Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Comment - Ubuntu 16.04-18.04 - disable snap and other upgrade software #51

Open
BradleyA opened this issue Jun 10, 2020 · 1 comment
Open
Assignees

Comments

@BradleyA
Copy link
Owner

Tell us about your incident:
A clear and concise description, 'what is your incident?'

->  https://askubuntu.com/questions/1057458/how-to-remove-ubuntus-automatic-internet-connection-needs

To avoid random reboots for kernal updates is effecting DNS, routing, SLA agreement

Expected results:
A clear and concise description of what results you expected.

-> 

Popularity contest is disabled by default. You can check and disable it with:

sudo dpkg-reconfigure popularity-contest

You can do ...

sudo apt remove popularity-contest

to remove it too.

Disable apt-daily.service:

sudo systemctl stop apt-daily.timer
sudo systemctl disable apt-daily.timer
sudo systemctl disable apt-daily.service
sudo systemctl stop apt-daily-upgrade.timer
sudo systemctl disable apt-daily-upgrade.timer
sudo systemctl disable apt-daily-upgrade.service

One-liner from @muru <3:

sudo systemctl disable --now apt-daily{,-upgrade}.{timer,service}

Disable unattended upgrade:

sudo dpkg-reconfigure -plow unattended-upgrades

Update manager can only be stopped by removing it:

sudo apt purge update-manager-core

You can NOT disable automatic update for snaps. You can set the period when it updates with snap set core refresh.schedule= but the system will ignore this is if it took too long to update snaps and that would be within 24 hours. This will remove anything snap related:

sudo apt purge snapd ubuntu-core-launcher squashfs-tools

A less intrusive method would be to prevent connection to the server by adding a DENY to your firewall rules (or in the router). To disable the systemd service would be ...

sudo systemctl disable snapd.refresh.service

but that too seems to ignore the 24 hour period.

Regarding snaps:

The agreed semantics to be implemented are the following:

  • Refreshes may be scheduled at an arbitrary weekday and time within the month (e.g. second Tuesday between 1pm and 2pm).
  • Refreshes may be deferred for up to another month so that missed windows and re-scheduling may happen without strange side effects. For example, if it was scheduled for the first day, and then gets scheduled for the end of the month just before it happens, there may effectively be a two months window without refreshes.
  • If the system remains out-of-date after the two months window, the system will start attempting to refresh out of the window.
  • That maximum window is reset every time the system is refreshed, so out-of-band updates may performed at a convenient maintenance window.

So a window of 2 months is possible if you do not reboot.

I do disagree with your way of thinking though. Except for contest (and that one is not active) all of these are about fixing bugs and providing better content. You will make your system LESS secure by disabling these options.

@BradleyA BradleyA added bug Something isn't working, an incident requiring resources for assessment and resolution. needs investigation What? How? labels Jun 10, 2020
@BradleyA BradleyA self-assigned this Jun 10, 2020
@BradleyA
Copy link
Owner Author

There are at least 3 opt-outs you can perform:

Opt out of the ubuntu-report mechanism, by running sudo ubuntu-report -f send no.
Opt out of the package popularity contest, by editing /etc/popularity-contest.conf and changing the value of PARTICIPATE to no.
Opt out of automatic bug reports by visiting system settings (via the upper right corner menu), then Privacy, then Problem Reporting, and then unchecking Automatic Problem Reporting.

@BradleyA BradleyA changed the title Incident Report - Ubuntu 16-8.04 - disable Ubuntu 16-8.04 snap and other upgrade software Incident Report - Ubuntu 16.04-18.04 - disable Ubuntu 16.04-18.04 snap and other upgrade software Jun 19, 2020
@BradleyA BradleyA added OS Changes and removed bug Something isn't working, an incident requiring resources for assessment and resolution. labels Jun 21, 2020
@BradleyA BradleyA changed the title Incident Report - Ubuntu 16.04-18.04 - disable Ubuntu 16.04-18.04 snap and other upgrade software Comment - Ubuntu 16.04-18.04 - disable Ubuntu 16.04-18.04 snap and other upgrade software Jun 23, 2020
@BradleyA BradleyA changed the title Comment - Ubuntu 16.04-18.04 - disable Ubuntu 16.04-18.04 snap and other upgrade software Comment - Ubuntu 16.04-18.04 - disable snap and other upgrade software Jun 23, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant