aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/roles/apt/tasks/unattended_upgrades.yml
diff options
context:
space:
mode:
authorEgor Tensin <Egor.Tensin@gmail.com>2023-08-11 09:17:50 +0200
committerEgor Tensin <Egor.Tensin@gmail.com>2023-08-11 19:04:51 +0200
commit1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0 (patch)
treee554df64114e323902d360ce627f22a04e2e1745 /roles/apt/tasks/unattended_upgrades.yml
parentjournald: parametrize the log level (diff)
downloadinfra-ansible-1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0.tar.gz
infra-ansible-1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0.zip
apt: configure unattended-upgrades
Diffstat (limited to 'roles/apt/tasks/unattended_upgrades.yml')
-rw-r--r--roles/apt/tasks/unattended_upgrades.yml33
1 files changed, 33 insertions, 0 deletions
diff --git a/roles/apt/tasks/unattended_upgrades.yml b/roles/apt/tasks/unattended_upgrades.yml
new file mode 100644
index 0000000..79327d5
--- /dev/null
+++ b/roles/apt/tasks/unattended_upgrades.yml
@@ -0,0 +1,33 @@
+- name: Install unattended-upgrades
+ become:
+ ansible.builtin.apt:
+ install_recommends: false
+ name: unattended-upgrades
+ state: present
+
+- name: 50unattended-upgrades
+ become: true
+ ansible.builtin.template:
+ src: 50unattended-upgrades.j2
+ dest: /etc/apt/apt.conf.d/50unattended-upgrades
+ owner: root
+ group: root
+ mode: '644'
+
+# https://wiki.debian.org/UnattendedUpgrades says that 20auto-upgrades and
+# 02periodic are _alternatives_ (and, presumably, not mechanisms that can be
+# used together).
+- name: 20auto-upgrades
+ become: true
+ ansible.builtin.file:
+ path: /etc/apt/apt.conf.d/20auto-upgrades
+ state: absent
+
+- name: 02periodic
+ become: true
+ ansible.builtin.template:
+ src: 02periodic.j2
+ dest: /etc/apt/apt.conf.d/02periodic
+ owner: root
+ group: root
+ mode: '644'