Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question about disable ubuntu apt auto upgrade policy #1331

Open
san3Xian opened this issue Aug 1, 2024 · 0 comments
Open

Question about disable ubuntu apt auto upgrade policy #1331

san3Xian opened this issue Aug 1, 2024 · 0 comments
Assignees
Labels
kind/support Categorizes issue or PR as a support question.

Comments

@san3Xian
Copy link

san3Xian commented Aug 1, 2024

- name: Disable kernel unattended-upgrades
hosts: k8s_cluster,etcd
become: true
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
vars:
ubuntu_kernel_unattended_upgrades_disabled: true
skip_disable_kernel_unattended_upgrades_playbook: false
tasks:
- name: Disable kernel unattended-upgrades for Ubuntu
lineinfile:
path: /etc/apt/apt.conf.d/50unattended-upgrades
insertafter: "Unattended-Upgrade::Package-Blacklist"
line: '"linux-";'
state: present
when:
- ansible_distribution == "Ubuntu"
- not ubuntu_kernel_unattended_upgrades_disabled
- not skip_disable_kernel_unattended_upgrades_playbook

It's nice to see that kubean supports disabling ubuntu's default kernel auto-update policy, but I'm rather puzzled as to why it doesn't support disabling auto-update? Because in a k8s environment, it's inevitable that other packages will affect the platform when they are updated automatically without being verified as viable.
Such as sed -i "s#1#0#g" /etc/apt/apt.conf.d/20auto-upgrades && sed -i "s#1#0#g" /etc/apt/apt.conf.d/10periodic ? Will kubean have this plan supported?

@ErikJiang ErikJiang assigned tu1h and unassigned ErikJiang Aug 26, 2024
@ErikJiang ErikJiang added the kind/support Categorizes issue or PR as a support question. label Aug 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/support Categorizes issue or PR as a support question.
Projects
None yet
Development

No branches or pull requests

3 participants