Question: How do I know unattended upgrades is running?
Answer
You should see logs in /var/log/unattended-upgrades/unattended-upgrades.log.
You also should have a /etc/apt/apt.conf.d/20auto-upgrades file:
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
If yes, what does your 50unattended-upgrades file look like?
Mine looks like so (I don’t track -updates), add if needed. You’ll want to
divert this file before you change
it.
Unattended-Upgrade::Origins-Pattern {
"origin=Debian,codename=${distro_codename},label=Debian";
"origin=Debian,codename=${distro_codename},label=Debian-Security";
"origin=Debian,codename=${distro_codename}-security,label=Debian-Security";
"a=mozilla,n=mozilla";
"o=Docker,a=bookworm";
"o=Google LLC,a=stable,n=stable";
"site=deb.nodesource.com";
"site=updates.signal.org";
};
Unattended-Upgrade::Package-Blacklist {
};
Unattended-Upgrade::AutoFixInterruptedDpkg "true";
Unattended-Upgrade::MinimalSteps "true";
Unattended-Upgrade::InstallOnShutdown "false";
Unattended-Upgrade::Remove-New-Unused-Dependencies "true";
Unattended-Upgrade::Remove-Unused-Dependencies "true";
Unattended-Upgrade::SyslogEnable "true";
// Specify syslog facility. Default is daemon
// Unattended-Upgrade::SyslogFacility "daemon";
// Allow package downgrade if Pin-Priority exceeds 1000
Unattended-Upgrade::Allow-downgrade "true";
Please note that unattended-upgrades also allows you to override its config
by placing a file in /etc/apt/apt.conf.d/99-unattended-upgrades (the 99 can
be changed to any value > 50) and it will use that instead. I prefer the
dpkg-divert.
In case you want to stop unattended-upgrades from even running you can set
/etc/apt/apt.conf.d/20auto-upgrades to:
APT::Periodic::Update-Package-Lists "0";
APT::Periodic::Unattended-Upgrade "0";
or run dpkg-reconfigure unattented-upgrades, which will do the exact same
thing or just remove the unattended-upgrades package completely.