Skip to content

Instantly share code, notes, and snippets.

@digitalgeneralist
Created December 7, 2018 09:41
Show Gist options
  • Save digitalgeneralist/e8f252ffb3e8ea9a8f12bccec82ec79b to your computer and use it in GitHub Desktop.
Save digitalgeneralist/e8f252ffb3e8ea9a8f12bccec82ec79b to your computer and use it in GitHub Desktop.
Activate on Ubuntu 18.04 auto-upgrades for security patches (/etc/apt/apt.conf.d/)
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::AutocleanInterval "7";
APT::Periodic::Unattended-Upgrade "1";
// Automatically upgrade packages from these (origin:archive) pairs
//
// Note that in Ubuntu security updates may pull in new dependencies
// from non-security sources (e.g. chromium). By allowing the release
// pocket these get automatically pulled in.
Unattended-Upgrade::Allowed-Origins {
//"${distro_id}:${distro_codename}";
"${distro_id}:${distro_codename}-security";
// Extended Security Maintenance; doesn't necessarily exist for
// every release and this system may not have it installed, but if
// available, the policy for updates is such that unattended-upgrades
// should also install from here by default.
//"${distro_id}ESM:${distro_codename}";
// "${distro_id}:${distro_codename}-updates";
// "${distro_id}:${distro_codename}-proposed";
// "${distro_id}:${distro_codename}-backports";
};
// List of packages to not update (regexp are supported)
Unattended-Upgrade::Package-Blacklist {
// "vim";
// "libc6";
// "libc6-dev";
// "libc6-i686";
};
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment