summaryrefslogtreecommitdiffstats
path: root/roles/common/tasks/apt.yml
blob: f44431593b4258955b542658bc2e602c5aeed62f (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
- name: Install various APT tools
  apt: pkg={{ item }}
  with_items:
    - apt
    - apt-listchanges
    - apt-show-versions
    - debian-archive-keyring
    - debian-goodies
    - needrestart
    - unattended-upgrades
    - debfoster
    - deborphan
    - debsecan
    - debsums

- name: Configure APT (1)
  template: src=etc/apt/{{ item }}.j2
            dest=/etc/apt/{{ item }}
            owner=root group=root
            mode=0644
  with_items:
    - sources.list
    - preferences
  notify:
    - apt-get update

- name: Configure APT (2)
  copy: src=etc/apt/{{ item }}
        dest=/etc/apt/{{ item }}
        owner=root group=root
        mode=0644
  with_items:
    - listchanges.conf
    - apt.conf.d/10periodic
    - apt.conf.d/50unattended-upgrades

- name: Configure the Debian Security Analyzer
  template: src=etc/default/debsecan.j2
            dest=/etc/default/debsecan
            owner=root group=root
            mode=0644

- name: Start cron
  service: name=cron state=started
  tags:
    - cron

# We should run 'apt-get update' before proceeding to any other task.
- meta: flush_handlers