In fuel10 we have enabled "unattended-upgrades"[0] job for ubuntu-xenial
systemctl status unattended-upgrades.service
● unattended-upgrades.service - Unattended Upgrades Shutdown
Loaded: loaded (/lib/systemd/system/unattended-upgrades.service; enabled; vendor preset: enabled)
Active: inactive (dead)
Docs: man:unattended-upgrade(8)
Since we use unconfigured (with default suit configuration) service, it cause over-installing Canonical packages over MOS :
cat /var/log/unattended-upgrades/unattended-upgrades.log
2017-02-11 09:54:35,412 INFO Initial blacklisted packages:
2017-02-11 09:54:35,413 INFO Initial whitelisted packages:
2017-02-11 09:54:35,413 INFO Starting unattended upgrades script
2017-02-11 09:54:35,413 INFO Allowed origins are: ['o=Ubuntu,a=xenial', 'o=Ubuntu,a=xenial-security']
2017-02-11 09:54:39,881 INFO Packages that will be upgraded: haproxy libjs-bootswatch libjs-jquery-tablesorter python-pbr ruby-rethtool
2017-02-11 09:54:39,881 INFO Writing dpkg log to '/var/log/unattended-upgrades/unattended-upgrades-dpkg.log'
2017-02-11 09:55:06,361 INFO All upgrades installed
Which mean, especially in my case: broken nailgun-agent, due downgrading ruby-rethtool package:
/var/log/nailgun-agent.log
W, [2017-02-13T10:32:10.317023 #31471] WARN -- : Can't get data from lspci. Reason: lspci exited with status 1
E, [2017-02-13T10:32:10.327470 #31471] ERROR -- : Error 'uninitialized constant Rethtool::EthtoolCmdDriver
Did you mean? Rethtool::EthtoolCmd' while obtaining enp3s0f1 driver info.
/usr/bin/lspci: option requires an argument -- 's'
Usage: lspci [<switches>]
.....
W, [2017-02-13T10:32:10.332541 #31471] WARN -- : Can't get data from lspci. Reason: lspci exited with status 1
E, [2017-02-13T10:32:10.520426 #31471] ERROR -- : {"message": "deque(['meta', 'interfaces', 0, 'driver']): None is not of type 'string'", "errors": []}
From my POV i can see 2 possible solutions :
1) Disable unattended-upgrades.service
2) Configure service to consider mos repositories
[0]https://help.ubuntu.com/community/AutomaticSecurityUpdates
Marking as critical because it breaks default configuration