Blocking Specific Kernel Updates
To lock a package from being installed, updated or removed, we can use the apt-mark command.
To lock a package from being installed, updated or removed, we can use the apt-mark command.
sudo apt-mark hold linux-image-$(uname -r)
sudo apt-mark hold linux-headers-$(uname -r)
disable auto-upgrades
prune journalctl
sed -i -e 's/Update-Package-Lists \"1/Update-Package-Lists \"0/g' /etc/apt/apt.conf.d/20auto-upgrades
prune journalctl
echo "SystemMaxUse=500M" >> /etc/systemd/journald.conf && journalctl --vacuum-size=500M && journalctl --vacuum-time=10d && systemctl restart systemd-journald.service
Referrer-Policy: strict-origin-when-cross-origin
Permissions-Policy: geolocation=(self "")
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
- "traefik.http.middlewares.blog-proxy.headers.referrerPolicy=strict-origin-when-cross-origin"
- "traefik.http.middlewares.blog-proxy.headers.permissionsPolicy=geolocation=(self "")"
- "traefik.http.middlewares.blog-proxy.headers.stsSeconds=31536000"
- "traefik.http.middlewares.blog-proxy.headers.stsIncludeSubdomains=true"
- "traefik.http.middlewares.blog-proxy.headers.browserXssFilter=true"
- "traefik.http.middlewares.blog-proxy.headers.frameDeny=true"
- "traefik.http.middlewares.blog-proxy.headers.contentTypeNosniff=true"