a6202f901b
* modules/openstack_project/manifests/automatic_upgrades.pp: Pass the additional allowed origins list through to the unattended upgrades module. * modules/openstack_project/manifests/slave.pp: Add the "LP-PPA-saltstack-salt precise" repository origin to the list of allowed origins for automatic upgrades. * modules/unattended_upgrades/manifests/init.pp: Add a list of additional allowed origins for package repository upgrades and convert the apt-preferences stub for 50unattended-upgrades to a template so the list can be applied to it. * modules/unattended_upgrades/templates/50unattended-upgrades.erb: Renamed from ../../files/50unattended-upgrades and enhanced with a loop over the origins list to append to the default set of allowed upgrade origins. Change-Id: I821d199ae1a00ed78c2a52bf80ddba8a4eaa7d8b
34 lines
1.2 KiB
Plaintext
34 lines
1.2 KiB
Plaintext
// Automatically upgrade packages from these (origin, archive) pairs
|
|
Unattended-Upgrade::Allowed-Origins {
|
|
// ${distro_id} and ${distro_codename} will be automatically expanded
|
|
"${distro_id} stable";
|
|
"${distro_id} ${distro_codename}-security";
|
|
"${distro_id} ${distro_codename}-updates";
|
|
// "${distro_id} ${distro_codename}-proposed-updates";
|
|
<% origins.each do |origin| -%>
|
|
"<%= origin %>";
|
|
<% end -%>
|
|
};
|
|
|
|
// List of packages to not update
|
|
Unattended-Upgrade::Package-Blacklist {
|
|
// "vim";
|
|
// "libc6";
|
|
// "libc6-dev";
|
|
// "libc6-i686";
|
|
};
|
|
|
|
// Send email to this address for problems or packages upgrades
|
|
// If empty or unset then no email is sent, make sure that you
|
|
// have a working mail setup on your system. The package 'mailx'
|
|
// must be installed or anything that provides /usr/bin/mail.
|
|
Unattended-Upgrade::Mail "root";
|
|
|
|
// Do automatic removal of new unused dependencies after the upgrade
|
|
// (equivalent to apt-get autoremove)
|
|
//Unattended-Upgrade::Remove-Unused-Dependencies "false";
|
|
|
|
// Automatically reboot *WITHOUT CONFIRMATION* if a
|
|
// the file /var/run/reboot-required is found after the upgrade
|
|
//Unattended-Upgrade::Automatic-Reboot "false";
|