Home / server / Questions / 1075022
In Process
pugazhendhi
Asked: 2021-08-20 01:34:17 +0800 CST

Apply Security patches using zypper module

  • 772

Do we have any options to apply security patches only with Zypper ansible module for suse linux server. We don't want to use shell or command module and incorporate the command.

Equivalent command shell: zypper patch --category=security

ansible ansible-playbook zypper

1 Answers

  1. Some Ansible modules, including zypper, have parameters that allow arbitrary extra options. To go beyond the documented examples, get creative by adding what you already know works without Ansible.

    zypper module doc has an example of applying patches. Which just leaves filtering by category security:

    - name: Apply security patches
  zypper:
    name: '*'
    state: latest
    type: patch
    extra_args: '--category=security'

    name: '*' is an Ansible convention for all packages. Read the module code to see that is is implmented as zypper patch without a package argument.

    • 1