On Thu, Aug 14, 2025 at 11:10 PM Xiyue Deng <[email protected]> wrote:
> Hi, > > So I have a laptop that recently upgraded from Bookworm to Trixie > without issues. Only that, unlike my other box (which also upgraded > from Bookworm to Trixie and has a working unattended-upgrade), I found > that all recent security updates are not upgraded automatically here. > It turns out that unattended-upgrade seems to still be tracking > Bookworm. However /etc/debian_version is already at 13.0 like my other > box. Here are some debugging output from unattended-upgrade: > > ,---- > | $ sudo unattended-upgrade --verbose --apt-debug --dry-run > | Starting unattended upgrades script > | Allowed origins are: origin=Debian,codename=bookworm,label=Debian, > origin=Debian,codename=bookworm,label=Debian-Security, > origin=Debian,codename=bookworm-security,label=Debian-Security > | Initial blacklist: > | Initial whitelist (not strict): > | No packages found that can be upgraded unattended and no pending > auto-removals > | The list of kept packages can't be calculated in dry-run mode. > `---- > > /etc/debian_version: > > ,---- > | $ cat /etc/debian_version > | 13.0 > `---- > > All unattended-upgrade configurations are unchanged and should be the > same as the ones in /usr/share/unattended-upgrade Is the machine that is not tracking Trixie using Gnome? It looks like Gnome is a special case for unattended-upgrades. From < https://wiki.debian.org/UnattendedUpgrades>: In Debian 12 (Bookworm) unattended-upgrades is no longer a default install with Gnome. Download and upgrade schedules are set up by Packagekit using systemd timers on installation. The default behaviour in Gnome for upgrades detected via APT is now to advise of availability, and not to install by default. And then the wiki page goes on to say: To install these packages, run the following command as root: # apt-get install unattended-upgrades apt-listchanges The default configuration file for the unattended-upgrades package is at /etc/apt/apt.conf.d/50unattended-upgrades. Any local customizations should be in /etc/apt/apt.conf.d/52unattended-upgrades-local (see package README for details). # $EDITOR /etc/apt/apt.conf.d/52unattended-upgrades-local Jeff
