Update role

Install system and package updates.

The Ansible Update role supports these package managers:

apt
yum
zypper
dnf

Usage

Configure the role.

update: true
reboot_allowed: true

And include it in your playbook.

- hosts: update
  roles:
  - role: update

Troubleshooting

Hetzner InRelease repo expired

Problem

When running the update task it fails with this message:

msg: 'Failed to update apt cache: E:Release file for http://security.debian.org/debian-security/dists/bullseye-security/InRelease is expired (invalid since 1d 9h 4min 35s). Updates for this repository will not be applied., E:Release file for http://mirror.hetzner.com/debian/security/dists/bullseye-security/InRelease is expired (invalid since 1d 9h 4min 35s). Updates for this repository will not be applied.'

Workaround

Use the archive repo.

sudo cp /etc/apt/sources.list /etc/apt/sources.list.bak
sudo sed -i 's|deb http://security.debian.org/debian-security|#deb http://security.debian.org/debian-security|' /etc/apt/sources.list
sudo echo "deb http://archive.debian.org/debian-security bullseye-security main contrib non-free" >> /etc/apt/sources.list
sudo echo 'Acquire::Check-Valid-Until "false";' > /etc/apt/apt.conf.d/10no-check-valid-until
sudo apt-get update
sudo apt-get upgrade

Solution

Upgrade the distro.

Debian InRelease repo expired