rothgar / ansible-yum-security-updates

Automatically apply security updates to EPEL servers

Automatic yum-security updates

Note

This is old code. I no longer use this role but am leaving this here for reference for anyone looking to do something similar. Also, as pointed out to me, this won't work on CentOS because CentOS repos don't tag packages for security updates

This Ansible playbook will automatically install two packages

• yum-cron
• yum-plugin-security (yum-security on rhel5)

It will then configure the packages to run yum updates using the yum --security update-minimal command every morning.

This will also enable install the EPEL repo if you're using RHEL5 or temporarily enable the rhel-6-server-optional-rpms repo for RHEL6. This will require that you are registered with RedHat.

ansible-yum-security-updates's Issues

Will not work on CentOS

Per this forum discussion: https://www.centos.org/forums/viewtopic.php?f=47&t=51300 - the security meta-data may be present in EPEL, but not the main CentOS repositories, so installing this set of tools will not help you to install security-only updates on CentOS, only RedHat. Beware.

fatal: [logserver01]: FAILED! => {"changed": false, "failed": true, "msg": "unsupported parameter for module: security"}

Hello,
I constantly get these ansible errors. Could you explain how to sort it out please?

fatal: [logserver01]: FAILED! => {"changed": false, "failed": true, "msg": "unsupported parameter for module: security"}
fatal: [logserver02]: FAILED! => {"changed": false, "failed": true, "msg": "unsupported parameter for module: security"}
fatal: [logserver03]: FAILED! => {"changed": false, "failed": true, "msg": "unsupported parameter for module: security"}