diff options
| author | Dennis Eriksen <d@ennis.no> | 2019-10-20 08:26:54 +0200 |
|---|---|---|
| committer | Dennis Eriksen <d@ennis.no> | 2019-10-20 08:26:54 +0200 |
| commit | dfb923651724c798d12c13556a93ae28dbdef6a6 (patch) | |
| tree | bf860a010c6a15ed146e2d5b6cb6ef9ae7bb7042 | |
| parent | initial commit (diff) | |
| download | mkosi-cgit-dfb923651724c798d12c13556a93ae28dbdef6a6.tar.gz | |
adding unattended_upgrades
| -rw-r--r-- | mkosi.default | 1 | ||||
| -rw-r--r-- | mkosi.skeleton/etc/apt/apt.conf.d/20auto-upgrades | 9 | ||||
| -rw-r--r-- | mkosi.skeleton/etc/apt/apt.conf.d/50unattended-upgrades | 34 |
3 files changed, 44 insertions, 0 deletions
diff --git a/mkosi.default b/mkosi.default index 6b15bb9..52e7d1b 100644 --- a/mkosi.default +++ b/mkosi.default @@ -11,6 +11,7 @@ Output=/var/lib/machines/cgit [Packages] WithNetwork=yes Packages= + unattended-upgrades nginx-light cgit fcgiwrap diff --git a/mkosi.skeleton/etc/apt/apt.conf.d/20auto-upgrades b/mkosi.skeleton/etc/apt/apt.conf.d/20auto-upgrades new file mode 100644 index 0000000..4c725ab --- /dev/null +++ b/mkosi.skeleton/etc/apt/apt.conf.d/20auto-upgrades @@ -0,0 +1,9 @@ +APT::Periodic::Unattended-Upgrade "1"; + +APT::Periodic::Update-Package-Lists "1"; + + +APT::Periodic::AutocleanInterval "7"; + + + diff --git a/mkosi.skeleton/etc/apt/apt.conf.d/50unattended-upgrades b/mkosi.skeleton/etc/apt/apt.conf.d/50unattended-upgrades new file mode 100644 index 0000000..768347b --- /dev/null +++ b/mkosi.skeleton/etc/apt/apt.conf.d/50unattended-upgrades @@ -0,0 +1,34 @@ +// Unattended-Upgrade::Origins-Pattern controls which packages are +// upgraded. +Unattended-Upgrade::Origins-Pattern { + "origin=Ubuntu,archive=${distro_codename}-security"; + "o=Ubuntu,a=${distro_codename}"; + "o=Ubuntu,a=${distro_codename}-updates"; + "o=Ubuntu,a=${distro_codename}-proposed-updates"; + "o=Ubuntu,n=${distro_codename}-backports"; + }; + +// List of packages to not update (regexp are supported) +Unattended-Upgrade::Package-Blacklist { +}; + + +// Split the upgrade into the smallest possible chunks so that +// they can be interrupted with SIGUSR1. This makes the upgrade +// a bit slower but it has the benefit that shutdown while a upgrade +// is running is possible (with a small delay) +Unattended-Upgrade::MinimalSteps "true"; + + +// Do automatic removal of new unused dependencies after the upgrade +// (equivalent to apt-get autoremove) +Unattended-Upgrade::Remove-Unused-Dependencies "true"; + + +// Do upgrade application even if it requires restart after upgrade +// I.e. "XB-Upgrade-Requires: app-restart" is set in the debian/control file +Unattended-Upgrade::IgnoreAppsRequireRestart "true"; + +// Automatically run "dpkg --force-confold --configure -a". +Unattended-Upgrade::AutoFixInterruptedDpkg "true"; + |