Ansible Role: apt

Important Update

Please note that the ansible.users role has been moved to a new collection and will no longer be actively developed in this repository. For the latest version of the role, including new features and updates, please visit the new collection at https://github.com/arillso/ansible.system/tree/main/roles/apt_configuration. We encourage all users to switch to the updated role in the new collection for ongoing support and improvements.

Description

This role optimizes the package manager apt and under Debian/Ubuntu. It can be determined how long the packages will be cached, how often he should check for updates and when he should install the updates automatically.

Installation

ansible-galaxy install arillso.apt

Requirements

Role Variables

Archives

Whether the cache of DEB files should be preserved or cleaned

apt_preserve_cache: 'no'

Max age (in days) of DEB files to keep when cleaning cache

apt_archives_maxage: null

Min age (in days) of DEB files to keep when cleaning cache

apt_archives_minage: null

Max size (in MB) of DEB files to keep when cleaning cache

apt_archives_maxsize: null

General

whether or not suggested packages should be installed

apt_install_suggests: 'no'

do not install Recommended packages by default

apt_install_recommends: 'no'

allow 'apt-get autoremove' to remove recommended packages

apt_remove_recommends: 'no'

Enable the update/upgrade script

apt_periodic: 'yes'

Do “apt-get update” automatically every n-days (0=disable)

apt_update_package_lists: 1

Do “apt-get upgrade –download-only” every n-days (0=disable)

apt_download_upgradeable_packages: 0

Do “apt-get autoclean” every n-days (0=disable)

apt_auto_clean_interval: 0

unattended-upgrades

enable unattended-upgrades

apt_unattended_upgrades: 'yes'

list of packages to not update (regexp are supported)

apt_unattended_upgrades_blacklist: []

Split the upgrade into the smallest possible chunks so that they can be interrupted with SIGUSR1. This makes the upgrade a bit slower but it has the benefit that shutdown while a upgrade is running is possible (with a small delay)

apt_unattended_upgrades_minimal_steps: 'no'

Send email to this address for problems or packages upgrades If empty or unset then no email is sent, make sure that you have a working mail setup on your system. A package that provides 'mailx' must be installed. E.g. "user@example.com"

apt_mails: []

Set this value to "true" to get emails only on errors. Default is to always send a mail if Unattended-Upgrade::Mail is set

apt_unattended_upgrades_notify_error_only: 'yes'

Do automatic removal of new unused dependencies after the upgrade (equivalent to apt-get autoremove)

apt_unattended_upgrades_autoremove: 'yes'

Automatically reboot WITHOUT CONFIRMATION if the file /var/run/reboot-required is found after the upgrade

apt_unattended_upgrades_automatic_reboot: 'no'

If automatic reboot is enabled and needed, reboot at the specific time instead of immediately Values: now | 02:00 | ...

apt_unattended_upgrades_automatic_reboot_time: now

Dependencies

Example Playbook

- hosts: all
  roles:
    - arillso.apt

Author

• Simon Bärlocher

Inspiration

• We Are Interactive

License

This project is under the MIT License. See the LICENSE file for the full license text.

Copyright

(c) 2019, Arillso