pez-infra/ansible/playbooks/update-all.yml

---
# Update all hosts (apt upgrade).
# Usage: ansible-playbook playbooks/update-all.yml

- name: Update Linux hosts (apt)
  hosts: linux
  ignore_unreachable: true
  tags: [update, linux]
  tasks:
    - name: Apt update + upgrade + autoremove
      ansible.builtin.apt:
        update_cache: true
        upgrade: dist
        autoremove: true
        autoclean: true
      register: apt_result

    - name: Show upgrade summary
      ansible.builtin.debug:
        msg: "{{ apt_result.stdout_lines | default(['No output']) }}"

    - name: Check if reboot is required
      ansible.builtin.stat:
        path: /var/run/reboot-required
      register: reboot_required

    - name: Notify if reboot needed
      ansible.builtin.debug:
        msg: "WARNING: REBOOT REQUIRED on {{ inventory_hostname }}"
      when: reboot_required.stat.exists