"Google, Inc" cannot be used as a trusted origin

[Bruno Pereira]

After adding "Google, Inc.:stable"; as one of the lines in my trusted origins in Ubuntu 11.10, I get a fault every time I run "unattended-upgrade --dry-run". If there are not updates available on the system the log from "unattended-upgrades" looks like this:

2011-10-11 18:03:23,292 INFO Allowed origins are: ['o=Ubuntu,a=oneiric-security', 'o=Google, Inc.,a=stable']

If there are packages available the "unattended-upgrade --dry-run" will exit with a fault. This is possibly because of the space in "Google, Inc" source.

Any other way of solving this?

This was tested on Ubuntu 11.04 and Ubuntu 11.10.

On Ubuntu 11.10 package version is 0.73ubuntu1.

[Bruno Pereira (brunopereira81)]

sudo unattended-upgrades --dry-run --debug:

<--------------------------------------------------------------------------------------->
Using (as described in the source code readme file):

Unattended-Upgrade::Allowed-Origins {
        "${distro_id} ${distro_codename}-security";
// "${distro_id} ${distro_codename}-updates";
// "${distro_id} ${distro_codename}-proposed";
// "${distro_id} ${distro_codename}-backports";
        "origin=Google\, Inc.,suite=stable";
};

Output:

$sudo unattended-upgrade --dry-run --debug
Initial blacklisted packages:
Starting unattended upgrades script
Allowed origins are: ['o=Ubuntu,a=oneiric-security', 'o=origin=Google\\,,a=Inc.,suite=aArchive']
Checking: alsa-utils (["<Origin component:'main' archive:'oneiric-updates' origin:'Ubuntu' label:'Ubuntu' site:'nl.archive.ubuntu.com' isTrusted:True>"])
Traceback (most recent call last):
  File "/usr/bin/unattended-upgrade", line 770, in <module>
    main(options)
  File "/usr/bin/unattended-upgrade", line 577, in main
    is_allowed_origin(pkg,allowed_origins)):
  File "/usr/bin/unattended-upgrade", line 263, in is_allowed_origin
    if match_whitelist_string(allowed, origin):
  File "/usr/bin/unattended-upgrade", line 164, in match_whitelist_string
    for s in token.split("=")]
ValueError: too many values to unpack
<--------------------------------------------------------------------------------------->

<--------------------------------------------------------------------------------------->
Using previous reported configuration line:

Unattended-Upgrade::Allowed-Origins {
        "${distro_id} ${distro_codename}-security";
// "${distro_id} ${distro_codename}-updates";
// "${distro_id} ${distro_codename}-proposed";
// "${distro_id} ${distro_codename}-backports";
        "Google, Inc.:stable";
};

Output:

$sudo unattended-upgrade --dry-run --debug
Initial blacklisted packages:
Starting unattended upgrades script
Allowed origins are: ['o=Ubuntu,a=oneiric-security', 'o=Google, Inc.,a=stable']
Checking: alsa-utils (["<Origin component:'main' archive:'oneiric-updates' origin:'Ubuntu' label:'Ubuntu' site:'nl.archive.ubuntu.com' isTrusted:True>"])
Traceback (most recent call last):
  File "/usr/bin/unattended-upgrade", line 770, in <module>
    main(options)
  File "/usr/bin/unattended-upgrade", line 577, in main
    is_allowed_origin(pkg,allowed_origins)):
  File "/usr/bin/unattended-upgrade", line 263, in is_allowed_origin
    if match_whitelist_string(allowed, origin):
  File "/usr/bin/unattended-upgrade", line 164, in match_whitelist_string
    for s in token.split("=")]
ValueError: need more than 1 value to unpack

These are tested on 11.10 with updates pending after running apt-get update.

After running apt-get upgrade and getting them all installed this is the output:

Using readme file method:

$sudo unattended-upgrade --dry-run --debug
Initial blacklisted packages:
Starting unattended upgrades script
Allowed origins are: ['o=Ubuntu,a=oneiric-security', 'o=origin=Google\\,,a=Inc.,suite=stable']
pkgs that look like they should be upgraded:
Fetched 0 B in 0s (0 B/s)
blacklist:...

[Michael Vogt (mvo)]

A workaround should be the origins pattern, but let me work on code to fixup the compat mode:

Unattended-Upgrade::Origins-Pattern {
        "o=Google\, Inc.,suite=stable";
};

[Michael Vogt (mvo)]

I created a testcase for this now, for me the following code works:

// Automatically upgrade packages from these (origin:archive) pairs
Unattended-Upgrade::Allowed-Origins {
        "Google\, Inc.:stable";
 "${distro_id}:${distro_codename}-security";
};

if it does not work for you, please wait until a new google-chrome-stable becomes availalbe, then please run:
$ apt-cache policy google-chrome-stable
and
$ sudo unattended-upgrades --debug --dry-run
and attach the output.

Thanks,
 Michael

[Bruno Pereira (brunopereira81)]

Initial blacklisted packages:
Starting unattended upgrades script
Allowed origins are: ['o=Ubuntu,a=oneiric-security', 'o=partner,a=oneiric', 'o=Google\\, Inc.,a=stable']

The output looks different with this format but it runs successfully, now its just a mater of waiting and checking for an update I guess... Any way of installing an old version of chrome so it needs updating??? ;)

[Wouter van Vliet (me-woutervanvliet)]

I can confirm that this fix works, thanks!

[Bruno Pereira (brunopereira81)]

Have you actually had Chrome updated automatically by it or are you just saying that the output of an unattended dry run now works with a clean output?

[Bruno Pereira (brunopereira81)]

Can confirm that this is the solution for the issue, the --dry-run runs, downloads the package, exists without faults.

The --debug run downloads the package and installs it.

Thanks, you can close this, its solved using that format.