root
88551536e6
Amp-Thread-ID: https://ampcode.com/threads/T-019cc404-c628-759e-a50b-f5eeea35b91f Co-authored-by: Amp <amp@ampcode.com>
95 lines
4.3 KiB
Bash
95 lines
4.3 KiB
Bash
#!/bin/bash
|
|
|
|
######################################################################################
|
|
#### Version 2.01 ####
|
|
#### For questions or comments contact@mylinux.work ####
|
|
#### Author : Phil Connor ####
|
|
#### ####
|
|
#### Notes : ####
|
|
#### This script is a simple "helper" to configure Auto Updates on linux ####
|
|
#### servers. ####
|
|
#### ####
|
|
#### Use this script at your OWN risk. There is no guarantee whatsoever. ####
|
|
#### ####
|
|
#### Usage "tuning.sh" or "tuning.sh ssd" if you are running on ssd'd ####
|
|
######################################################################################
|
|
|
|
###########################
|
|
#### System Variables ####
|
|
###########################
|
|
OS=$(grep PRETTY_NAME /etc/os-release | sed 's/PRETTY_NAME=//g' | tr -d '="' | awk '{print $1}' | tr '[:upper:]' '[:lower:]')
|
|
OSVER=$(grep VERSION_ID /etc/os-release | sed 's/VERSION_ID=//g' | tr -d '="' | awk -F. '{print $1}')
|
|
aptcnf="/etc/apt/apt.conf.d"
|
|
dnfcnf="/etc/dnf/automatic.conf"
|
|
yum6cnf="/etc/sysconfig/yum-cron"
|
|
yum7cnf="/etc/yum/yum-cron.conf"
|
|
|
|
###################################
|
|
#### Copy to EOF file function ####
|
|
###################################
|
|
function no_show() {
|
|
{
|
|
expand | awk 'NR == 1 {match($0, /^ */); l = RLENGTH + 1}
|
|
{print substr($0, l)}'
|
|
}
|
|
}
|
|
|
|
###########################################################
|
|
#### Detect Package Manger from OS and OSVer Variables ####
|
|
###########################################################
|
|
if [ "${OS}" = ubuntu ]; then
|
|
PAKMGR="apt-get -y"
|
|
elif [[ ${OS} = centos || ${OS} = red || ${OS} = oracle || ${OS} = rocky || ${OS} = alma ]]; then
|
|
if [ "${OSVER}" = 7 ]; then
|
|
PAKMGR="yum -y"
|
|
fi
|
|
if [ "${OSVER}" = 8 ]; then
|
|
PAKMGR="dnf -y"
|
|
fi
|
|
fi
|
|
|
|
#####################################
|
|
#### Install Auto Update Service ####
|
|
#####################################
|
|
if [[ ${OS} = centos || ${OS} = red || ${OS} = oracle || ${OS} = rocky || ${OS} = alma ]]; then
|
|
if [ "${OSVER}" = 6 ] || [ "${OSVER}" = 7 ]; then
|
|
${PAKMGR} update
|
|
${PAKMGR} install yum-cron
|
|
if [ "${OSVER}" = 6 ]; then
|
|
chkconfig yum-cron on
|
|
chkconfig yum-updatesd off
|
|
service yum-updatesd stop
|
|
#echo 'exclude= http php* kernel*' >> /etc/yum.conf # <-- If you need to add exclude package from updating
|
|
#sed -i 's/YUM_PARAMETER=""/YUM_PARAMETER="-x http -x php* -x kernel*"/g' >> $yum6cnf # <-- If you need to add exclude package from updating
|
|
sed -i 's/CHECK_ONLY=yes/CHECK_ONLY=no/g' $yum6cnf
|
|
sed -i 's/DOWNLOAD_ONLY=yes/DOWNLOAD_ONLY=no/g' $yum6cnf
|
|
sed -i 's/MAILTO=/MAILTO=root/g' $yum6cnf
|
|
service yum-cron start
|
|
fi
|
|
if [ "${OSVER}" = 7 ]; then
|
|
sed -i 's/update_cmd = default/update_cmd = security/g' $yum7cnf #<-- comment this out for ALL available upgrades
|
|
sed -i 's/apply_updates = no/apply_updates = yes/g' $yum7cnf
|
|
sed -i 's/download_updates = no/download_updates = yes/g' $yum7cnf
|
|
systemctl enable --nom yum-cron
|
|
fi
|
|
fi
|
|
if [ "${OSVER}" = 8 ] || [ "${OSVER}" = 9 ]; then
|
|
${PAKMGR} update
|
|
${PAKMGR} install dnf-automatic
|
|
sed -i 's/upgrade_type = default/upgrade_type = security/g' $dnfcnf #<-- comment this out for ALL available upgrades
|
|
sed -i 's/apply_updates = no/apply_updates = yes/g' $dnfcnf
|
|
systemctl enable --now dnf-automatic.timer
|
|
fi
|
|
elif [ "${OS}" = ubuntu ]; then
|
|
${PAKMGR} upgrade
|
|
${PAKMGR} install unattended-upgrades apticron
|
|
touch $aptcnf/20auto-upgrades
|
|
no_show << EOF > $aptcnf/20auto-upgrades
|
|
APT::Periodic::Update-Package-Lists "1";
|
|
APT::Periodic::Download-Upgradeable-Packages "1";
|
|
APT::Periodic::AutocleanInterval "7";
|
|
APT::Periodic::Unattended-Upgrade "1";
|
|
EOF
|
|
sed -i 's/\/\/Unattended-Upgrade\:\:Mail "root";/Unattended-Upgrade\:\:Mail "root";/g' $aptcnf/50unattended-upgrades
|
|
fi
|