47 lines
861 B
YAML
47 lines
861 B
YAML
---
|
|
- name: Ensure aptitude installed
|
|
ansible.builtin.apt:
|
|
name: "aptitude"
|
|
state: present
|
|
tags:
|
|
- apt
|
|
become: true
|
|
|
|
- name: Ensure OS upgraded
|
|
ansible.builtin.apt:
|
|
upgrade: dist
|
|
tags:
|
|
- apt
|
|
- update
|
|
- os
|
|
become: true
|
|
|
|
- name: Check if reboot is necessary
|
|
register: reboot_required_file
|
|
ansible.builtin.stat:
|
|
path: /var/run/reboot-required
|
|
get_checksum: false
|
|
tags:
|
|
- os
|
|
- reboot
|
|
notify: Reboot host
|
|
|
|
- name: All system packages updated
|
|
ansible.builtin.apt:
|
|
name: "*"
|
|
state: latest # noqa package-latest
|
|
tags:
|
|
- apt
|
|
- update
|
|
- packages
|
|
become: true
|
|
|
|
- name: Add authorized SSH keys
|
|
ansible.posix.authorized_key:
|
|
user: marty # FIXME: don't hardoce user
|
|
state: present
|
|
key: "{{ item }}"
|
|
loop: "{{ system_authorized_keys }}"
|
|
tags:
|
|
- ssh
|
|
become: true
|