** Using Ansible to Patch Linux Servers **

< !!! INTERNAL USE ONLY !!! >
Not for distribution directly to end user

Overview

The KB is intended for Systems Engineers.  Access to COLANSIBLE with the ansible user account is required. The intent is a simple procedure. Full Ansible Run Book can be found at this link. Link

Warning:

  • Be certain to use the -l parameter to limit which servers the updates run against.  Otherwise, all servers will be affected.

Operational Notes:

  • Update files are retrieved from http://colrepo.ccbcmd.edu. This configuration can be viewed/verified in the /etc/yum.repos.d/ccbc.repo
  • This update process does not reboot or configure a future reboot.

Procedure

  1. Sign into ansible@colansible.ccbcmd.eduUploaded Image (Thumbnail)
  2. Make sure current directory is /home/ansible/CCBCAnsible
  3. If you are unsure of a host name, search the yml files in the inventory folder.
  4. Two playbooks exist, full_updates.yml and security_updates.yml
    1. full_updates.yml updates everything for that release.
    2. security_updates.yml updates applies only security related patches.
  5. Execute the play book by: ansible-playbook -i inventory -l 'clsvn.ccbc.ccbcmd.edu' ./security_updates.ymlUploaded Image (Thumbnail)
    Note the use of the -l parameter. In this case, the security updates proceeded correctly.

 

 

Print Article