[Bug 1853861] Re: [SRU] Unattended-upgrades silently does not apply updates when MinimalSteps is disabled and there are autoremovable kernels

Tue Dec 3 16:38:36 UTC 2019

Tested 1.1ubuntu1.18.04.13 on Bionic:

root at uu-non-minimal-lp-1838917:~# echo 'Unattended-Upgrade::MinimalSteps "false";' > /etc/apt/apt.conf.d/51unattended-upgrades-oneshot
root at uu-non-minimal-lp-1838917:~# yes no | apt autoremove 
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages will be REMOVED:
  libdw1 libfreetype6 libmaxminddb0 linux-hwe-tools-4.18.0-13 linux-hwe-tools-4.18.0-14 linux-hwe-tools-4.18.0-15 linux-hwe-tools-4.18.0-16 linux-hwe-tools-4.18.0-17
  linux-hwe-tools-4.18.0-18 linux-tools-4.18.0-13-generic linux-tools-4.18.0-14-generic linux-tools-4.18.0-15-generic linux-tools-4.18.0-16-generic
  linux-tools-4.18.0-17-generic linux-tools-4.18.0-18-generic linux-tools-common
0 upgraded, 0 newly installed, 16 to remove and 18 not upgraded.
After this operation, 133 MB disk space will be freed.
Do you want to continue? [Y/n] Abort.
root at uu-non-minimal-lp-1838917:~# apt list --upgradable 
Listing... Done
libnss-systemd/bionic-updates 237-3ubuntu10.33 amd64 [upgradable from: 237-3ubuntu10.31]
libpam-systemd/bionic-updates 237-3ubuntu10.33 amd64 [upgradable from: 237-3ubuntu10.31]
libpython3.6/bionic-updates 3.6.9-1~18.04 amd64 [upgradable from: 3.6.8-1~18.04.3]
libpython3.6-minimal/bionic-updates 3.6.9-1~18.04 amd64 [upgradable from: 3.6.8-1~18.04.3]
libpython3.6-stdlib/bionic-updates 3.6.9-1~18.04 amd64 [upgradable from: 3.6.8-1~18.04.3]
libsystemd0/bionic-updates 237-3ubuntu10.33 amd64 [upgradable from: 237-3ubuntu10.31]
libudev1/bionic-updates 237-3ubuntu10.33 amd64 [upgradable from: 237-3ubuntu10.31]
linux-tools-common/bionic-updates,bionic-security 4.15.0-72.81 all [upgradable from: 4.15.0-70.79]
python3-distupgrade/bionic-updates 1:18.04.36 all [upgradable from: 1:18.04.34]
python3.6/bionic-updates 3.6.9-1~18.04 amd64 [upgradable from: 3.6.8-1~18.04.3]
python3.6-minimal/bionic-updates 3.6.9-1~18.04 amd64 [upgradable from: 3.6.8-1~18.04.3]
snapd/bionic-updates 2.42.1+18.04 amd64 [upgradable from: 2.40+18.04]
sosreport/bionic-updates 3.6-1ubuntu0.18.04.4 amd64 [upgradable from: 3.6-1ubuntu0.18.04.3]
systemd/bionic-updates 237-3ubuntu10.33 amd64 [upgradable from: 237-3ubuntu10.31]
systemd-sysv/bionic-updates 237-3ubuntu10.33 amd64 [upgradable from: 237-3ubuntu10.31]
tshark/bionic-updates,bionic-security 2.6.10-1~ubuntu18.04.0 amd64 [upgradable from: 2.4.5-1]
ubuntu-release-upgrader-core/bionic-updates 1:18.04.36 all [upgradable from: 1:18.04.34]
udev/bionic-updates 237-3ubuntu10.33 amd64 [upgradable from: 237-3ubuntu10.31]
wireshark-common/bionic-updates,bionic-security 2.6.10-1~ubuntu18.04.0 amd64 [upgradable from: 2.4.5-1]
root at uu-non-minimal-lp-1838917:~# unattended-upgrade --verbose --debug
Initial blacklisted packages: 
Initial whitelisted packages: 
Starting unattended upgrades script
Allowed origins are: o=Ubuntu,a=bionic, o=Ubuntu,a=bionic-security, o=UbuntuESM,a=bionic
Using (^linux-image-[0-9]+\.[0-9\.]+-.*|^linux-headers-[0-9]+\.[0-9\.]+-.*|^linux-image-extra-[0-9]+\.[0-9\.]+-.*|^linux-modules-[0-9]+\.[0-9\.]+-.*|^linux-modules-extra-[0-9]+\.[0-9\.]+-.*|^linux-signed-image-[0-9]+\.[0-9\.]+-.*|^linux-image-unsigned-[0-9]+\.[0-9\.]+-.*|^kfreebsd-image-[0-9]+\.[0-9\.]+-.*|^kfreebsd-headers-[0-9]+\.[0-9\.]+-.*|^gnumach-image-[0-9]+\.[0-9\.]+-.*|^.*-modules-[0-9]+\.[0-9\.]+-.*|^.*-kernel-[0-9]+\.[0-9\.]+-.*|^linux-backports-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-tools-[0-9]+\.[0-9\.]+-.*|^linux-cloud-tools-[0-9]+\.[0-9\.]+-.*|^linux-buildinfo-[0-9]+\.[0-9\.]+-.*|^linux-source-[0-9]+\.[0-9\.]+-.*|^linux-image-[0-9]+\.[0-9\.]+-.*|^linux-headers-[0-9]+\.[0-9\.]+-.*|^linux-image-extra-[0-9]+\.[0-9\.]+-.*|^linux-modules-[0-9]+\.[0-9\.]+-.*|^linux-modules-extra-[0-9]+\.[0-9\.]+-.*|^linux-signed-image-[0-9]+\.[0-9\.]+-.*|^linux-image-unsigned-[0-9]+\.[0-9\.]+-.*|^kfreebsd-image-[0-9]+\.[0-9\.]+-.*|^kfreebsd-headers-[0-9]+\.[0-9\.]+-.*|^gnumach-image-[0-9]+\.[0-9\.]+-.*|^.*-modules-[0-9]+\.[0-9\.]+-.*|^.*-kernel-[0-9]+\.[0-9\.]+-.*|^linux-backports-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-modules-.*-[0-9]+\.[0-9\.]+-.*|^linux-tools-[0-9]+\.[0-9\.]+-.*|^linux-cloud-tools-[0-9]+\.[0-9\.]+-.*|^linux-buildinfo-[0-9]+\.[0-9\.]+-.*|^linux-source-[0-9]+\.[0-9\.]+-.*) regexp to find kernel packages
Using (^linux-image-5\.0\.0\-36\-generic$|^linux-headers-5\.0\.0\-36\-generic$|^linux-image-extra-5\.0\.0\-36\-generic$|^linux-modules-5\.0\.0\-36\-generic$|^linux-modules-extra-5\.0\.0\-36\-generic$|^linux-signed-image-5\.0\.0\-36\-generic$|^linux-image-unsigned-5\.0\.0\-36\-generic$|^kfreebsd-image-5\.0\.0\-36\-generic$|^kfreebsd-headers-5\.0\.0\-36\-generic$|^gnumach-image-5\.0\.0\-36\-generic$|^.*-modules-5\.0\.0\-36\-generic$|^.*-kernel-5\.0\.0\-36\-generic$|^linux-backports-modules-.*-5\.0\.0\-36\-generic$|^linux-modules-.*-5\.0\.0\-36\-generic$|^linux-tools-5\.0\.0\-36\-generic$|^linux-cloud-tools-5\.0\.0\-36\-generic$|^linux-buildinfo-5\.0\.0\-36\-generic$|^linux-source-5\.0\.0\-36\-generic$|^linux-image-5\.0\.0\-36\-generic$|^linux-headers-5\.0\.0\-36\-generic$|^linux-image-extra-5\.0\.0\-36\-generic$|^linux-modules-5\.0\.0\-36\-generic$|^linux-modules-extra-5\.0\.0\-36\-generic$|^linux-signed-image-5\.0\.0\-36\-generic$|^linux-image-unsigned-5\.0\.0\-36\-generic$|^kfreebsd-image-5\.0\.0\-36\-generic$|^kfreebsd-headers-5\.0\.0\-36\-generic$|^gnumach-image-5\.0\.0\-36\-generic$|^.*-modules-5\.0\.0\-36\-generic$|^.*-kernel-5\.0\.0\-36\-generic$|^linux-backports-modules-.*-5\.0\.0\-36\-generic$|^linux-modules-.*-5\.0\.0\-36\-generic$|^linux-tools-5\.0\.0\-36\-generic$|^linux-cloud-tools-5\.0\.0\-36\-generic$|^linux-buildinfo-5\.0\.0\-36\-generic$|^linux-source-5\.0\.0\-36\-generic$) regexp to find running kernel packages
Checking: libnss-systemd ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: libnss-systemd=237-3ubuntu10.29
Checking: libpam-systemd ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: libpam-systemd=237-3ubuntu10.29
Checking: libpython3.6 ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: libpython3.6=3.6.8-1~18.04.3
Checking: libpython3.6-minimal ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: libpython3.6-minimal=3.6.8-1~18.04.3
Checking: libpython3.6-stdlib ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: libpython3.6-stdlib=3.6.8-1~18.04.3
Checking: libsystemd0 ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: libsystemd0=237-3ubuntu10.29
Checking: libudev1 ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: libudev1=237-3ubuntu10.29
Checking: linux-tools-common ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>, <Origin component:'main' archive:'bionic-security' origin:'Ubuntu' label:'Ubuntu' site:'security.ubuntu.com' isTrusted:True>])
Checking: python3-distupgrade ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: python3-distupgrade=1:18.04.17
Checking: python3.6 ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: python3.6=3.6.8-1~18.04.3
Checking: python3.6-minimal ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: python3.6-minimal=3.6.8-1~18.04.3
Checking: snapd ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: snapd=2.37.4+18.04.1
Checking: sosreport ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: sosreport=3.5-1ubuntu3
Checking: systemd ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: systemd=237-3ubuntu10.29
Checking: systemd-sysv ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: systemd-sysv=237-3ubuntu10.29
Checking: tshark ([<Origin component:'universe' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>, <Origin component:'universe' archive:'bionic-security' origin:'Ubuntu' label:'Ubuntu' site:'security.ubuntu.com' isTrusted:True>])
Checking: ubuntu-release-upgrader-core ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: ubuntu-release-upgrader-core=1:18.04.17
Checking: udev ([<Origin component:'main' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
adjusting candidate version: udev=237-3ubuntu10.29
Checking: wireshark-common ([<Origin component:'universe' archive:'bionic-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>, <Origin component:'universe' archive:'bionic-security' origin:'Ubuntu' label:'Ubuntu' site:'security.ubuntu.com' isTrusted:True>])
pkgs that look like they should be upgraded: linux-tools-common
tshark
wireshark-common
Get:1 http://archive.ubuntu.com/ubuntu bionic-updates/universe amd64 libwsutil9 amd64 2.6.10-1~ubuntu18.04.0 [55.5 kB]                                                       
Get:2 http://archive.ubuntu.com/ubuntu bionic-updates/universe amd64 libwiretap8 amd64 2.6.10-1~ubuntu18.04.0 [177 kB]                                                       
Get:3 http://archive.ubuntu.com/ubuntu bionic-updates/universe amd64 libwscodecs2 amd64 2.6.10-1~ubuntu18.04.0 [17.8 kB]                                                     
Get:4 http://archive.ubuntu.com/ubuntu bionic-updates/universe amd64 libwireshark11 amd64 2.6.10-1~ubuntu18.04.0 [13.6 MB]                                                   
Get:5 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 linux-tools-common all 4.15.0-72.81 [160 kB]                                                                
Get:6 http://archive.ubuntu.com/ubuntu bionic-updates/universe amd64 tshark amd64 2.6.10-1~ubuntu18.04.0 [134 kB]                                                            
Get:7 http://archive.ubuntu.com/ubuntu bionic-updates/universe amd64 wireshark-common amd64 2.6.10-1~ubuntu18.04.0 [391 kB]                                                  
Fetched 14.5 MB in 0s (0 B/s)                                                                                                                                                
fetch.run() result: 0
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 55496 DestFile:'/var/cache/apt/archives/libwsutil9_2.6.10-1~ubuntu18.04.0_amd64.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/universe/w/wireshark/libwsutil9_2.6.10-1~ubuntu18.04.0_amd64.deb' ID:1 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libwsutil9_2.6.10-1~ubuntu18.04.0_amd64.deb)
No conffiles in deb /var/cache/apt/archives/libwsutil9_2.6.10-1~ubuntu18.04.0_amd64.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 176548 DestFile:'/var/cache/apt/archives/libwiretap8_2.6.10-1~ubuntu18.04.0_amd64.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/universe/w/wireshark/libwiretap8_2.6.10-1~ubuntu18.04.0_amd64.deb' ID:2 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libwiretap8_2.6.10-1~ubuntu18.04.0_amd64.deb)
No conffiles in deb /var/cache/apt/archives/libwiretap8_2.6.10-1~ubuntu18.04.0_amd64.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 17816 DestFile:'/var/cache/apt/archives/libwscodecs2_2.6.10-1~ubuntu18.04.0_amd64.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/universe/w/wireshark/libwscodecs2_2.6.10-1~ubuntu18.04.0_amd64.deb' ID:3 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libwscodecs2_2.6.10-1~ubuntu18.04.0_amd64.deb)
No conffiles in deb /var/cache/apt/archives/libwscodecs2_2.6.10-1~ubuntu18.04.0_amd64.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 13590124 DestFile:'/var/cache/apt/archives/libwireshark11_2.6.10-1~ubuntu18.04.0_amd64.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/universe/w/wireshark/libwireshark11_2.6.10-1~ubuntu18.04.0_amd64.deb' ID:4 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/libwireshark11_2.6.10-1~ubuntu18.04.0_amd64.deb)
No conffiles in deb /var/cache/apt/archives/libwireshark11_2.6.10-1~ubuntu18.04.0_amd64.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 159752 DestFile:'/var/cache/apt/archives/linux-tools-common_4.15.0-72.81_all.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/main/l/linux/linux-tools-common_4.15.0-72.81_all.deb' ID:5 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/linux-tools-common_4.15.0-72.81_all.deb)
found pkg: linux-tools-common
No conffiles in deb /var/cache/apt/archives/linux-tools-common_4.15.0-72.81_all.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 134012 DestFile:'/var/cache/apt/archives/tshark_2.6.10-1~ubuntu18.04.0_amd64.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/universe/w/wireshark/tshark_2.6.10-1~ubuntu18.04.0_amd64.deb' ID:6 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/tshark_2.6.10-1~ubuntu18.04.0_amd64.deb)
found pkg: tshark
No conffiles in deb /var/cache/apt/archives/tshark_2.6.10-1~ubuntu18.04.0_amd64.deb (There is no member named 'conffiles')
<apt_pkg.AcquireItem object:Status: 2 Complete: 1 Local: 0 IsTrusted: 1 FileSize: 390556 DestFile:'/var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu18.04.0_amd64.deb' DescURI: 'http://archive.ubuntu.com/ubuntu/pool/universe/w/wireshark/wireshark-common_2.6.10-1~ubuntu18.04.0_amd64.deb' ID:7 ErrorText: ''>
check_conffile_prompt(/var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu18.04.0_amd64.deb)
found pkg: wireshark-common
No conffiles in deb /var/cache/apt/archives/wireshark-common_2.6.10-1~ubuntu18.04.0_amd64.deb (There is no member named 'conffiles')
blacklist: []
whitelist: []
Removing unused kernel packages: linux-tools-4.18.0-16-generic linux-tools-4.18.0-15-generic linux-tools-4.18.0-13-generic linux-tools-4.18.0-14-generic linux-tools-4.18.0-18-generic linux-tools-4.18.0-17-generic
(Reading database ... 29387 files and directories currently installed.)
Removing linux-tools-4.18.0-13-generic (4.18.0-13.14~18.04.1) ...
Removing linux-tools-4.18.0-14-generic (4.18.0-14.15~18.04.1) ...
Removing linux-tools-4.18.0-15-generic (4.18.0-15.16~18.04.1) ...
Removing linux-tools-4.18.0-16-generic (4.18.0-16.17~18.04.1) ...
Removing linux-tools-4.18.0-17-generic (4.18.0-17.18~18.04.1) ...
Removing linux-tools-4.18.0-18-generic (4.18.0-18.19~18.04.1) ...
Packages that were successfully auto-removed: 
Packages that are kept back: 
Packages that will be upgraded: linux-tools-common tshark wireshark-common
Writing dpkg log to /var/log/unattended-upgrades/unattended-upgrades-dpkg.log
Preconfiguring packages ...
Preconfiguring packages ...
Selecting previously unselected package libwsutil9:amd64.
(Reading database ... 29320 files and directories currently installed.)
Preparing to unpack .../0-libwsutil9_2.6.10-1~ubuntu18.04.0_amd64.deb ...
Unpacking libwsutil9:amd64 (2.6.10-1~ubuntu18.04.0) ...
Selecting previously unselected package libwiretap8:amd64.
Preparing to unpack .../1-libwiretap8_2.6.10-1~ubuntu18.04.0_amd64.deb ...
Unpacking libwiretap8:amd64 (2.6.10-1~ubuntu18.04.0) ...
Selecting previously unselected package libwscodecs2:amd64.
Preparing to unpack .../2-libwscodecs2_2.6.10-1~ubuntu18.04.0_amd64.deb ...
Unpacking libwscodecs2:amd64 (2.6.10-1~ubuntu18.04.0) ...
Selecting previously unselected package libwireshark11:amd64.
Preparing to unpack .../3-libwireshark11_2.6.10-1~ubuntu18.04.0_amd64.deb ...
Unpacking libwireshark11:amd64 (2.6.10-1~ubuntu18.04.0) ...
Preparing to unpack .../4-linux-tools-common_4.15.0-72.81_all.deb ...
Unpacking linux-tools-common (4.15.0-72.81) over (4.15.0-70.79) ...
Preparing to unpack .../5-tshark_2.6.10-1~ubuntu18.04.0_amd64.deb ...
Unpacking tshark (2.6.10-1~ubuntu18.04.0) over (2.4.5-1) ...
Preparing to unpack .../6-wireshark-common_2.6.10-1~ubuntu18.04.0_amd64.deb ...
Unpacking wireshark-common (2.6.10-1~ubuntu18.04.0) over (2.4.5-1) ...
Setting up libwsutil9:amd64 (2.6.10-1~ubuntu18.04.0) ...
Setting up linux-tools-common (4.15.0-72.81) ...
Setting up libwscodecs2:amd64 (2.6.10-1~ubuntu18.04.0) ...
Setting up libwiretap8:amd64 (2.6.10-1~ubuntu18.04.0) ...
Setting up libwireshark11:amd64 (2.6.10-1~ubuntu18.04.0) ...
Setting up wireshark-common (2.6.10-1~ubuntu18.04.0) ...
Setting up tshark (2.6.10-1~ubuntu18.04.0) ...
Processing triggers for man-db (2.8.3-2ubuntu0.1) ...
Processing triggers for shared-mime-info (1.9-2) ...
Processing triggers for libc-bin (2.27-3ubuntu1) ...
All upgrades installed
(Reading database ... 29366 files and directories currently installed.)
Removing libwireshark10:amd64 (2.4.5-1) ...
Removing libwiretap7:amd64 (2.4.5-1) ...
Removing libwscodecs1:amd64 (2.4.5-1) ...
Removing libwsutil8:amd64 (2.4.5-1) ...
Processing triggers for libc-bin (2.27-3ubuntu1) ...
Packages that were successfully auto-removed: 
Packages that are kept back: 
InstCount=0 DelCount=0 BrokenCount=0
Extracting content from /var/log/unattended-upgrades/unattended-upgrades-dpkg.log since 2019-12-03 16:37:10

** Tags removed: verification-needed-bionic
** Tags added: verification-done-bionic

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to unattended-upgrades in Ubuntu.
https://bugs.launchpad.net/bugs/1853861

Title:
  [SRU] Unattended-upgrades silently does not apply updates when
  MinimalSteps is disabled and there are autoremovable kernels

Status in unattended-upgrades package in Ubuntu:
  Fix Released
Status in unattended-upgrades source package in Xenial:
  Fix Committed
Status in unattended-upgrades source package in Bionic:
  Fix Committed
Status in unattended-upgrades source package in Disco:
  Fix Released
Status in unattended-upgrades source package in Eoan:
  Fix Released

Bug description:
  [Impact]

   * When autoremovable kernel packages are present on the system, there are updates to apply and Unattended-Upgrade::MinimalSteps is set to "false", the autoremovable kernel packages are not removed and the updates are not applied.
   * The root cause is u-u not cleaning the dirty cache between operations and also relying on having a cache with packages marked to be installed when applying updates in one shot.
   * The fix is clearing the cache between operations and marking packages before installing them in one shot.

  [Test Case]

   * Install kernel-related packages, mark them as automatically installed to make them auto-removable ones.
   * Downgrade a few packages to a version lower than what is present in the security pocket.
   * Set Unattended-Upgrade::MinimalSteps to "false":
     # echo 'Unattended-Upgrade::MinimalSteps "false";' > /etc/apt/apt.conf.d/51unattended-upgrades-oneshot

   * Run u-u:
     # unattended-upgrade --verbose --debug

   * Observe fixed versions removing the kernel packages properly and
  also upgrading packages.

  [Regression Potential]

   * The changes introduce marking packages to install/upgrade and clearing the cache more often. The added operations slow down u-u, but clearing the cache adds a few 100 milliseconds on typical hardware and marking upgradable packages is also in the same range.
   * Functional regressions are unlikely due to those changes since the fixes are present in 19.04 and later releases and the extensive autopkgtest also covers when upgrades are performed in minimal steps.

  [Other Info]

   * While this bug has a security impact by holding back installation of security updates I don't recommend releasing the fix via the security pocket because this bug occurs only when the local configuration file of u-u is changed and u-u does not hold back upgrades with UCF-managed config file conflicts.
    See: https://github.com/mvo5/unattended-upgrades/issues/168

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/1853861/+subscriptions