Universal Blue Update

Small update program written in python intended for use in Universal Blue, executes update scripts/tasks placed in /etc/ublue-update.d (make sure each script has exec perms)

Includes systemd timers and services for auto update

dependencies (fedora): sudo dnf install python3-psutil libnotify

Usage

Installation

You can add this to your image by simply pulling down and installing the rpm:

COPY --from=ghcr.io/ublue-os/ublue-update:latest /rpms/ublue-update.noarch.rpm /tmp/rpms/
RUN rpm-ostree install /tmp/rpms/ublue-update.noarch.rpm

If you are on an image derived from uBlue main:

COPY --from=ghcr.io/ublue-os/ublue-update:latest /rpms/ublue-update.noarch.rpm /tmp/rpms/
RUN rpm-ostree override remove ublue-os-update-services && rpm-ostree install /tmp/rpms/ublue-update.noarch.rpm

Note If you are on an image derived from uBlue main, you will need to remove or disable automatic updates with rpm-ostreed, to do this, you need to remove or change this line in the config file: AutomaticUpdatePolicy=stage (set to none if you don't want to remove the line)

Command Line

To run a complete system update, it's recommended to use systemd:

$ systemctl start ublue-update.service

This allows for passwordless system updates (user must be in wheel group)

Run updates from command line (not recommended)

Only run user updates (rootless):

$ ublue-update

Only run system updates (requires root):

$ pkexec ublue-update --system

usage: ublue-update [-h] [-f] [-c] [-u] [-w] [--system]

options:
  -h, --help         show this help message and exit
  -f, --force        force manual update, skipping update checks
  -c, --check        run update checks and exit
  -u, --updatecheck  check for updates and exit
  -w, --wait         wait for transactions to complete and exit
  --system           only run system updates (requires root)

Troubleshooting

You can check the ublue-update logs by running this command:

$ journalctl -exu 'ublue-update.service'

Configuration

Update Scripts

Update scripts are separated into two directories inside of /etc/ublue-update.d

`/etc/ublue-update.d/user`

Update scripts are ran as user. Scripts included:

per-user flatpak update scripts (uninstalling unused deps and repairing flatpak install for maintenence)
distrobox update script
fleek update script

`/etc/ublue-update.d/system`

Update scripts are ran as root, these updates are meant to be system-wide. Scripts included:

OS update script (depends on rpm-ostree)
system-wide flatpak update scripts (uninstalling unused deps and repairing flatpak install for maintenence)

Location

Valid config paths (in order of priority):

/etc/ublue-update/ublue-update.toml

/usr/etc/ublue-update/ublue-update.toml

Config Variables

Section: checks

min_battery_percent: checks if battery is above specified percent

max_cpu_load_percent: checks if cpu average load is under specified percent

max_mem_percent: checks if memory usage is below specified the percent

Section: notify

dbus_notify: enable graphical notifications via dbus

How do I build this?

You can build and test this package in a container by using the provided container file.

make builder-image will create a container image with all dependencies installed
make builder-exec will execute a shell inside the builder container to allow you easily build the rpm package with make build-rpm
make will trigger the build process and generate a .whl package that can be installed
pip install --user -e . will allow to install an editable version of this package so you quickly edit and test the program

Special Thanks

Special thanks to cukmekerb for helping troubleshoot/add features early in project development

bobslept / ublue-update