Files
sysadmin/setup-unattended-upgrades.sh
T

52 lines
1.7 KiB
Bash

#!/bin/bash
set -e
echo "=== Kubuntu Unattended-Upgrades Setup ==="
echo ""
# Prüfen ob Root
if [ "$EUID" -ne 0 ]; then
echo "Bitte als root oder mit sudo ausführen"
exit 1
fi
echo "[1/5] Paketlisten aktualisieren..."
apt update
echo "[2/5] unattended-upgrades installieren..."
apt install -y unattended-upgrades
echo "[3/5] Konfiguration anpassen..."
# Backup erstellen
cp /etc/apt/apt.conf.d/50unattended-upgrades /etc/apt/apt.conf.d/50unattended-upgrades.bak.$(date +%Y%m%d)
# Security-Updates aktivieren
sed -i 's|//\("${distro_id}:${distro_codename}-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
sed -i 's|//\("${distro_id}ESMApps:${distro_codename}-apps-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
sed -i 's|//\("${distro_id}ESM:${distro_codename}-infra-security";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
# Optionale: Alle Updates aktivieren (Security + Updates)
# sed -i 's|//\("${distro_id}:${distro_codename}-updates";\)|\1|' /etc/apt/apt.conf.d/50unattended-upgrades
echo "[4/5] GUI-Notifier deaktivieren..."
if dpkg -l | grep -q plasma-discover-notifier; then
apt remove --purge -y plasma-discover-notifier
fi
# Autostart sicherheitshalber entfernen
if [ -f /etc/xdg/autostart/org.kde.discover.notifier.desktop ]; then
rm /etc/xdg/autostart/org.kde.discover.notifier.desktop
fi
echo "[5/5] Service aktivieren und starten..."
systemctl enable --now unattended-upgrades
echo ""
echo "=== Setup abgeschlossen ==="
echo "Status prüfen mit: sudo systemctl status unattended-upgrades"
echo "Testlauf mit: sudo unattended-upgrade --dry-run"
echo "Logs unter: /var/log/unattended-upgrades/"
echo ""
echo "Konfiguration gesichert unter: /etc/apt/apt.conf.d/50unattended-upgrades.bak.$(date +%Y%m%d)"