This currently does an "unattended-upgrades -d" run. I get why this
was done, as this looks at all dependencies and makes sure they are
suitable for install, and holds back anything that might have
conflicting config files.
The problem with the looking at the dependencies is it is *slow* --
like 20 minutes of processing. I think that given we have just booted
a fresh upstream image and changed very little at this point, we are
OK to run a dist-upgrade at this point. It will be much faster and
give us what we want, which is a up-to-date system.
Change-Id: I53442ca568cbb52b02ad3936c08b0536a73687fa
When launching a new server we should make sure that all available
package updates are installed before we reboot the server. This way we
get available security updates applied to things like our kernel.
This change adds a new playbook that runs the unattended-upgrade command
on debuntu servers. Will need to add support for other platforms in a
followup change.
Change-Id: Idc88dc33afdd209c388452493e6a7f5731fa0974