So, from the security team's point of view, if the apt configuration
blurb is only activated on systems where the nvidia user space is
installed and are at risk of breaking, this may be an acceptable short-
term solution. While skipping kernel updates is less than ideal, having
a broken system is even worse.

The only issue with this approach is we will end up with different
kernel update behaviours depending on whether or not the nvidia
userspace is installed, which may result in important kernel updates
being overlooked because the sysadmin wasn't aware kernel updates would
not be installing automatically.

I think we would, at the very least, need to print out some explicit
warnings that kernel updates have been excluded from unattended-updates
and need to be manually installed. I'm not sure where this should happen
where it would be obvious enough. Perhaps, in addition to log files
during nvidia userspace installation, the motd could be updated too?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2161085

Title:
  Unattended upgrades are breaking systems with NVIDIA GPUs

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+bug/2161085/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to