Added halt task if repo did not switch.

2026-04-30 15:17:34 -07:00
parent d0043c3033
commit fa1b39201f
1 changed files with 7 additions and 0 deletions
--- a/roles/pfsense_upgrade/tasks/upgrade.yml
+++ b/roles/pfsense_upgrade/tasks/upgrade.yml
@@ -84,6 +84,13 @@
    - perform_upgrade | bool
    - _verify_repo_switch.stdout | trim == upgrade_target_repo

+- name: Halt if repository switch failed
+  ansible.builtin.fail:
+    msg: "Repo is still {{ _verify_repo_switch.stdout | trim }}, expected {{ upgrade_target_repo }}. Stopping to prevent false positive upgrade."
+  when: 
+    - perform_upgrade | bool
+    - _verify_repo_switch.stdout | trim != upgrade_target_repo
+    
 # ---------------------------------------------------------------------------
 # 2. Execute the upgrade (with retry for lock error RC=99)
 # ---------------------------------------------------------------------------