Skip to content

Latest commit

 

History

History
101 lines (79 loc) · 2.91 KB

README.md

File metadata and controls

101 lines (79 loc) · 2.91 KB
Raw

Ansible Role - Yum Client

This Ansible Role is used for configuring the .repo files in /etc/yum.repos.d to allow CentOS/RHEL clients to install/update from custom yum repositories.

Useful in disconnected environments with no internet access

TODO

  • Do gpgcheck properly

Known Issues

  • After running a yum update on a fresh CentOS install, the default .repo files are recreated
    • This is solved by rerunning some code in the update.yml task to remove .repo files and recreate the .repo template again.

Role Variables

Configure this role to purge ALL .repo files in /etc/yum.repos.d directory. This is pretty useful if you want all of your CentOS servers to have clean directories to make it easier to manage your repo files.

# Default: false
yum_repo_remove_old_repo_files: true

Configure this role to perform a yum update, this will update ALL packages on the CentOS server.

# Default: false
yum_update_packages: true

Configure the name and directory for the .repo files to be in

yum_repo_file_name: rhel.repo

# This will create /etc/yum.repos.d/rhel.repo

Configure the standard CentOS repository URLS

yum_repo_host_url: https://yum.example.com/centos
# That will become https://yum.example.com/centos/$releasever/os/$basearch/ for example

# Enable/disable which ones you want
# Defaults:
yum_repo_enable_base: 1
yum_repo_enable_updates: 1
yum_repo_enable_extras: 0
yum_repo_enable_centosplus: 0
yum_repo_enable_epel: 0

Configure the EPEL URL

epel_repo_host_url: https://epel.example.com/epel

# Which will become https://epel.example.com/epel/$releasever/$basearch/

Configure whether or not to enable gpgchecks

# Default is 0 (disabled)
yum_enable_gpgcheck: 1

Configure extra custom repos, for example Docker-CE

yum_repo_custom_repos: []
  - name: docker-ce
    description: Docker CE Stable - $basearch
    base_url:  "https://docker.example.com/docker-ce/centos/$releasever/$basearch/stable"
    enabled: 1
    gpgcheck: 0

Configure Yum-cron

# Enable or Disable, default is disabled
yum_cron_enabled: true

#  What kind of update to use:
# default                            = yum upgrade
# security                           = yum --security upgrade
# security-severity:Critical         = yum --sec-severity=Critical upgrade
# minimal                            = yum --bugfix update-minimal
# minimal-security                   = yum --security update-minimal
# minimal-security-severity:Critical =  --sec-severity=Critical update-minimal
yum_cron_update_cmd: default

# Whether a message should be emitted when updates are available,
# were downloaded, or applied
yum_cron_update_messages: "yes"

# Whether updates should be downloaded when they are available.
yum_cron_download_updates: "yes"

# Whether updates should be applied when they are available.  Note
# that download_updates must also be yes for the update to be applied.
yum_cron_apply_updates: "yes"