Hi, in order to test unattended-upgrades I downgraded yesterday(4.06) packages iceweasel, qemu-utils and thunderbird:
# # "apt list --upgradable" command below was executed on 4.06 # apt list --upgradable Listing... Done iceweasel/stable 60.7.0esr-1~deb9u1 all [upgradable from: 52.9.0esr-1~deb9u1] qemu-utils/stable 1:2.8+dfsg-6+deb9u6 amd64 [upgradable from: 1:2.8+dfsg-6+deb9u5] thunderbird/stable 1:60.7.0-1~deb9u1 amd64 [upgradable from: 1:60.6.1-1~deb9u1] # As expected, the unattended-upgrades ran today(5.06) morning, but it reported, that "No packages found that can be upgraded unattended and no pending auto-removals". Indeed, when I checked for example "apt policy iceweasel", then the apt saw the installed version as the latest one: $ sudo apt policy iceweasel iceweasel: Installed: 52.9.0esr-1~deb9u1 Candidate: 52.9.0esr-1~deb9u1 Version table: *** 52.9.0esr-1~deb9u1 100 100 /var/lib/dpkg/status $ "apt policy" listed only the repository configured in /etc/apt/sources.list.d/digitalocean-agent.list while ignoring the ones in sources.list: # apt policy Package files: 100 /var/lib/dpkg/status release a=now 500 https://repos.insights.digitalocean.com/apt/do-agent main/main amd64 Packages release o=. main,a=main,n=main,l=. main,c=main,b=amd64 origin repos.insights.digitalocean.com Pinned packages: # After executing "apt update", the rest of the repositories were again seen in the output of "apt policy" and for example, the iceweasel was again upgradable to 60.7.0esr-1~deb9u1: $ sudo apt policy iceweasel iceweasel: Installed: 52.9.0esr-1~deb9u1 Candidate: 60.7.0esr-1~deb9u1 /* output removed for brevity */ $ Looks like the "apt update" or equivalent ran by unattended-upgrades ignored the /etc/apt/sources.list file and used only /etc/apt/sources.list.d/digitalocean-agent.list as a source for repositories. What might cause this behavior? thanks, Martin