Add remove capability

This commit is contained in:
Adrien Reslinger 2020-04-16 14:12:00 +02:00
parent e6f230be2e
commit 45822f405f
5 changed files with 79 additions and 14 deletions

View file

@ -1,3 +1,4 @@
--- ---
ossec_server: false ossec_server: false
ossec_client: false ossec_client: false
ossec_uninstall: false

View file

@ -2,7 +2,7 @@
- name: Registering Ubuntu Atomic repository - name: Registering Ubuntu Atomic repository
apt_repository: apt_repository:
repo: deb https://updates.atomicorp.com/channels/atomic/ubuntu {{ ansible_distribution_name }} repo: deb https://updates.atomicorp.com/channels/atomic/ubuntu {{ ansible_distribution_name }}
filename: microsoft.list filename: atomic.list
state: present state: present
update_cache: yes update_cache: yes
mode: 0644 mode: 0644
@ -14,7 +14,7 @@
- name: Registering Debian Atomic repository - name: Registering Debian Atomic repository
apt_repository: apt_repository:
repo: deb https://updates.atomicorp.com/channels/atomic/debian {{ ansible_distribution_name }} repo: deb https://updates.atomicorp.com/channels/atomic/debian {{ ansible_distribution_name }}
filename: microsoft.list filename: atomic.list
state: present state: present
update_cache: yes update_cache: yes
mode: 0644 mode: 0644

13
tasks/install.yml Normal file
View file

@ -0,0 +1,13 @@
---
- name: Define repo for {{ ansible_os_family }}
include_tasks: add_repo_{{ ansible_os_family }}.yml
- name: Install OSSEC server packages
package: name='{{ ossec_server_packages }}' state=latest update_cache=yes
when:
- ossec_server == true
- name: Install OSSEC client packages
package: name='{{ ossec_client_packages }}' state=latest update_cache=yes
when:
- ossec_client == true

View file

@ -1,16 +1,23 @@
--- ---
- block:
- name: Include vars for {{ ansible_os_family }} - name: Include vars for {{ ansible_os_family }}
include_vars: "{{ ansible_os_family }}.yml" include_vars: "{{ ansible_os_family }}.yml"
tags:
- config
- name: Define repo for {{ ansible_os_family }} - name: Install OSsec
include_tasks: add_repo_{{ ansible_os_family }}.yml include_tasks: "install.yml"
- name: Install OSSEC server packages
package: name='{{ ossec_server_packages }}' state=latest update_cache=yes
when: when:
- ossec_server == true - not ossec_uninstall|bool
tags:
- install
- name: Install OSSEC client packages - name: Uninstall OSsec
package: name='{{ ossec_client_packages }}' state=latest update_cache=yes include_tasks: "uninstall.yml"
when: when:
- ossec_client == true - ossec_uninstall|bool
tags:
- uninstall
tags:
- ossec

44
tasks/uninstall.yml Normal file
View file

@ -0,0 +1,44 @@
---
- name: Remove OSSEC server packages
package:
name: '{{ ossec_server_packages }}'
state: absent
update_cache: yes
when:
- ossec_server == true
- name: Remove OSSEC client packages
package:
name: '{{ ossec_client_packages }}'
state: absent
update_cache: yes
when:
- ossec_client == true
- name: Remove yum repository definition
file:
path: "{{ item }}"
state: absent
with_items:
- "/etc/yum.repos.d/atomic.repo"
- "/etc/pki/rpm-gpg/RPM-GPG-KEY.atomicorp.txt"
when:
- ansible_os_family == 'RedHat'
- name: Remove Ubuntu Atomic repository
apt_repository:
repo: deb https://updates.atomicorp.com/channels/atomic/ubuntu {{ ansible_distribution_name }}
filename: atomic.list
state: absent
update_cache: yes
when:
- ansible_distribution == "Ubuntu"
- name: Remove Debian Atomic repository
apt_repository:
repo: deb https://updates.atomicorp.com/channels/atomic/debian {{ ansible_distribution_name }}
filename: atomic.list
state: absent
update_cache: yes
when:
- ansible_distribution == "Debian"