CentOS Security Updates

This Ansible Role sets up security updates for CentOS using the Updateinfo repository. This is a yum repository that has information about CentOS updates.

Requirements

You can support the Updateinfo project by becoming a patron on Patreon. It costs $1 per month and helps maintain the site and pay for Amazon CloudFront to deliver the content.

Role Variables

Here are the available variables with their default values (check defaults/main.yml for details):

• centos_security_updates_enabled: yes

  • Set this to enable or disable the updates yum repository.

• centos_security_updates_file: CentOS-Errata

  • This is the name of the repository file saved in /etc/yum.repos.d/. The default file is CentOS-Errata.repo.

• centos_security_updates_name: errata

  • This is the unique ID used for the repository section name in the repo file.

• centos_security_updates_endpoint: updateinfo.cefs.steve-meier.de

  • This is the domain endpoint for the updates repository.

• centos_security_updates_email: you@example.com

• centos_security_updates_password: PASSWORD

  • These are the email and password you got from Steve Meier <email (at) steve (dash) meier (dot) de> (not your Patreon login details).

• centos_security_updates_yum_update_cmd: security

  • This specifies the type of updates to run with yum-cron (if it's enabled), such as default, security, minimal, etc.

Dependencies

• geerlingguy.security

Example Playbook

- hosts: all
  become: yes
  vars:
    - centos_security_updates_email: [email protected]
    - centos_security_updates_password: PASSWORD
  roles:
    - memiah.centos-security-updates

License

MIT / BSD

Author Information

This role was created in 2019 by Memiah Limited.