From ec01814071eaea55ea7b025308b58d3923897eb6 Mon Sep 17 00:00:00 2001
From: Anil Belur <abelur@linuxfoundation.org>
Date: Thu, 25 Oct 2018 12:41:20 +1000
Subject: [PATCH] Prevent unattended-upgrades from being installed

Uninstalling unattended-upgrade package is not enough, also mark
the package on hold. This will stop the package being pulled in
on any upgrades.

Change-Id: I8f418c23cb946bdb163805e4412cd33637cc79ae
Signed-off-by: Anil Belur <abelur@linuxfoundation.org>
---
 provision/baseline.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/provision/baseline.yaml b/provision/baseline.yaml
index 685b1ec..cbfc28c 100644
--- a/provision/baseline.yaml
+++ b/provision/baseline.yaml
@@ -56,6 +56,10 @@
           apt:
             name: unattended-upgrades
             state: absent
+        - name: Prevent unattended upgrades from being installed
+          dpkg_selections:
+            name: unattended-upgrades
+            selection: hold
       when: ansible_distribution == 'Ubuntu'
       become: yes
 
-- 
2.16.6