unattended-upgrades does not work in default installation

Bug #1375919 reported by Anthony Wong on 2014-09-30
36
This bug affects 7 people
Affects Status Importance Assigned to Milestone
Raspbian
Undecided
Unassigned

Bug Description

/etc/apt/apt.conf.d/50unattended-upgrades has:

// Automatically upgrade packages from these origin patterns
Unattended-Upgrade::Origins-Pattern {
        // Archive or Suite based matching:
        // Note that this will silently match a different release after
        // migration to the specified archive (e.g. testing becomes the
        // new stable).
// "o=Raspbian,a=stable";
// "o=Raspbian,a=stable-updates";
// "o=Raspbian,a=proposed-updates";
        "origin=Raspbian,archive=stable,label=Raspbian-Security";
};

But there is no source with label=Raspbian-Security:

$ apt-cache policy
Package files:
 100 /var/lib/dpkg/status
     release a=now
 500 http://archive.raspberrypi.org/debian/ wheezy/main Translation-en
 500 http://archive.raspberrypi.org/debian/ wheezy/main armhf Packages
     release o=Raspberry Pi Foundation,n=wheezy,l=Raspberry Pi Foundation,c=main
     origin archive.raspberrypi.org
 500 http://raspberrypi.collabora.com/ wheezy/rpi armhf Packages
     release o=Collabora,n=wheezy,l=Collabora Raspberry Pi graphics enablement,c=rpi
     origin raspberrypi.collabora.com
 500 http://mirrordirector.raspbian.org/raspbian/ wheezy/rpi armhf Packages
     release v=7.0,o=Raspbian,a=stable,n=wheezy,l=Raspbian,c=rpi
     origin mirrordirector.raspbian.org
 500 http://mirrordirector.raspbian.org/raspbian/ wheezy/non-free armhf Packages
     release v=7.0,o=Raspbian,a=stable,n=wheezy,l=Raspbian,c=non-free
     origin mirrordirector.raspbian.org
 500 http://mirrordirector.raspbian.org/raspbian/ wheezy/contrib armhf Packages
     release v=7.0,o=Raspbian,a=stable,n=wheezy,l=Raspbian,c=contrib
     origin mirrordirector.raspbian.org
 500 http://mirrordirector.raspbian.org/raspbian/ wheezy/main armhf Packages
     release v=7.0,o=Raspbian,a=stable,n=wheezy,l=Raspbian,c=main
     origin mirrordirector.raspbian.org
Pinned packages:

Diederik (didi-debian) wrote :

For wheezy I can confirm this. The line has been removed from the Jessie version.

For wheezy, it can be fixed by making it like this:
"origin=Raspbian,codename=wheezy,component=main";

Or just remove the line.

For Jessie it can stay like this or it could be changed to:
"origin=Raspbian,codename=jessie,component=main";

Which can be commented out by default.

Changed in raspbian:
status: New → Confirmed
anarcat (anarcat) wrote :
Download full text (6.7 KiB)

simply removing the line does *not* work in jessie:

root@mafalda:/etc/apt/apt.conf.d# unattended-upgrade -d
Initial blacklisted packages:
Starting unattended upgrades script
Allowed origins are: ['o=Raspbian,n=jessie', 'o=Raspbian,a=stable']
matching 'o'='Raspbian' against '<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>'
matching 'n'='jessie' against '<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>'
matching 'o'='Raspbian' against '<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>'
matching 'n'='jessie' against '<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>'
Checking: libssl1.0.0 ([<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>])
matching 'o'='Raspbian' against '<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>'
matching 'n'='jessie' against '<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>'
Checking: openssl ([<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>])
matching 'o'='Raspbian' against '<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>'
matching 'n'='jessie' against '<Origin component:'main' archive:'stable' origin:'Raspbian' label:'Raspbian' site:'mirrordirector.raspbian.org' isTrusted:False>'
pkgs that look like they should be upgraded: libssl1.0.0
openssl
Fetched 0 B in 0s (0 B/s)
fetch.run() result: 0
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 0 FileSize: 853124 DestFile:'/var/cache/apt/archives/libssl1.0.0_1.0.1t-1+deb8u5_armhf.deb' DescURI: 'http://mirrordirector.raspbian.org/raspbian/pool/main/o/openssl/libssl1.0.0_1.0.1t-1+deb8u5_armhf.deb' ID:0 ErrorText: ''>
check_conffile_prompt('/var/cache/apt/archives/libssl1.0.0_1.0.1t-1+deb8u5_armhf.deb')
found pkg: libssl1.0.0
No conffiles in deb '/var/cache/apt/archives/libssl1.0.0_1.0.1t-1+deb8u5_armhf.deb' (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 0 FileSize: 652428 DestFile:'/var/cache/apt/archives/openssl_1.0.1t-1+deb8u5_armhf.deb' DescURI: 'http://mirrordirector.raspbian.org/raspbian/pool/main/o/openssl/openssl_1.0.1t-1+deb8u5_armhf.deb' ID:0 ErrorText: ''>
check_conffile_prompt('/var/cache/apt/archives/openssl_1.0.1t-1+deb8u5_armhf.deb')
found pkg: openssl
conffile line: '/etc/ssl/openssl.cnf 7df26c55291b33344dc15e3935dabaf3'
current md5: 7df26c55291b33344dc15e3935dabaf3
blacklist: ['libssl1.0.0', 'openssl']
matching 'o'='Raspbian' against '<Origin component:'main' ar...

Read more...

anarcat (anarcat) wrote :

i have reported this bug upstream here as well: https://github.com/mvo5/unattended-upgrades/issues/32

Balint Reczey (rbalint) wrote :

Stretch based RPI now ships 0.93.1+nmu1 without delta thus I assume upstream is now fixed.

Peter Nowee (peter-nowee) wrote :

I upgraded to Raspbian Stretch with unattended-upgrades 0.93.1+nmu1, but still got a non-working config file at /etc/apt/apt.conf.d/50unattended-upgrades. IMO, there are two issues that need to be solved before this will work again:

1. Raspbian's unattended-upgrades packages now supplies the Debian-specific, not the Raspbian-specific config file at /etc/apt/apt.conf.d/50unattended-upgrades. In https://github.com/mvo5/unattended-upgrades/issues/32 , upstream (Debian) says it supplies a Raspbian-specific config file, but Raspbian needs to rebuild the package in order to use that, and that this is something that needs to be solved at Raspbian. Is this Launchpad-bug the correct place to discuss that, or should it be reported elsewhere?

2. The Raspbian-specific config file supplied by upstream currently does not match any packages because it contains `archive=${distro_codename}`, which should be `codename=${distro_codename}`. I submitted a patch for that upstream (Fix Raspbian default config codename matching, https://github.com/mvo5/unattended-upgrades/pull/81).

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.