When I run:

Code: Select all

sudo dpkg-reconfigure -plow unattended-upgrades

What should the value be for the following field:

Code: Select all

Configuring unattended-upgrades ├─────────────────────────────────────┐
                   │ Please specify a value for the unattended-upgrades Origins-Pattern.                                         │
                   │                                                                                                             │
                   │ A package will be upgraded only if its metadata values match all the supplied keywords in the origin line.  │
                   │                                                                                                             │
                   │ Origins-Pattern that packages must match to be upgraded:

Currently I have:

Code: Select all

"origin=Ubuntu,codename=Xenial,label=Security";

Use

Code: Select all

/etc/apt/apt.conf.d/10periodic
/etc/apt/apt.conf.d/50unattended-upgrades

The easy way

Ok so I look at the official docs here: https://help.ubuntu.com/lts/serverguide ... dates.html

...But it doesn't say exactly what these files should be.

In my /etc/apt/apt.conf.d/10periodic I have the following:

Code: Select all

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "0";
APT::Periodic::AutocleanInterval "0";

And the aforementioned howto doesn't mention what these should be, except to say

Code: Select all

You can read more about apt Periodic configuration options in the /etc/cron.daily/apt script header.

whatever that means.

With regard to my /etc/apt/apt.conf.d/50unattended-upgrades, I understand most of what its talking about except for the part here where by default I have the following:

Code: Select all

// Automatically upgrade packages from these (origin:archive) pairs
Unattended-Upgrade::Allowed-Origins {
        "${distro_id}:${distro_codename}";
        "${distro_id}:${distro_codename}-security";
        // Extended Security Maintenance; doesn't necessarily exist for
        // every release and this system may not have it installed, but if
        // available, the policy for updates is such that unattended-upgrades
        // should also install from here by default.
        "${distro_id}ESM:${distro_codename}";
//      "${distro_id}:${distro_codename}-updates";
//      "${distro_id}:${distro_codename}-proposed";
//      "${distro_id}:${distro_codename}-backports";
};

In this case are the parts that are ${distro_id} & ${distro_codename} environment variables like how Windows does %USERPROFILE% & %SYSTEMROOT% ?

...Or do I need to change all that to match what is specified in /etc/apt/sources.list, like :

Code: Select all

      "ubuntu:xenial-updates";


$ cat /etc/apt/sources.list | grep '^[^#]+'
deb http://de.archive.ubuntu.com/ubuntu/ xenial main restricted
deb http://de.archive.ubuntu.com/ubuntu/ xenial-updates main restricted
deb http://de.archive.ubuntu.com/ubuntu/ xenial universe
deb http://de.archive.ubuntu.com/ubuntu/ xenial-updates universe
deb http://de.archive.ubuntu.com/ubuntu/ xenial multiverse
deb http://de.archive.ubuntu.com/ubuntu/ xenial-updates multiverse
deb http://de.archive.ubuntu.com/ubuntu/ xenial-backports main restricted universe multiverse
deb http://security.ubuntu.com/ubuntu xenial-security main restricted
deb http://security.ubuntu.com/ubuntu xenial-security universe
deb http://security.ubuntu.com/ubuntu xenial-security multiverse


$ cat /etc/apt/sources.list.d/neon.list | grep '^[^#]+'
deb http://archive.neon.kde.org/user xenial main
deb-src http://archive.neon.kde.org/user xenial main

###

Example:

Distro=ubuntu
Codename=xenial-security

Distro=user
Codename=xenial