virthost_updates: fix logic to not apply all updates when there are excludes

univrese_update: playbook to update all things in inventory.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

playbooks/universe_update.yml

@@ -0,0 +1,65 @@
+#
+# This playboook updates every host in inventory
+#
+
+- name: set downtime
+  hosts: all
+  gather_facts: False
+  user: root
+  serial: 1
+
+  tasks:
+
+  - name: silence nagios completely
+    nagios: action=silence
+    delegate_to: noc01.phx2.fedoraproject.org
+    ignore_errors: true
+    failed_when: no
+    when: nonagios is not defined or not "true" in nonagios
+
+- name: update the world
+  hosts: all
+  gather_facts: True
+  user: root
+
+  tasks:
+
+  - name: Apply updates
+    package:
+        state: latest
+        name: "*"
+        update_cache: true
+    async: 7200
+    poll: 30
+    when: package_excludes is not defined
+  
+  - debug:
+        msg: 
+        - '!!!!!!!!!!!!!!!!!!! host {{ inventory_hostname }} has EXCLUDES OF {{ package_excludes }} !!!!!!!!!!!!!'
+        - '!!!!!!!!!!!!!!!!!!! DANGER DANGER DANGER ^ CHECK THAT EXCLUDES ARE STILL NEEDED ^ !!!!!!!!!!!!!!!!!!!!'
+    when: package_excludes is defined
+    changed_when: true
+  
+  - name: Apply updates with excludes
+    package:
+        state: latest
+        name: "*"
+        update_cache: true
+        exclude: "{{ package_excludes }}"
+    async: 7200
+    poll: 30
+    when: package_excludes is defined
+
+- name: run rkhunter if installed
+  hosts:  all
+  user: root
+
+  tasks:
+  - name: check for rkhunter
+    command: /usr/bin/test -f /usr/bin/rkhunter
+    register: rkhunter
+    ignore_errors: true
+
+  - name: run rkhunter --propupd
+    command: /usr/bin/rkhunter --propupd
+    when: rkhunter is success

playbooks/vhost_update.yml

@@ -50,6 +50,7 @@
         update_cache: true
     async: 7200
     poll: 30
+    when: package_excludes is not defined
   
   - debug:
         msg: