diff options
| author | Egor Tensin <Egor.Tensin@gmail.com> | 2023-08-11 09:17:50 +0200 |
|---|---|---|
| committer | Egor Tensin <Egor.Tensin@gmail.com> | 2023-08-11 19:04:51 +0200 |
| commit | 1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0 (patch) | |
| tree | e554df64114e323902d360ce627f22a04e2e1745 /roles/apt/tasks/unattended_upgrades.yml | |
| parent | journald: parametrize the log level (diff) | |
| download | infra-ansible-1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0.tar.gz infra-ansible-1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0.zip | |
apt: configure unattended-upgrades
Diffstat (limited to 'roles/apt/tasks/unattended_upgrades.yml')
| -rw-r--r-- | roles/apt/tasks/unattended_upgrades.yml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/roles/apt/tasks/unattended_upgrades.yml b/roles/apt/tasks/unattended_upgrades.yml new file mode 100644 index 0000000..79327d5 --- /dev/null +++ b/roles/apt/tasks/unattended_upgrades.yml @@ -0,0 +1,33 @@ +- name: Install unattended-upgrades + become: + ansible.builtin.apt: + install_recommends: false + name: unattended-upgrades + state: present + +- name: 50unattended-upgrades + become: true + ansible.builtin.template: + src: 50unattended-upgrades.j2 + dest: /etc/apt/apt.conf.d/50unattended-upgrades + owner: root + group: root + mode: '644' + +# https://wiki.debian.org/UnattendedUpgrades says that 20auto-upgrades and +# 02periodic are _alternatives_ (and, presumably, not mechanisms that can be +# used together). +- name: 20auto-upgrades + become: true + ansible.builtin.file: + path: /etc/apt/apt.conf.d/20auto-upgrades + state: absent + +- name: 02periodic + become: true + ansible.builtin.template: + src: 02periodic.j2 + dest: /etc/apt/apt.conf.d/02periodic + owner: root + group: root + mode: '644' |