# upgrade to -proposed
root@test-bionic:~/ubuntu-advantage-client# apt-get install unattended-upgrades
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following package was automatically installed and is no longer required:
libfreetype6
Use 'apt autoremove' to remove it.
Suggested packages:
bsd-mailx default-mta | mail-transport-agent needrestart
The following packages will be upgraded:
unattended-upgrades
1 upgraded, 0 newly installed, 0 to remove and 34 not upgraded.
Need to get 41.7 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://archive.ubuntu.com/ubuntu bionic-proposed/main amd64 unattended-upgrades all 1.1ubuntu1.18.04.14 [41.7 kB]
Fetched 41.7 kB in 1s (65.2 kB/s)
Preconfiguring packages ...
(Reading database ... 41831 files and directories currently installed.)
Preparing to unpack .../unattended-upgrades_1.1ubuntu1.18.04.14_all.deb ...
Unpacking unattended-upgrades (1.1ubuntu1.18.04.14) over (1.1ubuntu1.18.04.13) ...
Setting up unattended-upgrades (1.1ubuntu1.18.04.14) ...
Replacing config file /etc/apt/apt.conf.d/50unattended-upgrades with new version
Processing triggers for ureadahead (0.100.0-21) ...
Processing triggers for systemd (237-3ubuntu10.38) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
# See esm-infra packages after upgrading to -proposed
root@test-bionic:~/ubuntu-advantage-client# sudo unattended-upgrades --dry-run --debug 2>&1 | egrep -i 'Allowed|ESM'
Allowed origins are: o=Ubuntu,a=bionic, o=Ubuntu,a=bionic-security, o=UbuntuESMApps,a=bionic-apps-security, o=UbuntuESM,a=bionic-infra-security
Checking: krb5-locales ([<Origin component:'main' archive:'bionic-infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>, <Origin component:'main' archive:'bionic-infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>])
Checking: libgssapi-krb5-2 ([<Origin component:'main' archive:'bionic-infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>, <Origin component:'main' archive:'bionic-infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>])
Checking: libk5crypto3 ([<Origin component:'main' archive:'bionic-infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>, <Origin component:'main' archive:'bionic-infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>])
Checking: libkrb5-3 ([<Origin component:'main' archive:'bionic-infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>, <Origin component:'main' archive:'bionic-infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>])
Checking: libkrb5support0 ([<Origin component:'main' archive:'bionic-infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>, <Origin component:'main' archive:'bionic-infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm.ubuntu.com' isTrusted:True>])
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 13400 DestFile:'/var/cache/apt/archives/krb5-locales_1.16-2ubuntu0.1+esm1_all.deb' DescURI: 'https://esm.ubuntu.com/infra/ubuntu/pool/main/k/krb5/krb5-locales_1.16-2ubuntu0.1+esm1_all.deb' ID:0 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/krb5-locales_1.16-2ubuntu0.1+esm1_all.deb)
No conffiles in deb /var/cache/apt/archives/krb5-locales_1.16-2ubuntu0.1+esm1_all.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 122252 DestFile:'/var/cache/apt/archives/libgssapi-krb5-2_1.16-2ubuntu0.1+esm1_amd64.deb' DescURI: 'https://esm.ubuntu.com/infra/ubuntu/pool/main/k/krb5/libgssapi-krb5-2_1.16-2ubuntu0.1+esm1_amd64.deb' ID:0 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libgssapi-krb5-2_1.16-2ubuntu0.1+esm1_amd64.deb)
No conffiles in deb /var/cache/apt/archives/libgssapi-krb5-2_1.16-2ubuntu0.1+esm1_amd64.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 278360 DestFile:'/var/cache/apt/archives/libkrb5-3_1.16-2ubuntu0.1+esm1_amd64.deb' DescURI: 'https://esm.ubuntu.com/infra/ubuntu/pool/main/k/krb5/libkrb5-3_1.16-2ubuntu0.1+esm1_amd64.deb' ID:0 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libkrb5-3_1.16-2ubuntu0.1+esm1_amd64.deb)
No conffiles in deb /var/cache/apt/archives/libkrb5-3_1.16-2ubuntu0.1+esm1_amd64.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 30808 DestFile:'/var/cache/apt/archives/libkrb5support0_1.16-2ubuntu0.1+esm1_amd64.deb' DescURI: 'https://esm.ubuntu.com/infra/ubuntu/pool/main/k/krb5/libkrb5support0_1.16-2ubuntu0.1+esm1_amd64.deb' ID:0 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libkrb5support0_1.16-2ubuntu0.1+esm1_amd64.deb)
No conffiles in deb /var/cache/apt/archives/libkrb5support0_1.16-2ubuntu0.1+esm1_amd64.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 85668 DestFile:'/var/cache/apt/archives/libk5crypto3_1.16-2ubuntu0.1+esm1_amd64.deb' DescURI: 'https://esm.ubuntu.com/infra/ubuntu/pool/main/k/krb5/libk5crypto3_1.16-2ubuntu0.1+esm1_amd64.deb' ID:0 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libk5crypto3_1.16-2ubuntu0.1+esm1_amd64.deb)
No conffiles in deb /var/cache/apt/archives/libk5crypto3_1.16-2ubuntu0.1+esm1_amd64.deb (There is no member named 'conffiles')
/usr/bin/dpkg --status-fd 11 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/krb5-locales_1.16-2ubuntu0.1+esm1_all.deb
/usr/bin/dpkg --status-fd 11 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/libk5crypto3_1.16-2ubuntu0.1+esm1_amd64.deb
/usr/bin/dpkg --status-fd 11 --no-triggers --unpack --auto-deconfigure /var/cache/apt/archives/libkrb5support0_1.16-2ubuntu0.1+esm1_amd64.deb /var/cache/apt/archives/libgssapi-krb5-2_1.16-2ubuntu0.1+esm1_amd64.deb /var/cache/apt/archives/libkrb5-3_1.16-2ubuntu0.1+esm1_amd64.deb
### Bionic validation
1. start with a bionic VM with unattended-upgrades from bionic-updates advantage- tools apt.conf. d/51ubuntu- advantage- esm (which delivers Allowed-Origins config)
"${distro_ id}ESMApps: ${distro_ codename} -apps-security" ;
"${distro_ id}ESM: ${distro_ codename} -infra- security" ;
2. ua enable ESM-Infra via ubuntu-
3. /etc/apt/
4. Check whether unattended-upgrades sees bionic esm packages
sudo unattended-upgrades --dry-run --debug 2>&1 | egrep -i 'Allowed|ESM'
5. Upgrade unattended-upgrades to -proposed
6. Check whether unattended-upgrades sees bionic esm packages
sudo unattended-upgrades --dry-run --debug 2>&1 | egrep -i 'Allowed|ESM'
root@test- bionic: ~/ubuntu- advantage- client# dpkg-query --show unattended-upgrades
unattended-upgrades 1.1ubuntu1.18.04.13
# No esm-infra packages seen by unattended-upgrades dry-run bionic: ~/ubuntu- advantage- client# sudo unattended-upgrades --dry-run --debug 2>&1 | egrep -i 'Allowed|ESM' a=bionic- security, o=UbuntuESM, a=bionic 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>])
root@test-
Allowed origins are: o=Ubuntu,a=bionic, o=Ubuntu,
Checking: krb5-locales ([<Origin component:'main' archive:
Checking: libgssapi-krb5-2 ([<Origin component:'main' archive:
Checking: libk5crypto3 ([<Origin component:'main' archive:
Checking: libkrb5-3 ([<Origin component:'main' archive:
Checking: libkrb5support0 ([<Origin component:'main' archive:
# upgrade to -proposed bionic: ~/ubuntu- advantage- client# apt-get install unattended-upgrades agent needrestart upgrades archive. ubuntu. com/ubuntu bionic- proposed/ main amd64 unattended-upgrades all 1.1ubuntu1.18.04.14 [41.7 kB] upgrades_ 1.1ubuntu1. 18.04.14_ all.deb ... 18.04.14) over (1.1ubuntu1. 18.04.13) ... 18.04.14) ... apt.conf. d/50unattended- upgrades with new version
root@test-
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following package was automatically installed and is no longer required:
libfreetype6
Use 'apt autoremove' to remove it.
Suggested packages:
bsd-mailx default-mta | mail-transport-
The following packages will be upgraded:
unattended-
1 upgraded, 0 newly installed, 0 to remove and 34 not upgraded.
Need to get 41.7 kB of archives.
After this operation, 0 B of additional disk space will be used.
Get:1 http://
Fetched 41.7 kB in 1s (65.2 kB/s)
Preconfiguring packages ...
(Reading database ... 41831 files and directories currently installed.)
Preparing to unpack .../unattended-
Unpacking unattended-upgrades (1.1ubuntu1.
Setting up unattended-upgrades (1.1ubuntu1.
Replacing config file /etc/apt/
Processing triggers for ureadahead (0.100.0-21) ...
Processing triggers for systemd (237-3ubuntu10.38) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
# See esm-infra packages after upgrading to -proposed bionic: ~/ubuntu- advantage- client# sudo unattended-upgrades --dry-run --debug 2>&1 | egrep -i 'Allowed|ESM' a=bionic- security, o=UbuntuESMApps ,a=bionic- apps-security, o=UbuntuESM, a=bionic- infra-security 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) 'bionic- infra-security' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>, <Origin component:'main' archive: 'bionic- infra-updates' origin:'UbuntuESM' label:'UbuntuESM' site:'esm. ubuntu. com' isTrusted:True>]) AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 13400 DestFile: '/var/cache/ apt/archives/ krb5-locales_ 1.16-2ubuntu0. 1+esm1_ all.deb' DescURI: 'https:/ /esm.ubuntu. com/infra/ ubuntu/ pool/main/ k/krb5/ krb5-locales_ 1.16-2ubuntu0. 1+esm1_ all.deb' ID:0 ErrorText: ''> prompt( /var/cache/ apt/archives/ krb5-locales_ 1.16-2ubuntu0. 1+esm1_ all.deb) apt/archives/ krb5-locales_ 1.16-2ubuntu0. 1+esm1_ all.deb (There is no member named 'conffiles') AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 122252 DestFile: '/var/cache/ apt/archives/ libgssapi- krb5-2_ 1.16-2ubuntu0. 1+esm1_ amd64.deb' DescURI: 'https:/ /esm.ubuntu. com/infra/ ubuntu/ pool/main/ k/krb5/ libgssapi- krb5-2_ 1.16-2ubuntu0. 1+esm1_ amd64.deb' ID:0 ErrorText: ''> prompt( /var/cache/ apt/archives/ libgssapi- krb5-2_ 1.16-2ubuntu0. 1+esm1_ amd64.deb) apt/archives/ libgssapi- krb5-2_ 1.16-2ubuntu0. 1+esm1_ amd64.deb (There is no member named 'conffiles') AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 278360 DestFile: '/var/cache/ apt/archives/ libkrb5- 3_1.16- 2ubuntu0. 1+esm1_ amd64.deb' DescURI: 'https:/ /esm.ubuntu. com/infra/ ubuntu/ pool/main/ k/krb5/ libkrb5- 3_1.16- 2ubuntu0. 1+esm1_ amd64.deb' ID:0 ErrorText: ''> prompt( /var/cache/ apt/archives/ libkrb5- 3_1.16- 2ubuntu0. 1+esm1_ amd64.deb) apt/archives/ libkrb5- 3_1.16- 2ubuntu0. 1+esm1_ amd64.deb (There is no member named 'conffiles') AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 30808 DestFile: '/var/cache/ apt/archives/ libkrb5support0 _1.16-2ubuntu0. 1+esm1_ amd64.deb' DescURI: 'https:/ /esm.ubuntu. com/infra/ ubuntu/ pool/main/ k/krb5/ libkrb5support0 _1.16-2ubuntu0. 1+esm1_ amd64.deb' ID:0 ErrorText: ''> prompt( /var/cache/ apt/archives/ libkrb5support0 _1.16-2ubuntu0. 1+esm1_ amd64.deb) apt/archives/ libkrb5support0 _1.16-2ubuntu0. 1+esm1_ amd64.deb (There is no member named 'conffiles') AcquireItem object:Status: 2 Complete: 1 Local: 1 IsTrusted: 1 FileSize: 85668 DestFile: '/var/cache/ apt/archives/ libk5crypto3_ 1.16-2ubuntu0. 1+esm1_ amd64.deb' DescURI: 'https:/ /esm.ubuntu. com/infra/ ubuntu/ pool/main/ k/krb5/ libk5crypto3_ 1.16-2ubuntu0. 1+esm1_ amd64.deb' ID:0 ErrorText: ''> prompt( /var/cache/ apt/archives/ libk5crypto3_ 1.16-2ubuntu0. 1+esm1_ amd64.deb) apt/archives/ libk5crypto3_ 1.16-2ubuntu0. 1+esm1_ amd64.deb (There is no member named 'conffiles') apt/archives/ krb5-locales_ 1.16-2ubuntu0. 1+esm1_ all.deb apt/archives/ libk5crypto3_ 1.16-2ubuntu0. 1+esm1_ amd64.deb apt/archives/ libkrb5support0 _1.16-2ubuntu0. 1+esm1_ amd64.deb /var/cache/ apt/archives/ libgssapi- krb5-2_ 1.16-2ubuntu0. 1+esm1_ amd64.deb /var/cache/ apt/archives/ libkrb5- 3_1.16- 2ubuntu0. 1+esm1_ amd64.deb
root@test-
Allowed origins are: o=Ubuntu,a=bionic, o=Ubuntu,
Checking: krb5-locales ([<Origin component:'main' archive:
Checking: libgssapi-krb5-2 ([<Origin component:'main' archive:
Checking: libk5crypto3 ([<Origin component:'main' archive:
Checking: libkrb5-3 ([<Origin component:'main' archive:
Checking: libkrb5support0 ([<Origin component:'main' archive:
<apt_pkg.
check_conffile_
No conffiles in deb /var/cache/
<apt_pkg.
check_conffile_
No conffiles in deb /var/cache/
<apt_pkg.
check_conffile_
No conffiles in deb /var/cache/
<apt_pkg.
check_conffile_
No conffiles in deb /var/cache/
<apt_pkg.
check_conffile_
No conffiles in deb /var/cache/
/usr/bin/dpkg --status-fd 11 --no-triggers --unpack --auto-deconfigure /var/cache/
/usr/bin/dpkg --status-fd 11 --no-triggers --unpack --auto-deconfigure /var/cache/
/usr/bin/dpkg --status-fd 11 --no-triggers --unpack --auto-deconfigure /var/cache/
# Show apt policy for esm-infra bionic: ~/ubuntu- advantage- client# apt-cache policy | grep -i esm /esm.ubuntu. com/infra/ ubuntu bionic- infra-updates/ main amd64 Packages o=UbuntuESM, a=bionic- infra-updates, n=bionic, l=UbuntuESM, c=main, b=amd64 /esm.ubuntu. com/infra/ ubuntu bionic- infra-security/ main amd64 Packages o=UbuntuESM, a=bionic- infra-security, n=bionic, l=UbuntuESM, c=main, b=amd64
root@test-
500 https:/
release v=18.04,
origin esm.ubuntu.com
500 https:/
release v=18.04,
origin esm.ubuntu.com
# can't validate esm-apps-bionic as I don't have a contract token with access, /esm.staging. ubuntu. com/apps/ ubuntu/ dists/bionic- apps-security/ InRelease confirms archive format for: apps-security
but https:/
Origin: UbuntuESMApps
Suite: bionic-