ansible/playbooks/rkhunter_update.yml

# requires --extra-vars="target='host1;host2;group etc' yumcommand=update'"

- name: update all run rkhunter if installed
  hosts: $target
  user: root

  tasks:
  - name: expire-caches
    action: command yum clean expire-cache
    
  - name: yum -y ${yumcommand}
    action: command yum -y ${yumcommand}
    async: 7200
    poll: 15

  - name: check for rkhunter
    action: command /usr/bin/test -f /usr/bin/rkhunter
    register: rkhunter
    ignore_errors: true
  
  - name: run rkhunter --propupd
    action: command /usr/bin/rkhunter --propupd
    when: rkhunter|success
migrate all the script-like playbooks such that the primary host-spec is the same variable: $target 2013-03-04 22:37:13 +00:00			`# requires --extra-vars="target='host1;host2;group etc' yumcommand=update'"`
firt cut of package-update playbook - needs testing 2012-12-10 18:19:36 +00:00
			`- name: update all run rkhunter if installed`
migrate all the script-like playbooks such that the primary host-spec is the same variable: $target 2013-03-04 22:37:13 +00:00			`hosts: $target`
firt cut of package-update playbook - needs testing 2012-12-10 18:19:36 +00:00			`user: root`

			`tasks:`
add expire-cache to package update playbook 2012-12-10 19:42:33 +00:00			`- name: expire-caches`
			`action: command yum clean expire-cache`

			`- name: yum -y ${yumcommand}`
add ${yumcommand} so we can pass in manual excludes 2012-12-10 18:21:04 +00:00			`action: command yum -y ${yumcommand}`
make package-update use yum polling too 2013-02-27 21:31:53 +00:00			`async: 7200`
			`poll: 15`
firt cut of package-update playbook - needs testing 2012-12-10 18:19:36 +00:00
			`- name: check for rkhunter`
			`action: command /usr/bin/test -f /usr/bin/rkhunter`
			`register: rkhunter`
gotta ignore errors on the test, dumbass 2012-12-10 18:25:32 +00:00			`ignore_errors: true`
firt cut of package-update playbook - needs testing 2012-12-10 18:19:36 +00:00
			`- name: run rkhunter --propupd`
			`action: command /usr/bin/rkhunter --propupd`
clean up some only_if's to make them 'when's and easier to read 2013-07-05 17:15:37 +00:00			`when: rkhunter\|success`
firt cut of package-update playbook - needs testing 2012-12-10 18:19:36 +00:00