diff options
| author | Egor Tensin <Egor.Tensin@gmail.com> | 2023-08-11 09:17:50 +0200 |
|---|---|---|
| committer | Egor Tensin <Egor.Tensin@gmail.com> | 2023-08-11 19:04:51 +0200 |
| commit | 1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0 (patch) | |
| tree | e554df64114e323902d360ce627f22a04e2e1745 /roles/apt/templates | |
| parent | journald: parametrize the log level (diff) | |
| download | infra-ansible-1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0.tar.gz infra-ansible-1c363a140e3cbc2ed96eeb372cf3abfdb642d3f0.zip | |
apt: configure unattended-upgrades
Diffstat (limited to '')
| -rw-r--r-- | roles/apt/templates/02periodic.j2 | 6 | ||||
| -rw-r--r-- | roles/apt/templates/50unattended-upgrades.j2 | 21 |
2 files changed, 27 insertions, 0 deletions
diff --git a/roles/apt/templates/02periodic.j2 b/roles/apt/templates/02periodic.j2 new file mode 100644 index 0000000..0c26a8f --- /dev/null +++ b/roles/apt/templates/02periodic.j2 @@ -0,0 +1,6 @@ +APT::Periodic::Enable "1"; +APT::Periodic::Update-Package-Lists "1"; +APT::Periodic::Download-Upgradeable-Packages "1"; +APT::Periodic::Unattended-Upgrade "1"; +APT::Periodic::AutocleanInterval "7"; +APT::Periodic::Verbose "2"; diff --git a/roles/apt/templates/50unattended-upgrades.j2 b/roles/apt/templates/50unattended-upgrades.j2 new file mode 100644 index 0000000..dfb2f9e --- /dev/null +++ b/roles/apt/templates/50unattended-upgrades.j2 @@ -0,0 +1,21 @@ +Unattended-Upgrade::Origins-Pattern { + "origin=${distro_id},codename=${distro_codename}"; + "origin=${distro_id},codename=${distro_codename}-security"; +}; + +Unattended-Upgrade::DevRelease "false"; +Unattended-Upgrade::AutoFixInterruptedDpkg "true"; +Unattended-Upgrade::MinimalSteps "true"; +Unattended-Upgrade::InstallOnShutdown "false"; +Unattended-Upgrade::Mail "root"; +Unattended-Upgrade::MailOnlyOnError "true"; +Unattended-Upgrade::Remove-Unused-Kernel-Packages "true"; +Unattended-Upgrade::Remove-Unused-Dependencies "true"; +Unattended-Upgrade::Automatic-Reboot "{{ apt_unattended_reboot | lower }}"; +Unattended-Upgrade::Automatic-Reboot-Time "{{ apt_unattended_reboot_time }}"; +Unattended-Upgrade::SyslogEnable "true"; + +Dpkg::Options { + "--force-confdef"; + "--force-confold"; +}; |