Add full unattended-upgrades script with all updates enabled

2026-04-29 12:29:57 +02:00
parent 9c4e2ea2ae
commit b7eda6e505
1 changed files with 54 additions and 0 deletions
@@ -0,0 +1,54 @@
+#!/bin/bash
+
+set -e
+
+echo "=== Kubuntu Unattended-Upgrades Setup (VOLLSTÄNDIG) ==="
+echo ""
+
+# Prüfen ob Root
+if [ "$EUID" -ne 0 ]; then 
+    echo "Bitte als root oder mit sudo ausführen"
+    exit 1
+fi
+
+echo "[1/6] Paketlisten aktualisieren..."
+apt update
+
+echo "[2/6] unattended-upgrades installieren..."
+apt install -y unattended-upgrades
+
+echo "[3/6] Konfiguration anpassen..."
+# Backup erstellen
+cp /etc/apt/apt.conf.d/50unattended-upgrades /etc/apt/apt.conf.d/50unattended-upgrades.bak.$(date +%Y%m%d)
+
+# Security-Updates aktivieren
+sed -i 's|//\("${distro_id}:${distro_codename}-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
+sed -i 's|//\("${distro_id}ESMApps:${distro_codename}-apps-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
+sed -i 's|//\("${distro_id}ESM:${distro_codename}-infra-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
+
+# AUCH REGULÄRE UPDATES AKTIVIEREN (Full-Version!)
+echo "[4/6] Reguläre Updates aktivieren..."
+sed -i 's|//\("${distro_id}:${distro_codename}-updates";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
+
+echo "[5/6] GUI-Notifier deaktivieren..."
+if dpkg -l | grep -q plasma-discover-notifier; then
+    apt remove --purge -y plasma-discover-notifier
+fi
+
+# Autostart sicherheitshalber entfernen
+if [ -f /etc/xdg/autostart/org.kde.discover.notifier.desktop ]; then
+    rm /etc/xdg/autostart/org.kde.discover.notifier.desktop
+fi
+
+echo "[6/6] Service aktivieren und starten..."
+systemctl enable --now unattended-upgrades
+
+echo ""
+echo "=== Setup abgeschlossen (VOLLSTÄNDIG) ==="
+echo "Installiert: Security-Updates + reguläre Updates"
+echo ""
+echo "Status prüfen mit: sudo systemctl status unattended-upgrades"
+echo "Testlauf mit: sudo unattended-upgrade --dry-run"
+echo "Logs unter: /var/log/unattended-upgrades/"
+echo ""
+echo "Konfiguration gesichert unter: /etc/apt/apt.conf.d/50unattended-upgrades.bak.$(date +%Y%m%d)"