# vim:ts=2:sw=2:et:filetype=ansible
---
- name: Check if ezjail is available
  ansible.builtin.stat:
    path: /usr/local/bin/ezjail-admin
  tags:
    - always
  register: ezjail_available

- name: Perform ezjail updates when ezjail-admin is available
  when: ezjail_available.stat.exists
  block:
    - name: Install updates (ezjail)
      ansible.builtin.command:
        cmd: /usr/local/bin/ezjail-admin update -u
      changed_when: true
      register: installupdates_ezjail

    - name: Show results of install updates (ezjail)
      ansible.builtin.debug:
        verbosity: 1
        msg: '{{ installupdates_ezjail.stdout }}'

  # XXX etcupdate in blind mode / certificate stuff
  #