So, from the security team's point of view, if the apt configuration blurb is only activated on systems where the nvidia user space is installed and are at risk of breaking, this may be an acceptable short- term solution. While skipping kernel updates is less than ideal, having a broken system is even worse.
The only issue with this approach is we will end up with different kernel update behaviours depending on whether or not the nvidia userspace is installed, which may result in important kernel updates being overlooked because the sysadmin wasn't aware kernel updates would not be installing automatically. I think we would, at the very least, need to print out some explicit warnings that kernel updates have been excluded from unattended-updates and need to be manually installed. I'm not sure where this should happen where it would be obvious enough. Perhaps, in addition to log files during nvidia userspace installation, the motd could be updated too? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2161085 Title: Unattended upgrades are breaking systems with NVIDIA GPUs To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+bug/2161085/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
