+
+- name: Clean FreeBSD package cache
+  command: pkg clean -qy
+  become: yes

ansible/roles/system-package-update/tasks/yum.yml

@@ -0,0 +1,5 @@
+---
+- name: Upgrade all RPM packages
+  yum:
+    name: '*'
+    state: latest

ansible/system-update.yml

@@ -0,0 +1,8 @@
+---
+# Apply operating system and package updates
+
+- hosts: all
+  roles:
+    - role: system-base-update
+    - role: system-package-update
+