Add all 44 scripts, update CI: error severity baseline, PowerShell validation, multi-distro testing

Amp-Thread-ID: https://ampcode.com/threads/T-019cc404-c628-759e-a50b-f5eeea35b91f Co-authored-by: Amp <amp@ampcode.com>
2026-03-07 05:40:51 +01:00
parent db43b8a313
commit 88551536e6
43 changed files with 28906 additions and 23 deletions
@@ -0,0 +1,94 @@
+#!/bin/bash
+
+######################################################################################
+#### Version 2.01                                                                 ####
+#### For questions or comments contact@mylinux.work                               ####
+#### Author : Phil Connor                                                         ####
+####                                                                              ####
+#### Notes :                                                                      ####
+####   This script is a simple "helper" to configure Auto Updates on linux        ####
+####   servers.                                                                   ####
+####                                                                              ####
+####   Use this script at your OWN risk. There is no guarantee whatsoever.        ####
+####                                                                              ####
+####   Usage "tuning.sh" or "tuning.sh ssd" if you are running on ssd'd           ####
+######################################################################################
+
+###########################
+####  System Variables ####
+###########################
+OS=$(grep PRETTY_NAME /etc/os-release | sed 's/PRETTY_NAME=//g' | tr -d '="' | awk '{print $1}' | tr '[:upper:]' '[:lower:]')
+OSVER=$(grep VERSION_ID /etc/os-release | sed 's/VERSION_ID=//g' | tr -d '="' | awk -F. '{print $1}')
+aptcnf="/etc/apt/apt.conf.d"
+dnfcnf="/etc/dnf/automatic.conf"
+yum6cnf="/etc/sysconfig/yum-cron"
+yum7cnf="/etc/yum/yum-cron.conf"
+
+###################################
+#### Copy to EOF file function ####
+###################################
+function no_show() {
+	{
+	expand | awk 'NR == 1 {match($0, /^ */); l = RLENGTH + 1}
+        {print substr($0, l)}'
+	}
+}
+
+###########################################################
+#### Detect Package Manger from OS and OSVer Variables ####
+########################################################### 
+if [ "${OS}" = ubuntu ]; then
+	PAKMGR="apt-get -y"
+elif [[ ${OS} = centos || ${OS} = red || ${OS} = oracle || ${OS} = rocky || ${OS} = alma ]]; then
+	if [ "${OSVER}" = 7 ]; then
+		PAKMGR="yum -y"
+	fi
+	if [ "${OSVER}" = 8 ]; then
+	PAKMGR="dnf -y"
+	fi
+fi
+
+#####################################
+#### Install Auto Update Service ####
+#####################################
+if [[ ${OS} = centos || ${OS} = red || ${OS} = oracle || ${OS} = rocky || ${OS} = alma ]]; then
+	if [ "${OSVER}" = 6 ] || [ "${OSVER}" = 7 ]; then
+        ${PAKMGR} update
+		${PAKMGR} install yum-cron
+        if  [ "${OSVER}" = 6 ]; then
+            chkconfig yum-cron on
+            chkconfig yum-updatesd off
+            service yum-updatesd stop
+            #echo 'exclude= http php* kernel*' >> /etc/yum.conf #     <-- If you need to add exclude package from updating 
+            #sed -i 's/YUM_PARAMETER=""/YUM_PARAMETER="-x http -x php* -x kernel*"/g' >> $yum6cnf # <-- If you need to add exclude package from updating
+            sed -i 's/CHECK_ONLY=yes/CHECK_ONLY=no/g' $yum6cnf
+            sed -i 's/DOWNLOAD_ONLY=yes/DOWNLOAD_ONLY=no/g' $yum6cnf
+            sed -i 's/MAILTO=/MAILTO=root/g' $yum6cnf
+            service yum-cron start
+        fi
+        if  [ "${OSVER}" = 7 ]; then
+            sed -i 's/update_cmd = default/update_cmd = security/g' $yum7cnf #<-- comment this out for ALL available upgrades
+            sed -i 's/apply_updates = no/apply_updates = yes/g' $yum7cnf
+            sed -i 's/download_updates = no/download_updates = yes/g' $yum7cnf
+            systemctl enable --nom yum-cron
+        fi 
+    fi
+	if [ "${OSVER}" = 8 ] || [ "${OSVER}" = 9 ]; then
+        ${PAKMGR} update
+		${PAKMGR} install dnf-automatic 
+		sed -i 's/upgrade_type = default/upgrade_type = security/g' $dnfcnf #<-- comment this out for ALL available upgrades
+		sed -i 's/apply_updates = no/apply_updates = yes/g' $dnfcnf
+		systemctl enable --now dnf-automatic.timer
+	fi
+elif [ "${OS}" = ubuntu ]; then
+    ${PAKMGR} upgrade
+	${PAKMGR} install unattended-upgrades apticron
+    touch $aptcnf/20auto-upgrades
+	no_show << EOF > $aptcnf/20auto-upgrades
+	APT::Periodic::Update-Package-Lists "1";
+	APT::Periodic::Download-Upgradeable-Packages "1";
+	APT::Periodic::AutocleanInterval "7";
+	APT::Periodic::Unattended-Upgrade "1";
+EOF
+    sed -i 's/\/\/Unattended-Upgrade\:\:Mail "root";/Unattended-Upgrade\:\:Mail "root";/g' $aptcnf/50unattended-upgrades
+fi