base und sysupgrade role, some hardening

2021-06-13 00:15:16 +02:00
parent f00a20491a
commit 708dd41417
12 changed files with 183 additions and 19 deletions
--- a/roles/linux/upgrade/tasks/main.yml
+++ b/roles/linux/upgrade/tasks/main.yml
@@ -0,0 +1,14 @@
+---
+- name: system upgrade
+  package:
+    name: "*"
+    state: latest
+
+- name: autoremove
+  dnf:
+    autoremove: true
+  when: ansible_os_family == "RedHat"
+
+- name: fstrim
+  shell:
+    cmd: fstrim -va