Ansible/Playbooks/Ubuntu_updates_preprod.yaml

---
- hosts: all
  gather_facts: yes
  become: yes

  tasks:
    - name: Perform a dist-upgrade.
      ansible.builtin.apt:
        upgrade: dist
        update_cache: yes

    - name: Generate list of updated packages
      shell: dpkg --list | grep "^ii" | awk '{print $2"="$3}' > /home/ansible@AD.HAGOOD.US/updates.txt      

    - name: Copy updates list to control node
      fetch:
        src: /home/ansible@AD.HAGOOD.US/updates.txt
        dest: /home/ansible@AD.HAGOOD.US/updates.txt
        flat: yes
      delegate_to: preprod-group

    - name: Check if a reboot is required.
      ansible.builtin.stat:
        path: /var/run/reboot-required
        get_md5: no
      register: reboot_required_file

    - name: Reboot the server (if required).
      ansible.builtin.reboot:
      when: reboot_required_file.stat.exists == true

    - name: Remove dependencies that are no longer required.
      ansible.builtin.apt:
        autoremove: yes