win_updates Add information/example wrt. reboots (#49834)
This documents two common issues related to rebooting Windows systems. - Updates can take a long time being applied during reboot - Reboots can cause the WinRM service to start before system has settled
This commit is contained in:
parent
e944dba166
commit
994ce2126a
2 changed files with 23 additions and 7 deletions
|
@ -87,17 +87,18 @@ EXAMPLES = r'''
|
|||
win_reboot:
|
||||
when: iis_install.reboot_required
|
||||
|
||||
# One way to ensure the system is reliable, is to add a delay before running the next task
|
||||
- name: Reboot a machine that takes time to settle after being booted
|
||||
win_reboot:
|
||||
post_reboot_delay: 120
|
||||
|
||||
# Alternatively, you can set WinRM to a delayed startup
|
||||
# One way to ensure the system is reliable, is to set WinRM to a delayed startup
|
||||
- name: Ensure WinRM starts when the system has settled and is ready to work reliably
|
||||
win_service:
|
||||
name: WinRM
|
||||
start_mode: delayed
|
||||
|
||||
|
||||
# Additionally, you can add a delay before running the next task
|
||||
- name: Reboot a machine that takes time to settle after being booted
|
||||
win_reboot:
|
||||
post_reboot_delay: 120
|
||||
|
||||
# Or you can make win_reboot validate exactly what you need to work before running the next task
|
||||
- name: Validate that the netlogon service has started, before running the next task
|
||||
win_reboot:
|
||||
|
|
|
@ -99,10 +99,13 @@ notes:
|
|||
- C(win_updates) must be run by a user with membership in the local Administrators group.
|
||||
- C(win_updates) will use the default update service configured for the machine (Windows Update, Microsoft Update, WSUS, etc).
|
||||
- By default C(win_updates) does not manage reboots, but will signal when a
|
||||
reboot is required with the I(reboot_required) return value, as of Ansible 2.5
|
||||
reboot is required with the I(reboot_required) return value, as of Ansible v2.5
|
||||
C(reboot) can be used to reboot the host if required in the one task.
|
||||
- C(win_updates) can take a significant amount of time to complete (hours, in some cases).
|
||||
Performance depends on many factors, including OS version, number of updates, system load, and update server load.
|
||||
- Beware that just after C(win_updates) reboots the system, the Windows system may not have settled yet
|
||||
and some base services could be in limbo. This can result in unexpected behavior.
|
||||
Check the examples for ways to mitigate this.
|
||||
- More information about PowerShell and how it handles RegEx strings can be
|
||||
found at U(https://technet.microsoft.com/en-us/library/2007.11.powershell.aspx).
|
||||
'''
|
||||
|
@ -148,6 +151,18 @@ EXAMPLES = r'''
|
|||
blacklist:
|
||||
- Windows Malicious Software Removal Tool for Windows
|
||||
- \d{4}-\d{2} Cumulative Update for Windows Server 2016
|
||||
|
||||
# One way to ensure the system is reliable just after a reboot, is to set WinRM to a delayed startup
|
||||
- name: Ensure WinRM starts when the system has settled and is ready to work reliably
|
||||
win_service:
|
||||
name: WinRM
|
||||
start_mode: delayed
|
||||
|
||||
# Optionally, you can increase the reboot_timeout to survive long updates during reboot
|
||||
- name: Ensure we wait long enough for the updates to be applied during reboot
|
||||
win_updates:
|
||||
reboot: yes
|
||||
reboot_timeout: 3600
|
||||
'''
|
||||
|
||||
RETURN = r'''
|
||||
|
|
Loading…
Reference in a new issue