Hashar has uploaded a new change for review.
https://gerrit.wikimedia.org/r/183019
Change subject: contint: hourly auto update of wikimedia packages
......................................................................
contint: hourly auto update of wikimedia packages
Debian has a system to automatically ugprade packages on a daily basis.
On labs that is only used enable for the security updates.
Craft an apt configuration file to allow automatic upgrades of the
-wikimedia packages
Link the daily apt cronjob to be run hourly.
Should get us hhvm updated automatically on CI slaves.
Change-Id: Ib3f2b4c63ca232058132ec970a9cde2f7ce1790e
---
A modules/contint/files/51unattended-upgrades-wikimedia
M modules/contint/manifests/packages/labs.pp
2 files changed, 17 insertions(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/19/183019/1
diff --git a/modules/contint/files/51unattended-upgrades-wikimedia
b/modules/contint/files/51unattended-upgrades-wikimedia
new file mode 100644
index 0000000..8879060
--- /dev/null
+++ b/modules/contint/files/51unattended-upgrades-wikimedia
@@ -0,0 +1,3 @@
+// This file is managed by puppet
+// file:///contint/51unattended-upgrades-wikimedia
+Unattended-Upgrade::Allowed-Origins {
"${distro_id}:${distro_codename}-wikimedia"; }
diff --git a/modules/contint/manifests/packages/labs.pp
b/modules/contint/manifests/packages/labs.pp
index 5956c2c..84bfc98 100644
--- a/modules/contint/manifests/packages/labs.pp
+++ b/modules/contint/manifests/packages/labs.pp
@@ -9,6 +9,20 @@
# Fonts needed for browser tests screenshots (bug 69535)
include mediawiki::packages::fonts
+ # Self update the wikimedia packages (such as hhvm) on an hourly basis
+ file { '/etc/apt/apt.conf.d/51unattended-upgrades-wikimedia':
+ ensure => present,
+ source => 'puppet:///modules/contint/51unattended-upgrades-wikimedia',
+ owner => 'root',
+ group => 'root',
+ mode => '0444',
+ }
+ file { '/etc/apt/cron.hourly/apt':
+ ensure => link,
+ target => '/etc/apt/cron.daily/apt',
+ require => Package['unattended-upgrades'],
+ }
+
# Shell script wrappers to ease package building
# Package generated via the mirror operations/debs/jenkins-debian-glue.git
--
To view, visit https://gerrit.wikimedia.org/r/183019
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib3f2b4c63ca232058132ec970a9cde2f7ce1790e
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Hashar <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
