Disable automatic updates on Ubuntu and install qemu guest agent

ubuntu/aarch64/ubuntu.pkr.hcl

@@ -81,4 +81,13 @@ source "qemu" "ubuntu" {
 
 build {
   sources = ["source.qemu.ubuntu"]
+
+  provisioner "shell" {
+    execute_command = "echo '${var.ssh_password}' | {{ .Vars }} sudo -S -E sh -eux '{{ .Path }}'"
+    expect_disconnect = true
+    scripts = [
+      "../scripts/disable-updates.sh",
+      "../scripts/qemu.sh",
+    ]
+  }
 }

ubuntu/scripts/disable-updates.sh

@@ -0,0 +1,30 @@
+#!/bin/sh -eux
+
+export DEBIAN_FRONTEND=noninteractive
+
+echo "==> Disable release-upgrades"
+sed -i.bak 's/^Prompt=.*$/Prompt=never/' /etc/update-manager/release-upgrades;
+
+echo "==> Disable systemd apt timers/services"
+systemctl stop apt-daily.timer;
+systemctl stop apt-daily-upgrade.timer;
+systemctl disable apt-daily.timer;
+systemctl disable apt-daily-upgrade.timer;
+systemctl mask apt-daily.service;
+systemctl mask apt-daily-upgrade.service;
+systemctl daemon-reload;
+
+# Disable periodic activities of apt to be safe
+cat <<EOF >/etc/apt/apt.conf.d/10periodic;
+APT::Periodic::Enable "0";
+APT::Periodic::Update-Package-Lists "0";
+APT::Periodic::Download-Upgradeable-Packages "0";
+APT::Periodic::AutocleanInterval "0";
+APT::Periodic::Unattended-Upgrade "0";
+EOF
+
+echo "==> Remove the unattended-upgrades and ubuntu-release-upgrader-core packages"
+apt-get -y purge unattended-upgrades ubuntu-release-upgrader-core;
+rm -rf /var/log/unattended-upgrades;
+
+apt-get update;

ubuntu/scripts/qemu.sh

@@ -0,0 +1,6 @@
+#!/bin/sh -eux
+export DEBIAN_FRONTEND=noninteractive
+
+echo "==> Install qemu guest agent"
+apt-get install -y qemu-guest-agent
+apt-get -y autoremove

ubuntu/x86_64/ubuntu.pkr.hcl

@@ -83,11 +83,17 @@ source "qemu" "ubuntu" {
   efi_boot = var.efi_boot
   efi_firmware_code = var.efi_firmware_code
   efi_firmware_vars = var.efi_firmware_vars
-  # efi_boot = true
-  # efi_firmware_code = "/usr/share/OVMF/OVMF_CODE.fd"
-  # efi_firmware_vars = "/usr/share/OVMF/OVMF_VARS.fd"
 }
 
 build {
   sources = ["source.qemu.ubuntu"]
+
+  provisioner "shell" {
+    execute_command = "echo '${var.ssh_password}' | {{ .Vars }} sudo -S -E sh -eux '{{ .Path }}'"
+    expect_disconnect = true
+    scripts = [
+      "../scripts/disable-updates.sh",
+      "../scripts/qemu.sh",
+    ]
+  }
 }