2

I have two ppa added to my Ubuntu 16.04 installation and would like to freeze the current release that I have thoroughly tested.

add-apt-repository ppa:certbot/certbot 
add-apt-repository ppa:freeradius/stable-3.0

Is there any way to freeze the current version, so that future unattended upgrades don't get the latest which may break the production system?

This is how I have setup my unattended upgrades.

sed -r \
-e 's|^//Unattended-Upgrade::MinimalSteps "true";$|Unattended-Upgrade::MinimalSteps "true";|' \
-e 's|^//Unattended-Upgrade::Mail "root";$|Unattended-Upgrade::Mail "root";|' \
-e 's|^//Unattended-Upgrade::Automatic-Reboot "false";$|Unattended-Upgrade::Automatic-Reboot "true";|' \
-e 's|^//Unattended-Upgrade::Remove-Unused-Dependencies "false";|Unattended-Upgrade::Remove-Unused-Dependencies "true";|' \
-e 's|^//Unattended-Upgrade::Automatic-Reboot-Time "02:00";$|Unattended-Upgrade::Automatic-Reboot-Time "03:00";|' \
-i /etc/apt/apt.conf.d/50unattended-upgrades

echo 'APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::AutocleanInterval "7";
APT::Periodic::Unattended-Upgrade "1";
' > /etc/apt/apt.conf.d/10periodic

service unattended-upgrades restart

Ideally, I could test this first on a test system, and when I'm sure that it all works, I could unfreeze the ppa on production to upgrade to the latest and then freeze it again.

Is this possible?

marked as duplicate by WinEunuuchs2Unix, Eric Carvalho, karel, pomsky, N0rbert Apr 3 '18 at 21:26

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 1
  • What makes you think the default for unattended-upgrades upgrades from ppa's in the first place? – doug Apr 3 '18 at 11:47
  • This is a good question @doug. Was I mistaken in my assumption earlier? Because if unattended upgrades don't get the latest from PPA, then I'm safe enough to keep it as it is. As I can exercise control. Kindly confirm, if this is the case. – Houman Apr 3 '18 at 13:31
  • 1
    Can confirm that unattended-upgrades will Not upgrade ppa packages. You can check yourself with sudo unattended-upgrade --dry-run -d – doug Apr 3 '18 at 18:33

Browse other questions tagged or ask your own question.