Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen der Seite angezeigt.

--- server_und_serverdienste:automatische_updates_debian_ubuntu [2017/04/18 09:20] – boospy
+++ server_und_serverdienste:automatische_updates_debian_ubuntu [2017/11/10 22:48] – boospy
@@ Zeile 7: / Zeile 7: @@
   APT::Periodic::Update-Package-Lists "1";
-  APT::Periodic::Download-Upgradeable-Packages "3";
+  APT::Periodic::Download-Upgradeable-Packages "1";
   APT::Periodic::AutocleanInterval "30";
-  APT::Periodic::Unattended-Upgrade "5";
+  APT::Periodic::Unattended-Upgrade "7";
 Die Zeilen erklären sich wohl von alleine. Die Configdatei hierfür wäre z.B. (Ubuntu 16.04.2) das:
 ''nano /etc/apt/apt.conf.d/50unattended-upgrades''
 <file bash 50unattended-upgrades>
-  // Automatically upgrade packages from these (origin:archive) pairs
+ // Automatically upgrade packages from these (origin:archive) pairs
-  Unattended-Upgrade::Allowed-Origins {
+Unattended-Upgrade::Allowed-Origins {
-          "${distro_id}:${distro_codename}";
+        "${distro_id}:${distro_codename}";
-          "${distro_id}:${distro_codename}-security";
+        "${distro_id}:${distro_codename}-security";
-          "${distro_id}:${distro_codename}-updates";
+        // Extended Security Maintenance; doesn't necessarily exist for
-  //      "${distro_id}:${distro_codename}-proposed";
+        // every release and this system may not have it installed, but if
-          "${distro_id}:${distro_codename}-backports";
+        // available, the policy for updates is such that unattended-upgrades
-  };
+        // should also install from here by default.
+        "${distro_id}ESM:${distro_codename}";
-  // List of packages to not update (regexp are supported)
+        "${distro_id}:${distro_codename}-updates";
-  Unattended-Upgrade::Package-Blacklist {
+//      "${distro_id}:${distro_codename}-proposed";
-  //      "vim";
+        "${distro_id}:${distro_codename}-backports";
-  //      "libc6";
+};
-  //      "libc6-dev";
-  //      "libc6-i686";
+// List of packages to not update (regexp are supported)
-  };
+Unattended-Upgrade::Package-Blacklist {
+//      "vim";
-  // This option allows you to control if on a unclean dpkg exit
+//      "libc6";
-  // unattended-upgrades will automatically run
+//      "libc6-dev";
-  //   dpkg --force-confold --configure -a
+//      "libc6-i686";
-  // The default is true, to ensure updates keep getting installed
+};
-  Unattended-Upgrade::AutoFixInterruptedDpkg "true";
+// This option allows you to control if on a unclean dpkg exit
-  // Split the upgrade into the smallest possible chunks so that
+// unattended-upgrades will automatically run
-  // they can be interrupted with SIGUSR1. This makes the upgrade
+//   dpkg --force-confold --configure -a
-  // a bit slower but it has the benefit that shutdown while a upgrade
+// The default is true, to ensure updates keep getting installed
-  // is running is possible (with a small delay)
+Unattended-Upgrade::AutoFixInterruptedDpkg "true";
-  //Unattended-Upgrade::MinimalSteps "true";
+// Split the upgrade into the smallest possible chunks so that
-  // Install all unattended-upgrades when the machine is shuting down
+// they can be interrupted with SIGUSR1. This makes the upgrade
-  // instead of doing it in the background while the machine is running
+// a bit slower but it has the benefit that shutdown while a upgrade
-  // This will (obviously) make shutdown slower
+// is running is possible (with a small delay)
-  Unattended-Upgrade::InstallOnShutdown "false";
+//Unattended-Upgrade::MinimalSteps "true";
-  // Send email to this address for problems or packages upgrades
+// Install all unattended-upgrades when the machine is shuting down
-  // If empty or unset then no email is sent, make sure that you
+// instead of doing it in the background while the machine is running
-  // have a working mail setup on your system. A package that provides
+// This will (obviously) make shutdown slower
-  // 'mailx' must be installed. E.g. "bal@bla.at"
+Unattended-Upgrade::InstallOnShutdown "false";
-  //Unattended-Upgrade::Mail "technik@iteas.at";
+// Send email to this address for problems or packages upgrades
-  // Set this value to "true" to get emails only on errors. Default
+// If empty or unset then no email is sent, make sure that you
-  // is to always send a mail if Unattended-Upgrade::Mail is set
+// have a working mail setup on your system. A package that provides
-  Unattended-Upgrade::MailOnlyOnError "true";
+// 'mailx' must be installed. E.g. "user@example.com"
+// Unattended-Upgrade::Mail "test@bla.com";
-  // Do automatic removal of new unused dependencies after the upgrade
-  // (equivalent to apt-get autoremove)
+// Set this value to "true" to get emails only on errors. Default
-  Unattended-Upgrade::Remove-Unused-Dependencies "true";
+// is to always send a mail if Unattended-Upgrade::Mail is set
+Unattended-Upgrade::MailOnlyOnError "true";
-  // Automatically reboot *WITHOUT CONFIRMATION*
-  //  if the file /var/run/reboot-required is found after the upgrade
+// Do automatic removal of new unused dependencies after the upgrade
-  Unattended-Upgrade::Automatic-Reboot "true";
+// (equivalent to apt-get autoremove)
+Unattended-Upgrade::Remove-Unused-Dependencies "true";
-  // If automatic reboot is enabled and needed, reboot at the specific
-  // time instead of immediately
+// Automatically reboot *WITHOUT CONFIRMATION*
-  //  Default: "now"
+//  if the file /var/run/reboot-required is found after the upgrade
-  //Unattended-Upgrade::Automatic-Reboot-Time "02:00";
+Unattended-Upgrade::Automatic-Reboot "true";
-  // Use apt bandwidth limit feature, this example limits the download
+// If automatic reboot is enabled and needed, reboot at the specific
-  // speed to 70kb/sec
+// time instead of immediately
-  //Acquire::http::Dl-Limit "70";>
+//  Default: "now"
+Unattended-Upgrade::Automatic-Reboot-Time "06:30";
+// Use apt bandwidth limit feature, this example limits the download
+// speed to 70kb/sec
+//Acquire::http::Dl-Limit "70";
 </file>