fix: disable unattended upgrades during CSE execution (#1681)

* fix: disable unattended upgrades during CSE execution Signed-off-by: Sylvain Rabot <s.rabot@lectra.com> * style: remove comments to save CSE bytes Co-authored-by: Matt Boersma <Matt.Boersma@microsoft.com>
Azure · Apr 3, 2020 · 0fff207 · 0fff207
1 parent fc1fd2b
commit 0fff207
Show file tree

Hide file tree

Showing 4 changed files with 42 additions and 0 deletions.
diff --git a/parts/k8s/cloud-init/artifacts/cse_main.sh b/parts/k8s/cloud-init/artifacts/cse_main.sh
@@ -247,6 +247,9 @@ if $FULL_INSTALL_REQUIRED; then
 fi
 {{end}}
 
+{{- /* re-enable unattended upgrades */}}
+rm -f /etc/apt/apt.conf.d/99periodic
+
 {{- if not IsAzureStackCloud}}
 if [[ $OS == $UBUNTU_OS_NAME ]]; then
   time_metric "PurgeApt" apt_get_purge apache2-utils &

diff --git a/parts/k8s/cloud-init/masternodecustomdata.yml b/parts/k8s/cloud-init/masternodecustomdata.yml
@@ -133,6 +133,15 @@ write_files:
     {{CloudInitData "aptPreferences"}}
 {{end}}
 
+- path: /etc/apt/apt.conf.d/99periodic
+  permissions: "0644"
+  owner: root
+  content: |
+    APT::Periodic::Update-Package-Lists "0";
+    APT::Periodic::Download-Upgradeable-Packages "0";
+    APT::Periodic::AutocleanInterval "0";
+    APT::Periodic::Unattended-Upgrade "0";
+
 {{if IsIPv6Enabled}}
 - path: {{GetDHCPv6ServiceCSEScriptFilepath}}
   permissions: "0644"

diff --git a/parts/k8s/cloud-init/nodecustomdata.yml b/parts/k8s/cloud-init/nodecustomdata.yml
@@ -127,6 +127,15 @@ write_files:
     {{CloudInitData "aptPreferences"}}
 {{end}}
 
+- path: /etc/apt/apt.conf.d/99periodic
+  permissions: "0644"
+  owner: root
+  content: |
+    APT::Periodic::Update-Package-Lists "0";
+    APT::Periodic::Download-Upgradeable-Packages "0";
+    APT::Periodic::AutocleanInterval "0";
+    APT::Periodic::Unattended-Upgrade "0";
+
 {{if IsIPv6Enabled}}
 - path: {{GetDHCPv6ServiceCSEScriptFilepath}}
   permissions: "0644"

diff --git a/pkg/engine/templates_generated.go b/pkg/engine/templates_generated.go