More packages

.ansible-lint

@@ -63,6 +63,7 @@ warn_list:
   - experimental # experimental is included in the implicit list
   - no-changed-when
   - latest[git]
+  - package-latest
   - var-naming[no-role-prefix]
   # - role-name
   # - yaml[document-start]  # you can also use sub-rule matches

play.sh

@@ -3,6 +3,8 @@
 HOSTS="$1"
 
 case $HOSTS in
+*:*)
+    ROLES="['virt-common']" ;;
 *app*)
     ROLES="['virt-common', 'docker', 'apps']" ;;
 *db*)

roles/virt-common/handlers/main.yml

@@ -15,3 +15,8 @@
   ansible.builtin.service:
     name: systemd-resolved
     state: restarted
+
+- name: Upgrade system packages
+  ansible.builtin.dnf:
+    name: '*'
+    state: latest

roles/virt-common/tasks/main.yml

@@ -48,6 +48,7 @@
       - epel-release
       - rocky-release-security
     state: present
+  notify: Upgrade system packages
 
 - name: Install system packages
   ansible.builtin.dnf:
@@ -58,6 +59,8 @@
       - htop
       - jq
       - logrotate
+      - lsof
+      - microcode_ctl
       - mtr
       - rsyslog
       - telnet