Move auto-reboot to 04:00 to avoid e2scrub conflict

e2scrub_all.timer runs Sundays at 03:10. The previous 03:30 reboot
window gave only 20 minutes. 04:00 gives a safe 50-minute buffer
after both the 03:00 config backup and the filesystem scrub.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
William Valentin
2026-03-12 12:51:47 -07:00
parent d0514fa345
commit 07927f6101

View File

@@ -49,7 +49,7 @@
# ── Automatic security updates ───────────────────────────────────────── # ── Automatic security updates ─────────────────────────────────────────
# The upstream role installs unattended-upgrades with security-only updates. # The upstream role installs unattended-upgrades with security-only updates.
# We extend it here to enable automatic reboots for kernel/libc updates, # We extend it here to enable automatic reboots for kernel/libc updates,
# scheduled at 03:30 (after the 03:00 config backup). # scheduled at 04:00 — after the 03:00 backup and the Sunday 03:10 e2scrub.
- name: Ensure unattended-upgrades is installed - name: Ensure unattended-upgrades is installed
ansible.builtin.apt: ansible.builtin.apt:
@@ -75,9 +75,9 @@
Unattended-Upgrade::Remove-Unused-Dependencies "true"; Unattended-Upgrade::Remove-Unused-Dependencies "true";
Unattended-Upgrade::Remove-New-Unused-Dependencies "true"; Unattended-Upgrade::Remove-New-Unused-Dependencies "true";
Unattended-Upgrade::Remove-Unused-Kernel-Packages "true"; Unattended-Upgrade::Remove-Unused-Kernel-Packages "true";
// Reboot at 03:30 if required (after the 03:00 config backup) // Reboot at 04:00 if required (after 03:00 backup + Sunday 03:10 e2scrub)
Unattended-Upgrade::Automatic-Reboot "true"; Unattended-Upgrade::Automatic-Reboot "true";
Unattended-Upgrade::Automatic-Reboot-Time "03:30"; Unattended-Upgrade::Automatic-Reboot-Time "04:00";
notify: Restart unattended-upgrades notify: Restart unattended-upgrades
- name: Enable daily apt update and upgrade triggers - name: Enable daily apt update and upgrade triggers