zimoch/Controls-docs
0
0
Fork 0
forked from Controls/gitea-pages
Code Pull Requests Actions Activity

document updates and puppet run at boot time

Browse Source
This commit is contained in:
buchel_k
2025-01-10 14:21:44 +01:00
parent ebca26cb04
commit 9f2508503e
3 changed files with 11 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin-guide/configuration/basic/puppet_agent.md
+2 -1
View File
@@ -11,8 +11,9 @@ Allowed parameters are
- 'halfhourly': every 30 minutes
- 'daily': once a day (default)
- 'weekly': every Monday
- 'boot_only': only shortly after bootup
The actual automatic Puppet Agent run is always on the same random time. Check `systemctl list-timers pli-puppet-run.timer` for the exact time on a specific node.
The actual automatic Puppet Agent run is always on the same random time (except for `boot_only`). Check `systemctl list-timers pli-puppet-run.timer` for the exact time on a specific node.
For `daily` and `weekly` the time window is configured in Hiera with `puppet_client::exec_time`, the default is:
```
admin-guide/configuration/software/package_updates.md
+9 -1
View File
@@ -4,11 +4,19 @@ The automatic updates are controlled in Hiera (excluding RHEL7):
| Hiera key | default | comments |
|-------------------------------------|------------|-------------------------------------------------------------------------------|
| `base::automatic_updates::interval` | `weekly` | valid are `daily`, `weekly` and `never` which disables the automatic updates |
| `base::automatic_updates::interval` | `weekly` | valid are `daily`, `weekly`, `boot_only` and `never` which disables the automatic updates |
| `base::automatic_updates::type` | `security` | `security` installs only security updates whereas `all` installs all updates |
| `base::automatic_updates::exclude` | `[]` | list of packages not to update, wildcards like "*" are allowed |
| `base::automatic_updates::kernel` | `false` | define if new kernel packages also should be installed automatically |
For system-wide installed Flatpak packages there is a separate key for automatically updating them:
| Hiera key | default | comments |
|------------------------------|------------|-------------------------------------------------------------------------------|
| `flatpak::updates::interval` | `weekly` | valid are `daily`, `weekly`, `boot_only` and `never` which disables the automatic updates |
Note that the updates run on midnight, for `weekly` from Sunday to Monday. There is no automatic reboot, e.g. for kernel updates.
---