openstack
/
ansible-hardening
Code Issues Proposed changes

Change package state to 'present' 

This patch switches the package state for all packages installed
by the security role to `present`. This change should speed up
the run time of the security role and it avoids unexpected package
upgrades on systems that run the security role on a recurring basis.

Change-Id: I28bcc1c0ebf266909bbde554411f68fde0e64a58
This commit is contained in:
Major Hayden 2016-11-14 14:17:57 -06:00
parent 0fbf1cc09d
commit 8efb23599c
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
defaults/main.yml
View File

@ -28,7 +28,7 @@ cache_timeout: 600
# Set the package install state for distribution packages
# Options are 'present' and 'latest'
security_package_state: "latest"
security_package_state: present
###############################################################################
# ____ _ _ _____ _ __ ____ _____ ___ ____

7
releasenotes/notes/package-state-present-951161faa5384abd.yaml Normal file
View File

@ -0,0 +1,7 @@
---
upgrade:
- The security role will accept the currently installed version of a package
rather than attempting to update it. This reduces unexpected changes on
the system from subsequent runs of the security role. Deployers can still
set ``security_package_state`` to ``latest`` to ensure that all packages
installed by the security role are up to date.