apt

Ansible role to configure APT repositories and settings.

Sponsor

Building and improving this Ansible role have been sponsored by my current and previous employers like Cloudpunks GmbH and Proact Deutschland GmbH.

Table of content

• Requirements
• Default Variables
  • apt_enable_backports
  • apt_enable_general
  • apt_enable_multiverse
  • apt_enable_universe
  • apt_force_update
  • apt_general_url
  • apt_periodic_config
  • apt_periodic_config_enabled
  • apt_redundant_configs
  • apt_security_url
  • apt_unattended_config_enabled
  • apt_unattended_upgrade_allowed_origins
  • apt_unattended_upgrade_dev_release
  • apt_unattended_upgrade_download_limit
  • apt_unattended_upgrade_mail_on_error_only
  • apt_unattended_upgrade_mail_to
  • apt_unattended_upgrade_package_blacklist
  • apt_unattended_upgrade_remove_unused_deps
  • apt_unattended_upgrade_remove_unused_kernel
  • apt_unattended_upgrade_syslog_enabled
  • apt_unattended_upgrade_syslog_facility
• Discovered Tags
• Dependencies
• License
• Author

---

Requirements

• Minimum Ansible version: 2.10

Default Variables

apt_enable_backports

Enable backports repositories

Default value

apt_enable_backports: true

apt_enable_general

Enable general repositories

Default value

apt_enable_general: true

apt_enable_multiverse

Enable multiverse repositories

Default value

apt_enable_multiverse: true

apt_enable_universe

Enable universe repositories

Default value

apt_enable_universe: true

apt_force_update

Force apt cache update

Default value

apt_force_update: false

apt_general_url

General URL of repositories changed by architecture

Default value

apt_general_url:
  x86_64: http://archive.ubuntu.com/ubuntu
  aarch64: http://ports.ubuntu.com/ubuntu-ports

apt_periodic_config

Set apt options for daily tasks

Default value

apt_periodic_config:
  - name: Update-Package-Lists
    value: 1
  - name: Download-Upgradeable-Packages
    value: 0
  - name: AutocleanInterval
    value: 1
  - name: Unattended-Upgrade
    value: 0

apt_periodic_config_enabled

Enable writing periodic config

Default value

apt_periodic_config_enabled: true

apt_redundant_configs

List of redundant configs that gets deleted

Default value

apt_redundant_configs:
  - 20auto-upgrades

apt_security_url

Security URL of repositories changed by architecture

Default value

apt_security_url:
  x86_64: http://security.ubuntu.com/ubuntu
  aarch64: http://ports.ubuntu.com/ubuntu-ports

apt_unattended_config_enabled

Enable writing unattended config

Default value

apt_unattended_config_enabled: true

apt_unattended_upgrade_allowed_origins

Automatically upgrade packages from these pairs

Default value

apt_unattended_upgrade_allowed_origins:
  - ${distro_id}:${distro_codename}
  - ${distro_id}:${distro_codename}-security
  - ${distro_id}ESM:${distro_codename}

apt_unattended_upgrade_dev_release

Automatically upgrade Ubuntu development releases

Default value

apt_unattended_upgrade_dev_release: false

apt_unattended_upgrade_download_limit

Use apt bandwidth limit feature, limits the download speed

Default value

apt_unattended_upgrade_download_limit:

Example usage

apt_unattended_upgrade_download_limit: '70'

apt_unattended_upgrade_mail_on_error_only

Send emails only if an unattended upgrade fails

Default value

apt_unattended_upgrade_mail_on_error_only: true

apt_unattended_upgrade_mail_to

Send email to this address for problems or packages upgrades

Default value

apt_unattended_upgrade_mail_to: root

Example usage

apt_unattended_upgrade_mail_to: user@example.com

apt_unattended_upgrade_package_blacklist

List of packages to not update

Default value

apt_unattended_upgrade_package_blacklist: []

Example usage

apt_unattended_upgrade_package_blacklist:
  - nvim
  - nginx

apt_unattended_upgrade_remove_unused_deps

Do automatic removal of new unused dependencies after the upgrade

Default value

apt_unattended_upgrade_remove_unused_deps: true

apt_unattended_upgrade_remove_unused_kernel

Remove unused installed kernel-related packages automatically

Default value

apt_unattended_upgrade_remove_unused_kernel: false

apt_unattended_upgrade_syslog_enabled

Default value

apt_unattended_upgrade_syslog_enabled: true

apt_unattended_upgrade_syslog_facility

Specify syslog facility

Default value

apt_unattended_upgrade_syslog_facility: daemon

Discovered Tags

apt

Dependencies

• None

License

Apache-2.0

Author

Thomas Boerger