Prevent unattended-upgrades from being installed

Uninstalling unattended-upgrade package is not enough, also mark
the package on hold. This will stop the package being pulled in
on any upgrades.

Change-Id: I8f418c23cb946bdb163805e4412cd33637cc79ae
Signed-off-by: Anil Belur <abelur@linuxfoundation.org>

diff --git a/provision/baseline.yaml b/provision/baseline.yaml
index 685b1ec..cbfc28c 100644 (file)
--- a/provision/baseline.yaml
+++ b/provision/baseline.yaml
@@ -56,6 +56,10 @@
           apt:
             name: unattended-upgrades
             state: absent
+        - name: Prevent unattended upgrades from being installed
+          dpkg_selections:
+            name: unattended-upgrades
+            selection: hold
       when: ansible_distribution == 'Ubuntu'
       become: yes