#!/bin/bash
# =====================================================
# Ubuntu 自动升级防护脚本 - 防止 NVIDIA 驱动被自动更新
# 适用于 Ubuntu 18.04/20.04/22.04+
# =====================================================echo "=== [1/4] 检测已安装的 NVIDIA 包 ==="
NVIDIA_PKGS=$(dpkg -l | grep -E "^ii\s+nvidia" | awk '{print $2}')if [ -z "$NVIDIA_PKGS" ]; thenecho "⚠️ 未检测到 NVIDIA 驱动包，请确认已正确安装。"
elseecho "✅ 检测到以下 NVIDIA 相关包："echo "$NVIDIA_PKGS"echoecho "=== [2/4] 锁定 NVIDIA 包（apt-mark hold） ==="sudo apt-mark hold $NVIDIA_PKGSechoecho "🔒 当前被锁定的包："apt-mark showhold | grep nvidia || echo "（无 NVIDIA 包被锁定）"
fiecho
echo "=== [3/4] 更新自动升级黑名单配置 ==="CONF_FILE="/etc/apt/apt.conf.d/50unattended-upgrades"
if [ -f "$CONF_FILE" ]; then# 检查是否已有 NVIDIA 黑名单if grep -q 'nvidia-driver' "$CONF_FILE"; thenecho "ℹ️ 已存在 NVIDIA 黑名单配置，无需重复添加。"elsesudo sed -i '/Unattended-Upgrade::Package-Blacklist {/a\ "nvidia-driver-.*";\n "nvidia-dkms-.*";\n "nvidia-utils-.*";\n "libnvidia-.*";' "$CONF_FILE"echo "✅ 已将 NVIDIA 包添加到自动升级黑名单中。"fi
elseecho "⚠️ 未找到 $CONF_FILE，请确认已安装 unattended-upgrades 包。"
fiecho
echo "=== [4/4] 检查自动升级服务状态 ==="
sudo systemctl is-enabled unattended-upgrades &>/dev/null && echo "🟢 unattended-upgrades 已启用" || echo "🔴 unattended-upgrades 未启用"
sudo systemctl status unattended-upgrades --no-pager | grep Activeecho
echo "🎯 操作完成。建议执行以下命令验证："
echo " sudo unattended-upgrade --dry-run --debug | grep nvidia"
echo
echo "如需取消锁定，可使用："
echo " sudo apt-mark unhold <包名>"
echo "===================================================="