Package: unattended-upgrades
Version: 0.83.3.2+deb8u1
Severity: normal
Dear Maintainer,
I really tired about unattended-upgrade config (/etc/apt/apt.conf.d/20auto-
upgrades)
which can't be working like the command "sudo apt-get update && sudo apt-get
upgrade"
as unattended, which need to run "apt update" before "unattended-upgrades
--debug".
This behaviour can't be called as "doing upgrade as unattended".
I think before unattended-upgrade's checking the upgrade, unattended-upgrade
doesn't
recheck pgp keys of the updates package. See my log from
/var/log/unattended-upgrades/unattended-upgrades.log
2016-11-22 18:33:36,766 INFO Initial blacklisted packages:
2016-11-22 18:33:36,767 INFO Initial whitelisted packages:
2016-11-22 18:33:36,768 INFO Starting unattended upgrades script
2016-11-22 18:33:36,768 INFO Allowed origins are: ['o=Debian,a=jessie',
'o=Debian,a=jessie-updates', 'origin=Debian,codename=jessie,label=Debian-
Security']
2016-11-22 18:33:40,811 DEBUG Checking: libwireshark-data ([])
2016-11-22 18:33:40,813 DEBUG Checking: libwireshark5 ([])
2016-11-22 18:33:40,814 DEBUG Checking: libwiretap4 ([])
2016-11-22 18:33:40,816 DEBUG Checking: libwsutil4 ([])
2016-11-22 18:33:41,214 DEBUG Checking: wireshark ([])
2016-11-22 18:33:41,215 DEBUG Checking: wireshark-common ([])
2016-11-22 18:33:41,254 DEBUG pkgs that look like they should be upgraded:
2016-11-22 18:33:41,296 DEBUG fetch.run() result: 0
2016-11-22 18:33:41,297 DEBUG blacklist: []
2016-11-22 18:33:41,297 DEBUG whitelist: []
2016-11-22 18:33:42,475 INFO Packages that are auto removed: ''
2016-11-22 18:33:42,475 DEBUG InstCount=0 DelCount=0 BrokenCount=0
2016-11-22 18:33:42,476 INFO No packages found that can be upgraded unattended
By the way, here's my /etc/apt/apt.conf.d/20auto-upgrades configuration.
root@ASMDT-TN14:~# cat /etc/apt/apt.conf.d/20auto-upgrades
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::AutocleanInterval "1";
APT::Periodic::Unattended-Upgrade "1";
-- System Information:
Debian Release: 8.6
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.7.0-0.bpo.1-amd64 (SMP w/2 CPU cores)
Locale: LANG=id_ID.UTF-8, LC_CTYPE=id_ID.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages unattended-upgrades depends on:
ii apt1.0.9.8.3
ii apt-utils 1.0.9.8.3
ii debconf [debconf-2.0] 1.5.56
ii init-system-helpers1.22
ii lsb-base 4.1+Debian13+nmu1
ii lsb-release4.1+Debian13+nmu1
ii python33.4.2-2
ii python3-apt0.9.3.12
ii ucf3.0030
ii xz-utils 5.1.1alpha+20120614-2+b3
unattended-upgrades recommends no packages.
Versions of packages unattended-upgrades suggests:
ii bsd-mailx 8.1.2-0.20141216cvs-2
ii exim4-daemon-light [mail-transport-agent] 4.84.2-2+deb8u1
-- Configuration Files:
/etc/apt/apt.conf.d/50unattended-upgrades changed:
// Unattended-Upgrade::Origins-Pattern controls which packages are
// upgraded.
//
// Lines below have the format format is "keyword=value,...". A
// package will be upgraded only if the values in its metadata match
// all the supplied keywords in a line. (In other words, omitted
// keywords are wild cards.) The keywords originate from the Release
// file, but several aliases are accepted. The accepted keywords are:
// a,archive,suite (eg, "stable")
// c,component (eg, "main", "crontrib", "non-free")
// l,label (eg, "Debian", "Debian-Security")
// o,origin(eg, "Debian", "Unofficial Multimedia Packages")
// n,codename (eg, "jessie", "jessie-updates")
// site (eg, "http.debian.net")
// The available values on the system are printed by the command
// "apt-cache policy", and can be debugged by running
// "unattended-upgrades -d" and looking at the log file.
//
// Within lines unattended-upgrades allows 2 macros whose values are
// derived from /etc/debian_version:
// ${distro_id}Installed origin.
// ${distro_codename} Installed codename (eg, "jessie")
Unattended-Upgrade::Origins-Pattern {
// Codename based matching:
// This will follow the migration of a release through different
// archives (e.g. from testing to stable and later oldstable).
// "o=Debian,n=jessie";
// "o=Debian,n=jessie-updates";
// "o=Debian,n=jessie-proposed-updates";
// "o=Debian,n=jessie,l=Debian-Security";
// Archive or Suite based matching:
// Note that this will silently match a different release after
// migration to the specified archive (e.g. testing becomes the
// new stable).
"o=*";
};
// List of packages to not update (regexp are supported)
Unattended-Upgrade::Package-Blacklist
