From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 11D6222A4CD for ; Fri, 18 Apr 2025 18:33:47 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=198.137.202.133 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1745001230; cv=none; b=Wv9jWEAy6krYo8zM6jiMafF5sWXP2Yc0r0+yFTQtVFOfxdkHKG+B4JRptaGf175LisPae9IdoXPkDXZNc+041u1mDIKibxvQ5cmSmcuGyiz/UWsJcKESfJsjB38x/GvFCfk4cTimo3es1S2oqkp9bz9TD29PuDQ1h0vaMf5M78g= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1745001230; c=relaxed/simple; bh=5QJizH5fakhru6uLOHBabzEDimYUoHyK8TYMZCswJvA=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=kIs3i0Q5yzD/TprfFjYmYxRNY6lCC0c473cE1hbzLm28EuT0Nr4olzwD+aL/DQyQKeffPpy1JQltiUo/S7UoU0XyPMM/B257PQ7+WGwvN/0JT6FMn5QK70V/xmEIaQdU2xEoeI20DHZ/riIsqF6FkJ2v+VBX67CLGcUEEp2fxgg= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=quarantine dis=none) header.from=kernel.org; spf=none smtp.mailfrom=infradead.org; dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b=RfCi5jaL; arc=none smtp.client-ip=198.137.202.133 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=quarantine dis=none) header.from=kernel.org Authentication-Results: smtp.subspace.kernel.org; spf=none smtp.mailfrom=infradead.org Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=infradead.org header.i=@infradead.org header.b="RfCi5jaL" DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=infradead.org; s=bombadil.20210309; h=Sender:Content-Transfer-Encoding: MIME-Version:Message-ID:Date:Subject:Cc:To:From:Reply-To:Content-Type: Content-ID:Content-Description:In-Reply-To:References; bh=naHlw7MoxhfghuDh0yyFDIOgSaNJHCU39bR7yBxM0AM=; b=RfCi5jaLr/HDvu0F8gyRnzj3k/ nJza9L8Pb0+O0LWVSlvHFuJLMyN2BN1x1n7dl/w83fI4h49VNjPwOwgjLHYIYkrUIxja2a1IPw3Qy TFQpzZKDITIHT7PYVMe4ndADR3XlgXg6JWf2WKUqSjgJlCKn5hfWHTqsBUroMt5B/oSo8Mu2FmQYb oGy7gNa3iOPIA2h0AIQ6mFf+w3b9q64t4k51uhwijtRBLtA4Q4F+Z1JaOgfx/kmTV8ndtQPLm1xMJ IpeUnU0RGGq42IrYGsEs5mWvZA8TNO/5GZm+GvbzL3jClyI18rhZJ+QpI92x4puyreruPtHUUl/vl tLukj28Q==; Received: from mcgrof by bombadil.infradead.org with local (Exim 4.98.2 #2 (Red Hat Linux)) id 1u5qX5-0000000HT0I-2hUO; Fri, 18 Apr 2025 18:33:47 +0000 From: Luis Chamberlain To: Chuck Lever , Daniel Gomez , kdevops@lists.linux.dev Cc: Luis Chamberlain Subject: [PATCH] devconfig: enhance firstconfig on debian Date: Fri, 18 Apr 2025 11:33:45 -0700 Message-ID: <20250418183345.4163050-1-mcgrof@kernel.org> X-Mailer: git-send-email 2.49.0 Precedence: bulk X-Mailing-List: kdevops@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Sender: Luis Chamberlain There's a slew of stupid packages we need to disable to make CI more robust and deterministic at bringup. The unattended-upgrades is one of them, the other one is the systemd-networkd-wait-online.service which is just broken on debian trixie in the way we setup networking. Although there are devconfig tasks already to disable these, its not enough as devconfig playbook may not be run until later, and so we need to do this as early as possible. Signed-off-by: Luis Chamberlain --- .../tasks/install-deps/debian/main.yml | 26 ++++++++++++++++++- 1 file changed, 25 insertions(+), 1 deletion(-) diff --git a/playbooks/roles/devconfig/tasks/install-deps/debian/main.yml b/playbooks/roles/devconfig/tasks/install-deps/debian/main.yml index 954f0aede3b2..dea648e21465 100644 --- a/playbooks/roles/devconfig/tasks/install-deps/debian/main.yml +++ b/playbooks/roles/devconfig/tasks/install-deps/debian/main.yml @@ -4,6 +4,7 @@ register: unattended_upgrade_status ignore_errors: true changed_when: false + tags: firstconfig - name: Set fact if unattended-upgrades is installed set_fact: @@ -20,6 +21,26 @@ make bringup when: - unattended_upgrades_installed|bool + tags: firstconfig + +- name: Stop and disable unattended-upgrades related services + become: yes + become_flags: 'su - -c' + become_method: sudo + systemd: + name: "{{ item }}" + state: stopped + enabled: no + daemon_reload: yes + loop: + - unattended-upgrades + - apt-daily.service + - apt-daily.timer + - apt-daily-upgrade.service + - apt-daily-upgrade.timer + - systemd-networkd-wait-online.service + ignore_errors: yes + tags: firstconfig - name: Upgrade Packages become: yes @@ -34,7 +55,7 @@ delay: 60 tags: firstconfig -- name: Remove unattended-upgrades package +- name: Remove unattended-upgrades package in case upgrade installed it become: yes become_flags: 'su - -c' become_method: sudo @@ -45,6 +66,7 @@ retries: 20 delay: 30 until: removal_result is not failed + tags: firstconfig - name: Remove optional unattended-upgrades configuration files if they exist become: yes @@ -59,6 +81,7 @@ - /etc/apt/apt.conf.d/50unattended-upgrades - /etc/apt/apt.conf.d/52unattended-upgrades-local ignore_errors: yes + tags: firstconfig - name: Stop and disable unattended-upgrades related services become: yes @@ -77,6 +100,7 @@ - apt-daily-upgrade.timer - systemd-networkd-wait-online.service ignore_errors: yes + tags: firstconfig - name: Allow for distro source change / upgrade become: yes -- 2.47.2