in ospatch/system_linux.go [35:105]
func DisableAutoUpdates(ctx context.Context) {
// yum-cron on el systems
if _, err := os.Stat("/usr/lib/systemd/system/yum-cron.service"); err == nil {
out, err := exec.Command(systemctl, "is-enabled", "yum-cron.service").CombinedOutput()
if err != nil {
if eerr, ok := err.(*exec.ExitError); ok {
// Error code of 1 indicates disabled.
if eerr.ExitCode() == 1 {
return
}
}
clog.Errorf(ctx, "Error checking status of yum-cron, error: %v, out: %s", err, out)
}
clog.Debugf(ctx, "Disabling yum-cron")
out, err = exec.Command(systemctl, "stop", "yum-cron.service").CombinedOutput()
if err != nil {
clog.Errorf(ctx, "Error stopping yum-cron, error: %v, out: %s", err, out)
}
out, err = exec.Command(systemctl, "disable", "yum-cron.service").CombinedOutput()
if err != nil {
clog.Errorf(ctx, "Error disabling yum-cron, error: %v, out: %s", err, out)
}
} else if _, err := os.Stat("/usr/sbin/yum-cron"); err == nil {
out, err := exec.Command("/sbin/chkconfig", "yum-cron").CombinedOutput()
if err != nil {
clog.Errorf(ctx, "Error checking status of yum-cron, error: %v, out: %s", err, out)
}
if bytes.Contains(out, []byte("disabled")) {
return
}
clog.Debugf(ctx, "Disabling yum-cron")
out, err = exec.Command("/sbin/chkconfig", "yum-cron", "off").CombinedOutput()
if err != nil {
clog.Errorf(ctx, "Error disabling yum-cron, error: %v, out: %s", err, out)
}
}
// dnf-automatic on el8 systems
if _, err := os.Stat("/usr/lib/systemd/system/dnf-automatic.timer"); err == nil {
out, err := exec.Command(systemctl, "list-timers", "dnf-automatic.timer").CombinedOutput()
if err != nil {
clog.Errorf(ctx, "Error checking status of dnf-automatic, error: %v, out: %s", err, out)
}
if bytes.Contains(out, []byte("0 timers listed")) {
return
}
clog.Debugf(ctx, "Disabling dnf-automatic")
out, err = exec.Command(systemctl, "stop", "dnf-automatic.timer").CombinedOutput()
if err != nil {
clog.Errorf(ctx, "Error stopping dnf-automatic, error: %v, out: %s", err, out)
}
out, err = exec.Command(systemctl, "disable", "dnf-automatic.timer").CombinedOutput()
if err != nil {
clog.Errorf(ctx, "Error disabling dnf-automatic, error: %v, out: %s", err, out)
}
}
// apt unattended-upgrades
// TODO: Removing the package is a bit overkill, look into just managing
// the configs, this is probably best done by looking through
// /etc/apt/apt.conf.d/ and setting APT::Periodic::Unattended-Upgrade to 0.
if _, err := os.Stat("/usr/bin/unattended-upgrades"); err == nil {
clog.Debugf(ctx, "Removing unattended-upgrades package")
if err := packages.RemoveAptPackages(ctx, []string{"unattended-upgrades"}); err != nil {
clog.Errorf(ctx, "%v", err.Error())
}
}
}