Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question about disable ubuntu apt auto upgrade policy #1331

Open
san3Xian opened this issue Aug 1, 2024 · 1 comment
Open

Question about disable ubuntu apt auto upgrade policy #1331

san3Xian opened this issue Aug 1, 2024 · 1 comment
Assignees
Labels
kind/support Categorizes issue or PR as a support question. Stale

Comments

@san3Xian
Copy link
Contributor

san3Xian commented Aug 1, 2024

- name: Disable kernel unattended-upgrades
hosts: k8s_cluster,etcd
become: true
any_errors_fatal: "{{ any_errors_fatal | default(true) }}"
vars:
ubuntu_kernel_unattended_upgrades_disabled: true
skip_disable_kernel_unattended_upgrades_playbook: false
tasks:
- name: Disable kernel unattended-upgrades for Ubuntu
lineinfile:
path: /etc/apt/apt.conf.d/50unattended-upgrades
insertafter: "Unattended-Upgrade::Package-Blacklist"
line: '"linux-";'
state: present
when:
- ansible_distribution == "Ubuntu"
- not ubuntu_kernel_unattended_upgrades_disabled
- not skip_disable_kernel_unattended_upgrades_playbook

It's nice to see that kubean supports disabling ubuntu's default kernel auto-update policy, but I'm rather puzzled as to why it doesn't support disabling auto-update? Because in a k8s environment, it's inevitable that other packages will affect the platform when they are updated automatically without being verified as viable.
Such as sed -i "s#1#0#g" /etc/apt/apt.conf.d/20auto-upgrades && sed -i "s#1#0#g" /etc/apt/apt.conf.d/10periodic ? Will kubean have this plan supported?

@ErikJiang ErikJiang assigned 0ekk and unassigned ErikJiang Aug 26, 2024
@ErikJiang ErikJiang added the kind/support Categorizes issue or PR as a support question. label Aug 26, 2024
Copy link

This issue is stale because it has been open 90 days with no activity. Remove stale label or comment or this will be closed in 5 days. Maintainers can add the exempt-stale label.

@github-actions github-actions bot added the Stale label Nov 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/support Categorizes issue or PR as a support question. Stale
Projects
None yet
Development

No branches or pull requests

3 participants