Change unattended-upgrades from Depends to Recommends on ubuntu-server-minimal

[Steve Langasek]

On Wed, Jan 05, 2022 at 09:40:32AM -0600, John Chittum wrote:
> From Steve:
> 
> > First, I think unattended-upgrades should be directly seeded everywhere;
> > its inclusion in the images should not be a side-effect of including
> > software-properties.

> On one hand, I generally agree with this statement. It seems odd that it is
> not directly seeded in the cloud images. the LXD container, I'm a little
> less worried about, and I'd almost argue the opposite -- that in a
> container image `unattended-upgrades` should not be installed by default.
> Or, if it is, the default settings are to not be running. That fits more to
> the current world stance on containers (you don't upgrade them, you replace
> them). For instance, the Docker container does not have it installed. From
> the Impish container (which i have handy)

LXD containers are intended to be Ubuntu systems; they run init, they run
services by default.  unattended-upgrades should certainly be part of this
by default (and in practice is today).

docker containers are a different matter.

> The gist is anything built by the ubuntu-cpc starts from the server seed,
> then runs the seed task minimal, standard, and cloud-image, then installs
> the meta-package ubuntu-minimal. It's certainly different than the server
> path, and should be different considering the use cases.

Well, I don't agree that it "should" be different.  It must be different,
because the set of packages installed is not identical; but that's not a
feature (certainly not for anyone who is trying to reason about the behavior
of default installs of Ubuntu in different contexts).

On Wed, Jan 12, 2022 at 12:12:21PM +1300, Michael Hudson-Doyle wrote:
> So I think we should probably change the server-minimal seed to only
> recommend, not depend, on unattended-upgrades. Changing to a hard
> dependency was not intended when I wrote that seed and a change like this
> should probably be a conscious thing.

I agree with this.  And as I said, I think it's important that we directly
recommend this everywhere rather that let it be an accidental side effect.

Cheers,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                   https://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://lists.ubuntu.com/archives/ubuntu-devel/attachments/20220112/98ffdab9/attachment-0001.sig>