Everbrent/cis
8
0
Fork 0
mirror of https://github.com/m8tin/cis.git synced 2026-06-02 14:56:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

Checks improved

Browse Source
This commit is contained in:
Martin Berghaus
2026-05-09 21:59:40 +02:00
parent ee114ee732
commit 00b920763e
30 changed files with 21 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
definitions/default/check/all/system_unattended_upgrades_are_disabled.check.sh
Executable
+14
View File
@@ -0,0 +1,14 @@
#!/bin/bash
#
# There are three components working together:
# - systemctl status unattended-upgrades.service (One-Shot-Service, loaded means system knows the service, it DOES NOT run in background)
# - systemctl status apt-daily.timer (apt update)
# - systemctl status apt-daily-upgrade.timer (apt upgrade)
#
# So disable/enaable the Upgrade with:
# - systemctl disable --now apt-daily-upgrade.timer (--now means disable and stop)
# - systemctl enable --now apt-daily-upgrade.timer (--now means enable and start)
#
! systemctl is-enabled apt-daily-upgrade.timer > /dev/null 2>&1 \
&& exit 0
exit 1