apt_upgrade
Install pending apt updates on Linux hosts noninteractively with a dry-run plan, rolling batches, optional reboot, and Docker restart safeguards.
Instructions
Install pending apt updates on hosts (noninteractive, keeps existing config files). Shows what will be upgraded; warns when docker/containerd are in the list (remnanode restarts). Optional reboot afterwards when the kernel asks for it. Rolling, batch 1 by default.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| apply | No | false (default) = dry run: show what will happen on which hosts and a planHash. true = run it; needs planHash | |
| batch | No | hosts at a time (rolling). Default depends on the action: 1 for disruptive ones | |
| target | No | hosts: all | <host> | <glob nl-*> | <group> | role:<edge|remnanode|panel|docker> | tag:<tag>; comma-separated, !x excludes | all |
| planHash | No | planHash from the dry run of the very same call, good for one apply; refused if targets or their state changed since | |
| skipDocker | No | hold docker-ce/containerd back: their upgrade restarts every container (remnanode — clients reconnect); do them off-peak | |
| distUpgrade | No | apt-get dist-upgrade (may add/remove packages, e.g. new kernels) | |
| securityOnly | No | only packages from *-security | |
| includeKernel | No | also kernel and GPU-driver packages (linux-image/modules/headers, nvidia) — they only take effect after a reboot | |
| continueOnError | No | keep going after a host fails (default: stop the rollout at the first failure) | |
| skipUnreachable | No | skip hosts that do not answer over ssh instead of refusing the whole plan (they show as skipped) | |
| rebootIfRequired | No | reboot afterwards when /var/run/reboot-required appears (waits for the host to return) |