diff options
| author | Egor Tensin <egor@tensin.name> | 2024-11-05 11:23:31 +0100 |
|---|---|---|
| committer | Egor Tensin <egor@tensin.name> | 2024-11-05 11:23:31 +0100 |
| commit | e47b47cd8797dc45a03d0e4f5079cb69fce16b8b (patch) | |
| tree | 61f2915cedfe0ed58c178b0df838b4031415e0c9 | |
| parent | split out debian_server from debian_cloud_server (diff) | |
| download | infra-ansible-e47b47cd8797dc45a03d0e4f5079cb69fce16b8b.tar.gz infra-ansible-e47b47cd8797dc45a03d0e4f5079cb69fce16b8b.zip | |
apt: add a helpful comment to 50unattended-upgrades
| -rw-r--r-- | roles/apt/templates/50unattended-upgrades.j2 | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/roles/apt/templates/50unattended-upgrades.j2 b/roles/apt/templates/50unattended-upgrades.j2 index 389bb2b..57c8d20 100644 --- a/roles/apt/templates/50unattended-upgrades.j2 +++ b/roles/apt/templates/50unattended-upgrades.j2 @@ -1,5 +1,25 @@ {{ ansible_managed | comment }} +// Lines below have the format format is "keyword=value,...". A +// package will be upgraded only if the values in its metadata match +// all the supplied keywords in a line. (In other words, omitted +// keywords are wild cards.) The keywords originate from the Release +// file, but several aliases are accepted. The accepted keywords are: +// a,archive,suite (eg, "stable") +// c,component (eg, "main", "contrib", "non-free") +// l,label (eg, "Debian", "Debian-Security") +// o,origin (eg, "Debian", "Unofficial Multimedia Packages") +// n,codename (eg, "jessie", "jessie-updates") +// site (eg, "http.debian.net") +// The available values on the system are printed by the command +// "apt-cache policy", and can be debugged by running +// "unattended-upgrades -d" and looking at the log file. +// +// Within lines unattended-upgrades allows 2 macros whose values are +// derived from /etc/debian_version: +// ${distro_id} Installed origin. +// ${distro_codename} Installed codename (eg, "buster") + Unattended-Upgrade::Origins-Pattern { "origin=${distro_id},codename=${distro_codename}"; "origin=${distro_id},codename=${distro_codename}-security"; |