How to Patch Ubuntu Servers Safely Using Ansible and AWX in Production
A DevOps engineer has shared a structured, production-tested approach to patching Ubuntu Linux servers using Ansible playbooks orchestrated through AWX. The workflow is divided into four sequential phases — pre-check, patch, post-check, and validate — each running as a separate AWX job template controlled by Ansible tags. A manual approval node is placed between the pre-check and patch phases, allowing engineers to review disk space, kernel versions, and application status before any changes are made to live servers. The playbook stops the running application before applying updates and restarts it after reboot, with the specific stop and start commands configurable for any environment. Servers are patched one at a time using Ansible's serial setting to prevent a failure on one host from affecting others.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)
Log in to join the discussion and vote.
Log in