Do not install recommended packages | refs #33575

ansible/playbooks/migrate-debian.yml

@@ -16,6 +16,7 @@
     - name: dist-upgrade current ubuntu
       apt:
         force_apt_get: true
+        install_recommends: false
         update_cache: true
         dpkg_options: force-confnew
         upgrade: dist
@@ -23,6 +24,7 @@
     - name: autoremove current ubuntu
       apt:
         force_apt_get: true
+        install_recommends: false
         autoclean: true
         autoremove: true
 
@@ -75,12 +77,14 @@
     - name: install debian keyring
       apt:
         force_apt_get: true
+        install_recommends: false
         update_cache: true
         name: debian-archive-keyring
 
     - name: upgrade to debian
       apt:
         force_apt_get: true
+        install_recommends: false
         update_cache: true
         dpkg_options: force-confnew
         upgrade: dist
@@ -88,12 +92,14 @@
     - name: autoremove debian
       apt:
         force_apt_get: true
+        install_recommends: false
         autoclean: true
         autoremove: true
 
     - name: install apt-show-version
       apt:
         force_apt_get: true
+        install_recommends: false
         name: apt-show-version
 
     - name: install debian version of packages
@@ -103,6 +109,7 @@
     - name: upgrade
       apt:
         force_apt_get: true
+        install_recommends: false
         update_cache: true
         dpkg_options: force-confnew
         upgrade: dist
@@ -110,6 +117,7 @@
     - name: autoremove
       apt:
         force_apt_get: true
+        install_recommends: false
         autoclean: true
         autoremove: true
 

ansible/playbooks/upgrade.yml

@@ -9,6 +9,7 @@
       when: ansible_os_family == "Debian"
       apt:
         force_apt_get: true
+        install_recommends: false
         cache_valid_time: 3600
         upgrade: dist
 

ansible/roles/bench-server/tasks/main.yml

@@ -3,9 +3,10 @@
 - name: install bench-server packages
   apt:
     force_apt_get: true
+    install_recommends: false
+    update_cache: yes
     name: "{{ bench_server_packages }}"
     state: latest
-    update_cache: yes
 
 - name: ensure configuration directory exists
   file:
@@ -76,9 +77,11 @@
     - not offline_mode | d(false)
     - not in_docker | d(false)
   apt:
+    force_apt_get: true
+    install_recommends: false
+    update_cache: yes
     name: docker-ce
     state: latest
-    update_cache: yes
 
 - name: generate docker image
   when:

ansible/roles/bench-worker/tasks/main.yml

@@ -3,9 +3,10 @@
 - name: install bench-worker packages
   apt:
     force_apt_get: true
+    install_recommends: false
+    update_cache: yes
     name: "{{ bench_worker_packages }}"
     state: latest
-    update_cache: yes
 
 - name: ensure configuration directory exists
   file:

ansible/roles/cluster/tasks/main.yml

@@ -4,6 +4,7 @@
   when: "'cluster_nodes' in group_names"
   apt:
     force_apt_get: true
+    install_recommends: false
     name: "{{ cluster_nodes_packages }}"
     state: present
 
@@ -11,6 +12,7 @@
   when: "'cluster_qnet' in group_names"
   apt:
     force_apt_get: true
+    install_recommends: false
     name: "{{ cluster_qnet_packages }}"
     state: present
 

ansible/roles/elastic/tasks/main.yml

 ---
 - name: install kibana package
   apt:
-    pkg:
-      - kibana
+    force_apt_get: true
+    install_recommends: false
+    name: kibana
     state: latest
 
 - name: deploy kibana configuration
@@ -13,8 +14,9 @@
 
 - name: install apm-server package
   apt:
-    pkg:
-      - apm-server
+    force_apt_get: true
+    install_recommends: false
+    name: apm-server
     state: latest
 
 - name: deploy apm-server configuration

ansible/roles/fail2ban/tasks/main.yml

@@ -3,6 +3,7 @@
 - name: packages
   apt:
     force_apt_get: true
+    install_recommends: false
     name: "{{ f2b_packages }}"
     state: latest
 

ansible/roles/metricbeat/tasks/main.yml

 ---
 - name: install apt-transport-https
   apt:
+    force_apt_get: true
+    install_recommends: false
     name: apt-transport-https
     state: latest
 
@@ -15,6 +17,8 @@
 
 - name: install metricbeat
   apt:
+    force_apt_get: true
+    install_recommends: false
     name: metricbeat
     state: latest
 

ansible/roles/sysconfig/handlers/main.yml

@@ -2,6 +2,7 @@
 - name: update cache
   apt:
     force_apt_get: true
+    install_recommends: false
     update_cache: true
 
 - name: update locale
@@ -20,6 +21,7 @@
 - name: update cache
   apt:
     force_apt_get: true
+    install_recommends: false
     update_cache: true
 
 - name: systemd daemon reload