Make package auto updates tunable

[Kevin Stevens]

Once Openstack infrastructure is deployed, it would probably make sense to disable automatic package updates so as not to introduce the possibility of unexpected changes to the environment. Can we remove the 'unattended-upgrades' package?

If not that, perhaps we could have a tunable list of packages to exclude from auto updates that would be added to /etc/apt/apt.conf.d/50unattended-upgrades under "Unattended-Upgrade::Package-Blacklist {"

[Kevin Stevens (kstev)]

Moved to https://github.com/rcbops/rpc-extras/issues/24

[Nolan Brubaker (nolan-brubaker)]

Can I ask why this was made invalid? This sounds like a reasonable option to allow for deployers from an upstream perspective.

[Jesse Pretorius (jesse-pretorius)]

Doing something like this falls outside of the realm of deploying OpenStack and instead falls into the realm of OS configuration that doesn't relate to OpenStack. It was therefore deemed to be out of scope for OpenStack-ansible.

[Christopher H. Laco (claco)]

Any opposition to reopening this and setting a target for just the Juno branch?

This needs a backport from https://github.com/rcbops/rpc-extras/issues/24 for Juno and the next 10..x revision release.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: juno
Review: https://review.openstack.org/203858

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/203858
Committed: https://git.openstack.org/cgit/stackforge/os-ansible-deployment/commit/?id=0da3a581c71540738d342c15db44ced023ffc46b
Submitter: Jenkins
Branch: juno

commit 0da3a581c71540738d342c15db44ced023ffc46b
Author: Christopher H. Laco <email address hidden>
Date: Mon Jul 20 18:56:07 2015 -0400

    Disable Unattended Upgrades

    Unattended upgrades for the security branch is enabled by default.
    After some period of time, the /boot partition fills up with new
    kernels, which is unexpected and undesired.

    This patch disables the security updates as part of the rpc_support
    playbook.

    DocImpact
    Closes-bug: 1411897
    Change-Id: I6bb849fa972be77b25787dbc40462b0a2546969f