19 lines
1.2 KiB
Markdown
19 lines
1.2 KiB
Markdown
# Automated Package Updates
|
|
|
|
The automatic updates are controlled in Hiera (excluding RHEL7):
|
|
|
|
| Hiera key | default | comments |
|
|
|-------------------------------------|------------|-------------------------------------------------------------------------------|
|
|
| `base::automatic_updates::interval` | `weekly` | valid are `daily`, `weekly` and `never` which disables the automatic updates |
|
|
| `base::automatic_updates::type` | `security` | `security` installs only security updates whereas `all` installs all updates |
|
|
| `base::automatic_updates::exclude` | `[]` | list of packages not to update, wildcards like "*" are allowed |
|
|
| `base::automatic_updates::kernel` | `false` | define if new kernel packages also should be installed automatically |
|
|
|
|
Note that the updates run on midnight, for `weekly` from Sunday to Monday. There is no automatic reboot, e.g. for kernel updates.
|
|
|
|
---
|
|
**Important**
|
|
|
|
There will be no updates if you fix the package source to a snapshot/repo tag i.e. `rpm_repos::tag` or `yum_client::repo_tag` setting in Hiera point to a specfic snapshot.
|
|
|