diff --git a/CHANGELOG.md b/CHANGELOG.md index 212fb7e..54bf352 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -11,3 +11,4 @@ * Ensure to never remove some packages pattern. * Manage general, periodic and dpkg config files. * Purge default configuration files sets by others apps. +* Manage `unattended-upgrades`. diff --git a/README.md b/README.md index ab9a596..25dbaca 100644 --- a/README.md +++ b/README.md @@ -34,6 +34,7 @@ Manage APT repos, preferences and configuration for IPR's servers. * **apt_old_pkg_list** : The list of totally useless packages for a production server [default [see below](#tools)]. * **apt_old_pkg_state** : State of old packages [default : `absent`]. * **apt_old_pkg_manage** : If those old packages should be managed by the role [default : `true`]. +* **apt_unattended_upgrades** : If `unattended-upgrades` should be managed by the role [default : `yes`]. ## Example Playbook @@ -71,6 +72,7 @@ Manage Debian's sources.list : - Ensure to remove really useless packages from a default installation : * laptop-detect (if a server is a laptop…) * tasksel (simple interface) +- Manage `unattended-upgrades`. ## Development diff --git a/defaults/main.yml b/defaults/main.yml index ee0ae7c..dd1e720 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -1,6 +1,7 @@ --- # defaults file for apt +# configuration apt_conf_update_pkg_lists: 1 apt_conf_download_upgradeable_pkg: 1 apt_conf_auto_clean_interval: 0 @@ -11,14 +12,17 @@ apt_conf_purge_list: - 70debconf apt_conf_purge_manage: true +# repositories apt_src_list_manage: true apt_purge_src_list_file: true apt_stretch_manage: true +# preferences apt_default_pref_path: '/etc/apt/preferences.d/default.pref' apt_default_pref_tpl: 'etc/apt/preferences.d/default.pref.j2' +# packages apt_tools_list: - aptitude apt_tools_state: 'installed' @@ -28,3 +32,6 @@ apt_old_pkg_list: - tasksel apt_old_pkg_state: 'absent' apt_old_pkg_manage: true + +# unattended-upgrades +apt_unattended_upgrades: yes diff --git a/tasks/packages.yml b/tasks/packages.yml index a49a1cc..b260639 100644 --- a/tasks/packages.yml +++ b/tasks/packages.yml @@ -2,7 +2,7 @@ # tasks file for packages # Packages -- name: Ensure useful tools packages +- name: INSTALL useful tools packages apt: name: '{{ item }}' state: '{{ apt_tools_state }}' @@ -10,7 +10,13 @@ - '{{ apt_tools_list }}' when: apt_tools_manage -- name: Ensure to purge useless packages +- name: INSTALL unattended-upgrades + apt: + pkg: "unattended-upgrades" + state: "{{ 'latest' if apt_unattended_upgrades else 'absent' }}" + when: apt_unattended_upgrades + +- name: INSTALL purge useless packages apt: name: '{{ item }}' state: '{{ apt_old_pkg_state }}'