| 1 | # wget https://gist.githubusercontent.com/waja/d9e176f712ae6a6e4442486df80a13ba/raw/deploy_unattended-upgrades.sh -O /tmp/a && sh /tmp/a
|
| 2 | apt-get -y install unattended-upgrades needrestart && \
|
| 3 | cat > /etc/apt/apt.conf.d/10periodic <<EOF
|
| 4 | APT::Periodic::Update-Package-Lists "1";
|
| 5 | APT::Periodic::Download-Upgradeable-Packages "1";
|
| 6 | APT::Periodic::AutocleanInterval "7";
|
| 7 | APT::Periodic::Unattended-Upgrade "1";
|
| 8 | EOF
|
| 9 | sed -i 's#// "o=Debian,n=jessie"# "o=Debian,n=jessie"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
|
| 10 | sed -i 's#// "o=Debian,n=jessie-updates"# "o=Debian,n=jessie-updates"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
|
| 11 | sed -i 's#//\t"${distro_id}:${distro_codename}-updates"#\t"${distro_id}:${distro_codename}-updates"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
|
| 12 | sed -i 's#// "origin=Debian,codename=${distro_codename}-updates"# "origin=Debian,codename=${distro_codename}-updates"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
|
| 13 | sed -i 's#//Unattended-Upgrade::Remove-Unused-Dependencies "false"#Unattended-Upgrade::Remove-Unused-Dependencies "true"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
|
| 14 | sed -i 's#//Unattended-Upgrade::Automatic-Reboot "false"#Unattended-Upgrade::Automatic-Reboot "true"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
|
| 15 | sed -i '/codename=..distro_codename.-updates/ s#^//# #' /etc/apt/apt.conf.d/50unattended-upgrades /etc/apt/apt.conf.d/50unattended-upgrades && \
|
| 16 | sed -i 's#//Unattended-Upgrade::MailReport "on-change"#Unattended-Upgrade::MailReport "on-change"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
|
| 17 | sed -i 's#//Unattended-Upgrade::Automatic-Reboot-Time "02:00"#Unattended-Upgrade::Automatic-Reboot-Time "04:00"#' /etc/apt/apt.conf.d/50unattended-upgrades
|
| 18 | DIST=$(lsb_release -c | cut -f 2); [ "${DIST}" != "jessie" ] && sed -i "s/jessie/${DIST}/g" /etc/apt/apt.conf.d/50unattended-upgrades
|
| 19 | # Let needrestart restart daemons automatically
|
| 20 | cat > /etc/needrestart/conf.d/auto_restart.conf <<EOF
|
| 21 | # Restart daemons after library updates automatically
|
| 22 | \$nrconf{restart} = 'a';
|
| 23 | EOF
|
| 24 | # prevent updating some core packages which requires reboot
|
| 25 | if [ "${1}" = "--crit" ]; then
|
| 26 | for PACKAGE in linux-image- qemu xen; do
|
| 27 | # Debian < 10
|
| 28 | sed -i -E "s#//\t\"vim\";#\t\"${PACKAGE}\";\n//\t\"vim\";#" /etc/apt/apt.conf.d/50unattended-upgrades
|
| 29 | # Debian >= 10
|
| 30 | sed -i -E "s#// \"linux-\";# \"${PACKAGE}\";\n// \"linux-\";#" /etc/apt/apt.conf.d/50unattended-upgrades
|
| 31 | done
|
| 32 | sed -i 's#Unattended-Upgrade::Automatic-Reboot "true"#//Unattended-Upgrade::Automatic-Reboot "false"#' /etc/apt/apt.conf.d/50unattended-upgrades
|
| 33 | fi
|
| 34 | exit 0
|
| 35 | # in case you need a mail notification
|
| 36 | [ $(grep ^//Unattended-Upgrade::Mail /etc/apt/apt.conf.d/50unattended-upgrades | grep -c -v MailOnlyOnError) -gt 0 ] && \
|
| 37 | sed -i 's#//Unattended-Upgrade::Mail "root";#Unattended-Upgrade::Mail "user@domain.tld";#g' /etc/apt/apt.conf.d/50unattended-upgrades
|
| 38 |
|
