From: Anil Belur <abelur@linuxfoundation.org>
Date: Thu, 25 Oct 2018 02:41:20 +0000 (+1000)
Subject: Prevent unattended-upgrades from being installed
X-Git-Tag: v0.2.0~5
X-Git-Url: https://gerrit.linuxfoundation.org/infra/gitweb?a=commitdiff_plain;h=ec01814071eaea55ea7b025308b58d3923897eb6;p=releng%2Fcommon-packer.git

Prevent unattended-upgrades from being installed

Uninstalling unattended-upgrade package is not enough, also mark
the package on hold. This will stop the package being pulled in
on any upgrades.

Change-Id: I8f418c23cb946bdb163805e4412cd33637cc79ae
Signed-off-by: Anil Belur <abelur@linuxfoundation.org>
---

diff --git a/provision/baseline.yaml b/provision/baseline.yaml
index 685b1ec..cbfc28c 100644
--- a/provision/baseline.yaml
+++ b/provision/baseline.yaml
@@ -56,6 +56,10 @@
           apt:
             name: unattended-upgrades
             state: absent
+        - name: Prevent unattended upgrades from being installed
+          dpkg_selections:
+            name: unattended-upgrades
+            selection: hold
       when: ansible_distribution == 'Ubuntu'
       become: yes