Ansible Role: firmware-pcengines-apu

| This role adds the possibility to do firmware updates on PC Engines devices.

It checks if the firmware is already on the target version and flashes the firmware if required. Parameters for automatic reboot and enforcement are optionally available.

For an overview about the available firmware please have a look at PC Engines - Github.

Motivation

Automating firmware updates is essential to a secure environment.

Supported Devices

• PC Engines
  • APU2

Installation

Install from Ansible Galaxy

ansible-galaxy install while_true_do.firmware_pcengines_apu

Install from Github

git clone https://github.com/while-true-do/ansible-role-firmware-pcengines-apu.git while_true_do.firmware_pcengines_apu

Requirements

Used Modules:

• command_module
• fail_module
• file_module
• get_url_module
• include_tasks_module
• package_module
• unarchive_module

Dependencies

This role depends on the below roles. You have to install them:

• reboot
• repo-epel

ansible-galaxy install -r requirements.yml

Role Variables

# defaults/main.yml for firmware_pcengines_apu

wtd_firmware_pcengines_apu_packages:
 - dmidecode
 - flashrom

# target BIOS version
# example: "v4.8.0.1"
wtd_firmware_pcengines_apu_bios_version: ""

# enforce flashing regardless of version
wtd_firmware_pcengines_apu_force_flash: false

# reboot after flash
wtd_firmware_pcengines_apu_autoreboot: false

Example Playbook

Simple Example:

- hosts: servers
  roles:
    - { role: while_true_do.firmware_pcengines_apu }

Advanced Example:

- hosts: servers
  roles:
    - { role: while_true_do.firmware_pcengines_apu, wtd_firmware_pcengines_apu_autoreboot: true, wtd_firmware_pcengines_apu_force_flash: true }

Testing

All tests are located in test directory.

Basic testing:

bash ./tests/test-spelling.sh
bash ./tests/test-ansible.sh

Contribute / Bugs

Thank you so much for considering to contribute. Every contribution helps us. We are really happy, when somebody is joining the hard work. Please have a look at the links first.

• Code of Conduct
• Contribution Guidelines
• Create an issue or Request
• See who was contributing already

License

This work is licensed under a BSD License.

Author Information

Site: while-true-do.org

Mail: hello@while-true-do.org