55 lines
1.9 KiB
Bash
55 lines
1.9 KiB
Bash
#!/bin/bash
|
|
|
|
set -e
|
|
|
|
echo "=== Kubuntu Unattended-Upgrades Setup (VOLLSTÄNDIG) ==="
|
|
echo ""
|
|
|
|
# Prüfen ob Root
|
|
if [ "$EUID" -ne 0 ]; then
|
|
echo "Bitte als root oder mit sudo ausführen"
|
|
exit 1
|
|
fi
|
|
|
|
echo "[1/6] Paketlisten aktualisieren..."
|
|
apt update
|
|
|
|
echo "[2/6] unattended-upgrades installieren..."
|
|
apt install -y unattended-upgrades
|
|
|
|
echo "[3/6] Konfiguration anpassen..."
|
|
# Backup erstellen
|
|
cp /etc/apt/apt.conf.d/50unattended-upgrades /etc/apt/apt.conf.d/50unattended-upgrades.bak.$(date +%Y%m%d)
|
|
|
|
# Security-Updates aktivieren
|
|
sed -i 's|//\("${distro_id}:${distro_codename}-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
|
|
sed -i 's|//\("${distro_id}ESMApps:${distro_codename}-apps-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
|
|
sed -i 's|//\("${distro_id}ESM:${distro_codename}-infra-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
|
|
|
|
# AUCH REGULÄRE UPDATES AKTIVIEREN (Full-Version!)
|
|
echo "[4/6] Reguläre Updates aktivieren..."
|
|
sed -i 's|//\("${distro_id}:${distro_codename}-updates";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
|
|
|
|
echo "[5/6] GUI-Notifier deaktivieren..."
|
|
if dpkg -l | grep -q plasma-discover-notifier; then
|
|
apt remove --purge -y plasma-discover-notifier
|
|
fi
|
|
|
|
# Autostart sicherheitshalber entfernen
|
|
if [ -f /etc/xdg/autostart/org.kde.discover.notifier.desktop ]; then
|
|
rm /etc/xdg/autostart/org.kde.discover.notifier.desktop
|
|
fi
|
|
|
|
echo "[6/6] Service aktivieren und starten..."
|
|
systemctl enable --now unattended-upgrades
|
|
|
|
echo ""
|
|
echo "=== Setup abgeschlossen (VOLLSTÄNDIG) ==="
|
|
echo "Installiert: Security-Updates + reguläre Updates"
|
|
echo ""
|
|
echo "Status prüfen mit: sudo systemctl status unattended-upgrades"
|
|
echo "Testlauf mit: sudo unattended-upgrade --dry-run"
|
|
echo "Logs unter: /var/log/unattended-upgrades/"
|
|
echo ""
|
|
echo "Konfiguration gesichert unter: /etc/apt/apt.conf.d/50unattended-upgrades.bak.$(date +%Y%m%d)"
|