Fix unattended-upgrades.
This commit is contained in:
parent
636fdc1911
commit
53349e3ece
3 changed files with 42 additions and 3 deletions
|
@ -11,7 +11,7 @@
|
||||||
register: adpw
|
register: adpw
|
||||||
no_log: true
|
no_log: true
|
||||||
when: "ansible_cmdline.adpw is not defined"
|
when: "ansible_cmdline.adpw is not defined"
|
||||||
- name: preseed apparmor
|
- name: Preseed apparmor
|
||||||
debconf:
|
debconf:
|
||||||
name: apparmor
|
name: apparmor
|
||||||
question: apparmor/homedirs
|
question: apparmor/homedirs
|
||||||
|
@ -19,6 +19,12 @@
|
||||||
/srv/samba/schools/default-school/teachers/
|
/srv/samba/schools/default-school/teachers/
|
||||||
/srv/samba/schools/default-school/students/*/
|
/srv/samba/schools/default-school/students/*/
|
||||||
vtype: string
|
vtype: string
|
||||||
|
- name: Preseed unattended-upgrades
|
||||||
|
debconf:
|
||||||
|
name: unattended-upgrades
|
||||||
|
question: unattended-upgrades/enable_auto_updates
|
||||||
|
value: True
|
||||||
|
vtype: boolean
|
||||||
|
|
||||||
vars:
|
vars:
|
||||||
domain: "{{ ansible_domain }}"
|
domain: "{{ ansible_domain }}"
|
||||||
|
@ -121,10 +127,15 @@
|
||||||
- /srv/samba/schools
|
- /srv/samba/schools
|
||||||
- /srv/samba/schools/default-school
|
- /srv/samba/schools/default-school
|
||||||
|
|
||||||
|
- name: Fix unattended-upgrades
|
||||||
|
ansible.builtin.copy:
|
||||||
|
dest: /etc/apt/apt.conf.d/20auto-upgrades
|
||||||
|
content: |
|
||||||
|
APT::Periodic::Update-Package-Lists "1";
|
||||||
|
APT::Periodic::Unattended-Upgrade "1";
|
||||||
|
|
||||||
## bullseye fixes:
|
## bullseye fixes:
|
||||||
- name: add bookworm firmware repository if needed
|
- name: Add bookworm firmware repository if needed
|
||||||
apt_repository:
|
apt_repository:
|
||||||
repo: deb http://deb.debian.org/debian/ bookworm non-free-firmware
|
repo: deb http://deb.debian.org/debian/ bookworm non-free-firmware
|
||||||
state: present
|
state: present
|
||||||
|
|
|
@ -19,6 +19,12 @@
|
||||||
/srv/samba/schools/default-school/teachers/
|
/srv/samba/schools/default-school/teachers/
|
||||||
/srv/samba/schools/default-school/students/*/
|
/srv/samba/schools/default-school/students/*/
|
||||||
vtype: string
|
vtype: string
|
||||||
|
- name: Preseed unattended-upgrades
|
||||||
|
debconf:
|
||||||
|
name: unattended-upgrades
|
||||||
|
question: unattended-upgrades/enable_auto_updates
|
||||||
|
value: True
|
||||||
|
vtype: boolean
|
||||||
|
|
||||||
vars:
|
vars:
|
||||||
domain: "{{ ansible_domain }}"
|
domain: "{{ ansible_domain }}"
|
||||||
|
@ -69,3 +75,11 @@
|
||||||
- kerberize
|
- kerberize
|
||||||
- lmn_wlan
|
- lmn_wlan
|
||||||
- lmn_security
|
- lmn_security
|
||||||
|
|
||||||
|
tasks:
|
||||||
|
- name: Fix unattended-upgrades
|
||||||
|
ansible.builtin.copy:
|
||||||
|
dest: /etc/apt/apt.conf.d/20auto-upgrades
|
||||||
|
content: |
|
||||||
|
APT::Periodic::Update-Package-Lists "1";
|
||||||
|
APT::Periodic::Unattended-Upgrade "1";
|
||||||
|
|
|
@ -4,6 +4,14 @@
|
||||||
hosts: all
|
hosts: all
|
||||||
remote_user: ansible
|
remote_user: ansible
|
||||||
become: yes
|
become: yes
|
||||||
|
pre_tasks:
|
||||||
|
- name: Preseed unattended-upgrades
|
||||||
|
debconf:
|
||||||
|
name: unattended-upgrades
|
||||||
|
question: unattended-upgrades/enable_auto_updates
|
||||||
|
value: True
|
||||||
|
vtype: boolean
|
||||||
|
|
||||||
vars:
|
vars:
|
||||||
domain: "{{ ansible_domain }}"
|
domain: "{{ ansible_domain }}"
|
||||||
kerberize_uris: steinbeis.schule
|
kerberize_uris: steinbeis.schule
|
||||||
|
@ -56,3 +64,9 @@
|
||||||
dest: /etc/pam.d/common-session
|
dest: /etc/pam.d/common-session
|
||||||
line: "session optional pam_mkhomedir.so umask=0022"
|
line: "session optional pam_mkhomedir.so umask=0022"
|
||||||
insertbefore: "# end of pam-auth-update config"
|
insertbefore: "# end of pam-auth-update config"
|
||||||
|
- name: Fix unattended-upgrades
|
||||||
|
ansible.builtin.copy:
|
||||||
|
dest: /etc/apt/apt.conf.d/20auto-upgrades
|
||||||
|
content: |
|
||||||
|
APT::Periodic::Update-Package-Lists "1";
|
||||||
|
APT::Periodic::Unattended-Upgrade "1";
|
||||||
|
|
Loading…
Add table
Reference in a new issue