From cbd79156f1ceb2a830dd18e9766b9016257433b2 Mon Sep 17 00:00:00 2001 From: Jason Rothstein Date: Sun, 2 Aug 2026 23:36:10 -0500 Subject: [PATCH] Force updated caches for OS patching. Just because it works without it for Fedora, doesn't mean that was safe for Debian based OS or even some EL based OS. --- roles/ensure_os_patch/tasks/main.yml | 19 ++++++++++++++++--- 1 file changed, 16 insertions(+), 3 deletions(-) diff --git a/roles/ensure_os_patch/tasks/main.yml b/roles/ensure_os_patch/tasks/main.yml index b0d0139..26673c5 100644 --- a/roles/ensure_os_patch/tasks/main.yml +++ b/roles/ensure_os_patch/tasks/main.yml @@ -51,17 +51,30 @@ ansible.builtin.apt: autoclean: 'yes' autoremove: 'yes' + update_cache: 'yes' upgrade: 'dist' notify: - 'ensure_os_patch.package_facts' - 'ensure_os_patch.service_facts' -- name: 'ensure dnf or yum patch' +- name: 'ensure dnf' when: - ansible_facts["system"] == 'Linux' - - ansible_facts["pkg_mgr"] == 'dnf' or ansible_facts["pkg_mgr"] == 'dnf5' or ansible_facts["pkg_mgr"] == 'yum' - ansible.builtin.package: + - ansible_facts["pkg_mgr"] == 'dnf' + ansible.builtin.dnf: name: '*' state: 'latest' + update_cache: 'yes' + notify: + - 'ensure_os_patch.package_facts' + - 'ensure_os_patch.service_facts' +- name: 'ensure dnf5' + when: + - ansible_facts["system"] == 'Linux' + - ansible_facts["pkg_mgr"] == 'dnf5' + ansible.builtin.dnf5: + name: '*' + state: 'latest' + update_cache: 'yes' notify: - 'ensure_os_patch.package_facts' - 'ensure_os_patch.service_facts'