# Automated Package Updates

The automatic updates are controlled in Hiera (excluding RHEL7):

| Hiera key                           | default    | comments                                                                      |
|-------------------------------------|------------|-------------------------------------------------------------------------------|
| `base::automatic_updates::interval` | `weekly`   |  valid are `daily`, `weekly` and `never` which disables the automatic updates |
| `base::automatic_updates::type`     | `security` | `security` installs only security updates whereas `all` installs all updates  |
| `base::automatic_updates::exclude`  | `[]`       | list of packages not to update, wildcards like "*" are allowed                |
| `base::automatic_updates::kernel`   | `false`    | define if new kernel packages also should be installed automatically          |

Note that the updates run on midnight, for `weekly` from Sunday to Monday. There is no automatic reboot, e.g. for kernel updates.

---
**Important**

There will be no updates if you fix the package source to a snapshot/repo tag i.e. `rpm_repos::tag` or `yum_client::repo_tag` setting in Hiera point to a specfic snapshot.