Ask Your Question
1

How to disable automatic updates in Fedora 20?

asked 2014-02-08 09:35:07 -0500

amturnip gravatar image

updated 2014-09-28 10:42:38 -0500

mether gravatar image

How can I turn off Fedora 20's update-upon-reboot?

Two-thirds of my Fedora installations were deeply affected, due to unlucky timing, by the recent bad-SELinux-update debacle or inept recovery from it. I understand and accept that there are no guarantee with Fedora. If I run "yum update", I'd better have done a backup first and the consequences are mine. But automatic updates are another story. They had better work. Therefore, Fedora + automatic updates is an especially risky combination. I want to be able to opt certain computers out of the random drama: if I don't press "update", I want stable state.

I looked in Settings and I looked in Software, but I did not see options to control the automatic updates.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
3

answered 2014-02-08 14:06:40 -0500

marcindulak gravatar image

updated 2014-02-09 07:52:15 -0500

I think Fedora 20/19 comes by default with no automatic updates. There are at least two places where updates are handled, but i must say i have not tested all possible scenarios how they interplay. I do not provide a full answer, but only some observations that need to be clarified and documented (are they?):

  1. global settings as described on https://fedoraproject.org/wiki/AutoUpdates#How_are_automatic_updates_done.3F (by the way the information on this page looks quite up-to-date, why is it marked for deletion?) In order to disable updates do:

    su -c "sed -i 's/do_update =.*/do_update = no/' /etc/yum/yum-updatesd.conf"  # default on 19/20
    su -c "systemctl stop yum-updatesd.service"  # stop should not be needed, do it just in case
    su -c "systemctl disable yum-updatesd.service"  # same as above
    

    I have actually verified on Fedora 19 that by setting do_update = yes in /etc/yum/yum-updatesd.conf and restarting yum-updatesd.service updates are applied automatically as they should, and run_interval, updaterefresh options do work.

  2. user settings in gnome itself, i.e. those that apply to update notifications popping up (see https://ask.fedoraproject.org/en/question/38951/why-is-gnome-tool-software-not-updating/ ). In order to disable the plugin do:

    gsettings set org.gnome.settings-daemon.plugins.updates active false
    

    This is unfortunately (see why at the bottom) a per-user setting. You can play with other options gsettings list-recursively org.gnome.settings-daemon.plugins.updates, but every time you change something there you may need to "restart" gnome-settings-daemon with:

    # this may kill gnome-settings-daemon without it being able to restart itself!
    # better logout and login again (or reboot?)
    su -c "kill -15 `pidof /usr/libexec/gnome-settings-daemon`"
    

What i'm actually horrified by is that we seem to still have this problem: http://www.theregister.co.uk/2009/11/19/fedora_12_root_imbroglio/ , i.e. a non-priviledged user can apply updates through a pop-up notification. Can someone from seniors confirm this and act if necessary?

edit flag offensive delete link more

Comments

Everyone being install updates but only root/admin users being able to install new packages or remove existing packages is expected behavior in Fedora

mether gravatar imagemether ( 2014-02-08 23:48:33 -0500 )edit

Do you know a thread discussing how this choice was made? Will that be a feature of the coming RHEL7 too?

marcindulak gravatar imagemarcindulak ( 2014-02-09 07:51:17 -0500 )edit

https://www.redhat.com/archives/fedora-devel-list/2009-November/msg01445.html has an explanation. RHEL has its own policy which is different from Fedora since the customer base is quite different.

mether gravatar imagemether ( 2014-02-10 15:09:04 -0500 )edit

It's a long thread from 2009 with no(?) reference to RHEL. Citing from it `So, what Richard is planning is an update to PackageKit that changes the policy so that the root password will be required for package installation. We should have this out in fedora-updates quite soon; hopefully tomorrow.

Once we get that out, we'll also make sure that there is documentation available about how you can configure some users to be able to install software without having to type the root password every time.` Does it mean that this promise has been dropped at some point? Can you provide a direct link?

marcindulak gravatar imagemarcindulak ( 2014-02-11 11:52:05 -0500 )edit

Question Tools

1 follower

Stats

Asked: 2014-02-08 09:35:07 -0500

Seen: 11,516 times

Last updated: Feb 09 '14