infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Add host variable dnf_automatic_type to influence dnf-automatic-install mode

Browse source 
Set it to "security" for status quo ante for most hosts,
and "default" for debuginfod* hosts.
This commit is contained in:
Frank Ch. Eigler 2023-02-15 15:27:16 -05:00
parent 6c1b6abd61
commit 21d24f7e69
4 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
inventory/group_vars/all
View file

@ -272,3 +272,7 @@ wildcard_key_file: wildcard-2023.fedoraproject.org.key
wsgi_wants_apache: true
# set no x-forward header by default
x_forward: false
#
# dnf-automatic-install.service mode default: security-only
dnf_automatic_type: security

1
inventory/host_vars/debuginfod01.iad2.fedoraproject.org
View file

@ -8,3 +8,4 @@ sar_script_user: root
virt_install_command: "{{ virt_install_command_one_nic }}"
vmhost: vmhost-x86-06.iad2.fedoraproject.org
volgroup: /dev/vg_guests
dnf_automatic_type: default

1
inventory/host_vars/debuginfod01.stg.iad2.fedoraproject.org
View file

@ -6,3 +6,4 @@ ks_repo: http://10.3.163.35/pub/fedora/linux/releases/36/Server/x86_64/os/
ks_url: http://10.3.163.35/repo/rhel/ks/kvm-fedora
vmhost: vmhost-x86-08.stg.iad2.fedoraproject.org
volgroup: /dev/vg_guests
dnf_automatic_type: default

2
roles/dnf-automatic/templates/automatic.conf.j2
View file

@ -2,7 +2,7 @@
# What kind of upgrade to perform:
# default = all available upgrades
# security = only the security upgrades
upgrade_type = security
upgrade_type = {{ dnf_automatic_type }}
random_sleep = 300
# Whether updates should be downloaded when they are available.