Merge pull request #4 from rossijonas/feature/security-updates

Feature/security updates

README.md

@@ -24,7 +24,7 @@ This Ansible role:
 
 ### `dnfupdate_security_only`
 
-Set the role to apply only updates marked as security updates, instead of 
+Set the role to only apply updates marked as security updates.
 
 * **Type**: bool
 * **Default**: `false`
@@ -53,7 +53,9 @@ Set the role to apply only updates marked as security updates, instead of
   $ ansible-galaxy install -r requirements.yml
   ```
 
-## Example Playbook
+## Example Playbooks
+
+* Apply all updates available:
 
 ```
 ---
@@ -62,6 +64,17 @@ Set the role to apply only updates marked as security updates, instead of
     - dnfupdate
 ```
 
+* Apply security updates only:
+
+```
+---
+- hosts: servers
+  roles:
+    - role: dnfupdate
+      vars: 
+        dnfupdate_security_only: true
+```
+
 ## License
 
 MIT

molecule/default/converge.yml

@@ -2,6 +2,11 @@
 - name: Converge
   hosts: all
   tasks:
-    - name: "Include rossijonas.dnfupdate"
+    - name: "Apply all available updates."
       include_role:
         name: "rossijonas.dnfupdate"
+    - name: "Apply security updates only."
+      include_role:
+        name: "rossijonas.dnfupdate"
+      vars:
+        dnfupdate_security_only: true

tasks/main.yml

@@ -1,12 +1,13 @@
 ---
-- name: Update all installed packages using YUM module
+- name: Apply updates using dnf module.
   dnf:
     name: '*'
+    security: '{{ dnfupdate_security_only }}'
     state: latest
     update_cache: true
     update_only: true
   register: dnfupdate_status
 
-- name: Remove packates not needed anymore
+- name: Remove packages not needed anymore
   dnf:
     autoremove: true