最終更新 6 months ago

修正履歴 01539c5e9fcdfade9924b62bb7bcf0e19f417808

deploy_unattended-upgrades.sh Raw
1# wget https://gist.githubusercontent.com/waja/d9e176f712ae6a6e4442486df80a13ba/raw/deploy_unattended-upgrades.sh -O /tmp/a && sh /tmp/a
2apt-get -y install unattended-upgrades && \
3cat > /etc/apt/apt.conf.d/10periodic <<EOF
4APT::Periodic::Update-Package-Lists "1";
5APT::Periodic::Download-Upgradeable-Packages "1";
6APT::Periodic::AutocleanInterval "7";
7APT::Periodic::Unattended-Upgrade "1";
8EOF
9sed -i 's#// "o=Debian,n=jessie"# "o=Debian,n=jessie"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
10sed -i 's#// "o=Debian,n=jessie-updates"# "o=Debian,n=jessie-updates"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
11sed -i 's#//Unattended-Upgrade::Remove-Unused-Dependencies "false"#Unattended-Upgrade::Remove-Unused-Dependencies "true"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
12sed -i 's#//Unattended-Upgrade::Automatic-Reboot "false"#Unattended-Upgrade::Automatic-Reboot "true"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
13sed -i 's#//Unattended-Upgrade::Automatic-Reboot-Time "02:00"#Unattended-Upgrade::Automatic-Reboot-Time "04:00"#' /etc/apt/apt.conf.d/50unattended-upgrades
14# prevent updating some core packages which requires reboot
15if [ "${1}" = "--crit" ]; then
16 for PACKAGE in libc6* linux-image-* openssl* xen* libxen* qemu* libvirt*; do
17 sed -i -E "s#//\t\"vim\";#\t\"${PACKAGE}\";\n//\t\"vim\";#" /etc/apt/apt.conf.d/50unattended-upgrades
18 done
19 sed -i 's#Unattended-Upgrade::Automatic-Reboot "true"#//Unattended-Upgrade::Automatic-Reboot "false"#' /etc/apt/apt.conf.d/50unattended-upgrades
20fi
21