aboutsummaryrefslogblamecommitdiffstatshomepage
path: root/roles/apt/tasks/unattended_upgrades.yml
blob: e9fdd05ee99d528cd7ab88ccb8a35d12ba4ece99 (plain) (tree)
1
2
3
4
5
6
                                   
              
                      

                             
                             


























                                                                            
- name: Install unattended-upgrades
  become: true
  ansible.builtin.apt:
    name: unattended-upgrades
    state: present
    install_recommends: false

- name: 50unattended-upgrades
  become: true
  ansible.builtin.template:
    src: 50unattended-upgrades.j2
    dest: /etc/apt/apt.conf.d/50unattended-upgrades
    owner: root
    group: root
    mode: '644'

# https://wiki.debian.org/UnattendedUpgrades says that 20auto-upgrades and
# 02periodic are _alternatives_ (and, presumably, not mechanisms that can be
# used together).
- name: 20auto-upgrades
  become: true
  ansible.builtin.file:
    path: /etc/apt/apt.conf.d/20auto-upgrades
    state: absent

- name: 02periodic
  become: true
  ansible.builtin.template:
    src: 02periodic.j2
    dest: /etc/apt/apt.conf.d/02periodic
    owner: root
    group: root
    mode: '644'