From 72abc9d6def55ab47a3cd2ba5d73d28b74690e1c Mon Sep 17 00:00:00 2001
From: jack <jack@orbitek.co>
Date: Wed, 15 Jul 2026 07:45:16 +0000
Subject: [PATCH] =?UTF-8?q?=E6=9B=B4=E6=96=B0=20install=5Forbit=5Fenvironm?=
 =?UTF-8?q?ent.sh?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

停用自動更新
---
 install_orbit_environment.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/install_orbit_environment.sh b/install_orbit_environment.sh
index 55d571a..ed38f3b 100644
--- a/install_orbit_environment.sh
+++ b/install_orbit_environment.sh
@@ -5,6 +5,17 @@ if [[ -e "/etc/needrestart/needrestart.conf" ]]; then
     sudo sed -E -i "s/(^|#)\\\$nrconf\{restart\}\s*=.*/\$nrconf\{restart\} = 'a';/g" /etc/needrestart/needrestart.conf
     sudo sed -E -i "s/(^|#)\\\$nrconf\{kernelhints\}\s*=.*/\$nrconf\{kernelhints\} = -1;/g" /etc/needrestart/needrestart.conf
 fi
+# 關閉系統自動更新（unattended-upgrades），避免正式站在無人監控時
+# 被自動升級到跟 Ruby/OpenSSL/nginx 環境不相容的套件版本
+if [[ -e "/etc/apt/apt.conf.d/20auto-upgrades" ]]; then
+	sudo sed -i 's/APT::Periodic::Update-Package-Lists "1"/APT::Periodic::Update-Package-Lists "0"/' /etc/apt/apt.conf.d/20auto-upgrades
+	sudo sed -i 's/APT::Periodic::Unattended-Upgrade "1"/APT::Periodic::Unattended-Upgrade "0"/' /etc/apt/apt.conf.d/20auto-upgrades
+fi
+if systemctl list-unit-files | grep -q '^unattended-upgrades.service'; then
+	sudo systemctl stop unattended-upgrades.service 2>/dev/null || true
+	sudo systemctl disable unattended-upgrades.service 2>/dev/null || true
+fi
+
 sudo apt update
 sudo apt install -y git psmisc #fuser
 org_pwd=$(pwd)