Problem: I have many nodes that need package updates. Some of the nodes have these packages installed and some do not. The goal is to 1. check if a package is installed us
The Ansible loops documentation has a section about using register in a loop.
Taking a look at the output of your debug task, you can see that your packages variable has a key named results that contains the results of your with_items loop in the first task. The large structure looks like this:
{
"packages":{
"changed":false,
"msg":"All items completed",
"results":[
{
"item":"...",
"results":[
]
},
{
"item":"...",
"results":[
]
}
]
}
}
Each individual result has a key item that contains the value of the loop iterator for that result, and a results key that contains the list of packages (possible empty) returned by the list option to the yum module.
With that in mind, you could loop over the results like this:
- debug:
msg: "{{ item.item }}"
with_items: "{{ packages.results }}"
when: item.results
The when condition matches only those results for which the list operation returned a non-empty result.
To upgrade matching packages:
- yum:
name: "{{ item.item }}"
state: latest
with_items: "{{ packages.results }}"
when: item.results
The ansible.builtin.yum: module already updates only if a package is installed. You can loop over a list of items using the loop: directive, or if it's a short list, declare the variable within the task block and use the yum module's ability to operate over a list. Like the quick and dirty version.
- name: update a list of packages
yum:
name: "{{ packagelist }}"
state: latest
vars:
packagelist:
- acpid
- c-ares
- automake
Or, even simpler:
- name: update a list of packages
yum:
name:
- acpid
- c-ares
- automake
state: latest
Many more examples are available and all the parameters are defined here: Ansible Docs article about yum