Update apt packages: Idempotency?

strarsis · September 11, 2019, 4:44pm

In each playbook run there is one change, that is the updating of apt packages, as included here:

roots/trellis/blob/faaf213ae2186c6ccf55159becd8910e20c82bf1/roles/common/tasks/main.yml#L113


  assert:
    that:
      - overlapping_ciphers | count
      - overlapping_kex | count
      - overlapping_macs | count
      - overlapping_host_keys | count
    msg: "{{ lookup('template', 'validate_ssh_msg.j2') }}"
  when: openssh_6_8_plus and validate_ssh | default(true)
  tags: [sshd]


- name: Update apt packages
  apt:
    update_cache: yes


- name: Checking essentials
  apt:
    name: "{{ item.key }}"
    state: "{{ item.value }}"
    cache_valid_time: "{{ apt_cache_valid_time }}"
  with_dict: "{{ apt_packages }}"

Would it make sense to make this more idempotent? Sure, when the apt packages are updatd, it is a state change, but only when really the apt cache/index changed afterwards, e.g. new updates becoming available?

system · October 23, 2019, 4:44pm

This topic was automatically closed after 42 days. New replies are no longer allowed.