Re: Fwd: can anyone review diaspora-installer?
On 2017-04-06 15:47, Pirate Praveen wrote: > Sharing with wider debian community, hoping to get some support. > > Current version in unstable does not have any RC bugs, but recent > changes in the package made release managers not happy with the quality > of the package and it was removed from testing. Now their justification > to not accept unblock request is lack of time to review it before > stretch release. >From last line of https://release.debian.org/stretch/freeze_policy.html: "After 5th January 2017, removed packages will NOT be permitted to re-enter testing." So you may be out of luck, sorry. One thing that puzzles me though is that the bug was opened at: "Thu, 23 Mar 2017 02:17:28 +0100" and the package was auto removed "Thu, 23 Mar 2017 16:39:09 +" https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858521 https://packages.qa.debian.org/d/diaspora-installer/news/20170323T163909Z.html I thought normally more time was allowed. Is this because the bug was critical? If so, are the times before autoremoval documented anywhere? I asked Google, but Google said "10 days" which may not be up-to-date information: https://lists.debian.org/debian-devel-announce/2013/09/msg6.html
Re: Fwd: can anyone review diaspora-installer?
On Thu, Apr 06, 2017 at 05:22:25PM +1000, Brian May wrote: > One thing that puzzles me though is that the bug was opened at: "Thu, 23 > Mar 2017 02:17:28 +0100" and the package was auto removed "Thu, 23 Mar > 2017 16:39:09 +" > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858521 > https://packages.qa.debian.org/d/diaspora-installer/news/20170323T163909Z.html > > > I thought normally more time was allowed. Is this because the bug was > critical? If so, are the times before autoremoval documented anywhere? It was not an autoremoval, it was a manual one. -- WBR, wRAR signature.asc Description: PGP signature
Re: Fwd: can anyone review diaspora-installer?
On Thu, Apr 06, 2017 at 12:27:12PM +0500, Andrey Rahmatullin wrote: > > One thing that puzzles me though is that the bug was opened at: "Thu, 23 > > Mar 2017 02:17:28 +0100" and the package was auto removed "Thu, 23 Mar > > 2017 16:39:09 +" > > > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858521 > > https://packages.qa.debian.org/d/diaspora-installer/news/20170323T163909Z.html > > > > > > I thought normally more time was allowed. Is this because the bug was > > critical? If so, are the times before autoremoval documented anywhere? > It was not an autoremoval, it was a manual one. See https://lists.debian.org/debian-release/2017/03/msg00961.html for reasons. -- WBR, wRAR signature.asc Description: PGP signature
Re: Fwd: can anyone review diaspora-installer?
On Thu, Apr 06, 2017 at 11:17:26AM +0530, Pirate Praveen wrote: > Sharing with wider debian community, hoping to get some support. I'm afraid I cannot give my support to this. I'm not involved with release management, so this is just one rando developer's opinion. > Current version in unstable does not have any RC bugs Possibly it should. Looking at https://sources.debian.net/src/diaspora-installer/0.6.3.0%2Bdebian4/diaspora-download.sh/ If I read that code correctly, it downloads code from github, and installs it. There is no verification step that the downloaded content is valid and hasn't been substituted by an attacker. This seems to me unfit for a Debian stable release. I would expect the package to check the checksum of the downloaded tarball, or similar mechanism. -- I want to build worthwhile things that might last. --joeyh signature.asc Description: PGP signature
Re: Fwd: can anyone review diaspora-installer?
On 2017-04-06 15:47, Pirate Praveen wrote: > Sharing with wider debian community, hoping to get some support. > > Current version in unstable does not have any RC bugs, but recent > changes in the package made release managers not happy with the quality > of the package and it was removed from testing. Now their justification > to not accept unblock request is lack of time to review it before > stretch release. postrm has: id -u diaspora && userdel -r diaspora Where -r == delete all files in the user's home directory. As per: https://sources.debian.net/src/diaspora-installer/0.6.3.0%2Bdebian4/debian/diaspora-common.postrm/ This makes me very very nervous. You have no control over what changes might happen to the home directory. It might not be the directory you expect it to be. Been there myself. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=190427 Far safer to delete the files you need deleted yourself, and remove the "-r" option.
Re: Fwd: can anyone review diaspora-installer?
❦ 6 avril 2017 18:20 +1000, Brian May : >> Sharing with wider debian community, hoping to get some support. >> >> Current version in unstable does not have any RC bugs, but recent >> changes in the package made release managers not happy with the quality >> of the package and it was removed from testing. Now their justification >> to not accept unblock request is lack of time to review it before >> stretch release. > > postrm has: > > id -u diaspora && userdel -r diaspora Moreover, this is not the right way to handle system users. Just use: deluser --system diaspora No need to test if the user already exists. adduser.sh does things better but tries to be smart and hard-code the fact that FIRST_UID is 1000, while it can be anything else. Better just rely on adduser output for the warning. -- No violence, gentlemen -- no violence, I beg of you! Consider the furniture! -- Sherlock Holmes signature.asc Description: PGP signature
Re: Fwd: can anyone review diaspora-installer?
On Thu, Apr 06, 2017 at 11:05:05AM +0200, Vincent Bernat wrote: > >> Sharing with wider debian community, hoping to get some support. > >> > >> Current version in unstable does not have any RC bugs, but recent > >> changes in the package made release managers not happy with the quality > >> of the package and it was removed from testing. Now their justification > >> to not accept unblock request is lack of time to review it before > >> stretch release. > > > > postrm has: > > > > id -u diaspora && userdel -r diaspora > > Moreover, this is not the right way to handle system users. Just use: > > deluser --system diaspora > > No need to test if the user already exists. Moreover, there an opinion that user accounts should not be deleted, see https://wiki.debian.org/AccountHandlingInMaintainerScripts -- WBR, wRAR signature.asc Description: PGP signature
Re: Fwd: can anyone review diaspora-installer?
On Thu, Apr 06, 2017 at 11:17:26AM +0530, Pirate Praveen wrote: > Current version in unstable does not have any RC bugs, *filed*, as this very thread shows. It *has* RC bugs. oh, and you seem to miss #856720 which is a open RC bug. > Losing diaspora-installer after putting years long effort would be very > demotivating. being in a freeze and seing 5-6 uploads trying to get the package in shape while introducing more RC bugs doing so is also very demotivating for the release team, who's job it is not, to teach you good packaging,. Really, this "userdel -r diaspora" pointed out in the first reply to this thread is again, horrible. Granted, it's not as bad as #858521 (which you *introduced* during freeze…) but: imagine your username aint pirate but diaspora and you try out this package and purge it… Finally, as Lars pointed out, running /usr/lib/diaspora-common/scripts/diaspora-download.sh in postinst is both horrible from a security point of view, plus it's a policy violation, so that's two more RC bugs. I'm sorry for all the work you put into this, but I'm absolutly *thankful* to the release team for kicking this package out of Stretch. -- cheers, Holger signature.asc Description: Digital signature
Re: Fwd: can anyone review diaspora-installer?
On Thu, Apr 06, 2017 at 09:42:33AM +, Holger Levsen wrote: > Finally, as Lars pointed out, running > /usr/lib/diaspora-common/scripts/diaspora-download.sh > in postinst is both horrible from a security point of view, plus it's a > policy violation, so that's two more RC bugs. diasporo-installer is in contrib, so running this script is not a policy violation… (the rest of my mail stil stands…) -- cheers, Holger signature.asc Description: Digital signature
Bug#859723: ITP: belenios -- verifiable voting system
Package: wnpp Severity: wishlist Owner: =?utf-8?q?St=C3=A9phane_Glondu?= * Package name: belenios Version : 1.4 Upstream Author : Stéphane Glondu * URL : http://www.belenios.org/ * License : AGPL-3+ Programming Lang: OCaml Description : verifiable voting system Belenios aims at providing an easy to use voting system, guaranteeing state-of-the-art security, namely vote privacy and verifiability. It can be used in many types of elections, ranging from scientific councils to sport associations. . It consists of a command-line tool and a web server. Both use the same backend and can be used to organize elections and perform verifications. . Security properties of the system are: * Vote privacy: No one can learn the vote of a voter. Vote privacy relies on the encryption of the votes. * End-to-end verifiablity: Every voter can check that her vote has been counted and only eligible voters may vote. End-to-end verifiablity relies on the fact that the ballot box is public (voters can check that their ballots have been received) and on the fact that the tally is publicly verifiable (anyone can recount the votes). Moreover, ballots are signed by the voter credential (only eligible voters are able to vote). This package will be maintained inside the Debian OCaml team. To avoid interaction with the next OCaml transition (esp. the Eliom stack), only the command-line tool will be packaged until that transition.
Bug#859735: ITP: muttdown -- Transparently compiles annotated text/plain mail into text/html using the Markdown standard
Package: wnpp Severity: wishlist Owner: gustavo panizzo * Package name: muttdown Version : 0.2 Upstream Author : James Brown * URL : https://github.com/Roguelazer/muttdown * License : MIT Programming Lang: Python Description : Transparently compiles annotated text/plain mail into text/html using the Markdown standard muttdown is a sendmail-replacement designed for use with the mutt email client which will transparently compile annotated text/plain mail into text/html using the Markdown standard. It will recursively walk the MIME tree and compile any text/plain or text/markdown part which begins with the sigil "!m" into Markdown, which it will insert alongside the original in a multipart/alternative container. It's also smart enough not to break multipart/signed. I'll maintain this package under collab-maint, using git
Re: "Ask HN: What do you want to see in Ubuntu 17.10?"
Nikolaus Rath dijo [Wed, Apr 05, 2017 at 03:18:57PM -0700]: > >> I have a very different perception > > > > Me too. I guess it depends very much on whether one can afford to buy > > a good laptop which works well with Linux. > > I think there's a pre-requisite that's much harder for a lot of people: > finding out what laptop works well with Linux. This is the stage where I > have repeatedly failed - the differences in model numbers are just too > tiny and subtle, and typically things that work well are no longer sold > commercially. FWIW it's been a long time since I had any problems in this regard, and I'm surprised it's still an issue among knowledgeable people by 2017! My last two laptops (bought in 2009 and 2013, IIRC) have been of the Acer Aspire One range. Both, bought at a supermarket, for around US$300. Both worked completely flawlessly since day one; I admit to having b0rked several things (power management included) due to my configurations, but I'm now used to it "just working" - I last clean-reinstalled this computer maybe two years ago, and I just push the lid down, it always suspends properly.
Bug#859748: general: fails to address full 8GiB of DDR RAM on PowerMac G5 (only 5.8GiB)
Package: general Severity: normal Dear Maintainer, I recently installed 4x1GiB sticks of DDR RAM into my PowerMac G5 DP 2.0 GHz. Apple indicates the maximum amount of RAM supported is indeed 8GiB. The system is fully usable, it runs without problems in any area, pretty much, but I would like to know if it is using the full 8GiB since in system monitor it states only 5.8 GiB total are registered. Please, if you are able to direct me, or fix, thanks. There would certainly be a performance boost in say things like Kdenlive for me if the missing ~2GiB were restored. P.S. I've attached output of 'cat /proc/meminfo' for reference. Thank you -- System Information: Debian Release: 8.7 APT prefers stable APT policy: (1000, 'stable'), (500, 'stable-updates'), (500, 'stable'), (500, 'oldstable') Architecture: powerpc (ppc64) Kernel: Linux 3.16.0-4-powerpc64 (SMP w/2 CPU cores) Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8) MemTotal:6113536 kB MemFree: 1535424 kB MemAvailable:4432576 kB Buffers: 463808 kB Cached: 2084352 kB SwapCached:0 kB Active: 3379264 kB Inactive: 620096 kB Active(anon):1464896 kB Inactive(anon):59456 kB Active(file):1914368 kB Inactive(file): 560640 kB Unevictable: 0 kB Mlocked: 0 kB SwapTotal: 14839552 kB SwapFree: 14839552 kB Dirty: 1664 kB Writeback: 0 kB AnonPages: 1451072 kB Mapped: 321216 kB Shmem: 73280 kB Slab: 519360 kB SReclaimable: 459008 kB SUnreclaim:60352 kB KernelStack:7488 kB PageTables:11968 kB NFS_Unstable: 0 kB Bounce:0 kB WritebackTmp: 0 kB CommitLimit:17896320 kB Committed_AS:3846528 kB VmallocTotal: 8589934592 kB VmallocUsed: 102528 kB VmallocChunk: 8589773632 kB HardwareCorrupted: 0 kB AnonHugePages: 0 kB HugePages_Total: 0 HugePages_Free:0 HugePages_Rsvd:0 HugePages_Surp:0 Hugepagesize: 16384 kB MemTotal:6113536 kB MemFree: 1535424 kB MemAvailable:4432576 kB Buffers: 463808 kB Cached: 2084352 kB SwapCached:0 kB Active: 3379264 kB Inactive: 620096 kB Active(anon):1464896 kB Inactive(anon):59456 kB Active(file):1914368 kB Inactive(file): 560640 kB Unevictable: 0 kB Mlocked: 0 kB SwapTotal: 14839552 kB SwapFree: 14839552 kB Dirty: 1664 kB Writeback: 0 kB AnonPages: 1451072 kB Mapped: 321216 kB Shmem: 73280 kB Slab: 519360 kB SReclaimable: 459008 kB SUnreclaim:60352 kB KernelStack:7488 kB PageTables:11968 kB NFS_Unstable: 0 kB Bounce:0 kB WritebackTmp: 0 kB CommitLimit:17896320 kB Committed_AS:3846528 kB VmallocTotal: 8589934592 kB VmallocUsed: 102528 kB VmallocChunk: 8589773632 kB HardwareCorrupted: 0 kB AnonHugePages: 0 kB HugePages_Total: 0 HugePages_Free:0 HugePages_Rsvd:0 HugePages_Surp:0 Hugepagesize: 16384 kB
Bug#859748: general: fails to address full 8GiB of DDR RAM on PowerMac G5 (only 5.8GiB)
Control: reassign -1 src:linux 3.16.39-1+deb8u2 Control: tag -1 moreinfo On Thu, 2017-04-06 at 12:23 -0700, Mark G.B. wrote: > Package: general > Severity: normal > > Dear Maintainer, > > I recently installed 4x1GiB sticks of DDR RAM into my PowerMac G5 DP 2.0 GHz. > Apple indicates the maximum amount of RAM supported is indeed 8GiB. I'm inferring from this that you have the DP+ with 8 RAM slots, and you have upgraded from 4 * 1 GiB to 8 * 1 GiB installed. Is that right? > The system is fully usable, it runs without problems in any area, pretty much, > but I would like to know if it is using the full 8GiB since in system monitor > it states only 5.8 GiB total are registered. > > Please, if you are able to direct me, or fix, thanks. There would certainly be > a performance boost in say things like Kdenlive for me if the missing ~2GiB > were restored. > > > P.S. I've attached output of 'cat /proc/meminfo' for reference. This is quite surprising. It is normal for the system firmware to reserve some amount of memory that is then unavailable to Linux, but this is a very large amount. Please also send the kernel boot messages, which might help explain what's going on. (We probably still won't be able to solve this, though, as there are few developers still interested in PowerMac systems.) Ben. -- Ben Hutchings When in doubt, use brute force. - Ken Thompson signature.asc Description: This is a digitally signed message part
Processed: Re: Bug#859748: general: fails to address full 8GiB of DDR RAM on PowerMac G5 (only 5.8GiB)
Processing control commands: > reassign -1 src:linux 3.16.39-1+deb8u2 Bug #859748 [general] general: fails to address full 8GiB of DDR RAM on PowerMac G5 (only 5.8GiB) Bug reassigned from package 'general' to 'src:linux'. Ignoring request to alter found versions of bug #859748 to the same values previously set Ignoring request to alter fixed versions of bug #859748 to the same values previously set Bug #859748 [src:linux] general: fails to address full 8GiB of DDR RAM on PowerMac G5 (only 5.8GiB) Marked as found in versions linux/3.16.39-1+deb8u2. > tag -1 moreinfo Bug #859748 [src:linux] general: fails to address full 8GiB of DDR RAM on PowerMac G5 (only 5.8GiB) Added tag(s) moreinfo. -- 859748: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859748 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
Re: "Ask HN: What do you want to see in Ubuntu 17.10?"
On Apr 06 2017, Gunnar Wolf wrote: > Nikolaus Rath dijo [Wed, Apr 05, 2017 at 03:18:57PM -0700]: >> >> I have a very different perception >> > >> > Me too. I guess it depends very much on whether one can afford to buy >> > a good laptop which works well with Linux. >> >> I think there's a pre-requisite that's much harder for a lot of people: >> finding out what laptop works well with Linux. This is the stage where I >> have repeatedly failed - the differences in model numbers are just too >> tiny and subtle, and typically things that work well are no longer sold >> commercially. > > FWIW it's been a long time since I had any problems in this regard, > and I'm surprised it's still an issue among knowledgeable people by > 2017! Maybe I'm just exceedingly unlucky, but I have yet to find a laptop where all of the following works: - Suspend - Hibernate - Airplane-mode Hotkey (especially hard apparently) - Volume Hotkeys - Brightness Hotkeys - Suspend/hibernate hotkeys - Hot-plug of external monitor >From memory, some of the models I tried and found lacking: Asus EeePC, Lenovo Carbon X1, HP Elitebook from ~3 years ago, HP Elitebook from just now. Suggestions for the next purchase are welcome :-). (but probably better off-list) Best, -Nikolaus -- GPG Fingerprint: ED31 791B 2C5C 1613 AF38 8B8A D113 FCAC 3C4E 599F »Time flies like an arrow, fruit flies like a Banana.«
Re: "Ask HN: What do you want to see in Ubuntu 17.10?"
Am 07.04.2017 um 01:07 schrieb Nikolaus Rath: > Maybe I'm just exceedingly unlucky, but I have yet to find a laptop > where all of the following works: > > - Suspend > - Hibernate > - Airplane-mode Hotkey (especially hard apparently) > - Volume Hotkeys > - Brightness Hotkeys > - Suspend/hibernate hotkeys > - Hot-plug of external monitor > >>From memory, some of the models I tried and found lacking: Asus EeePC, > Lenovo Carbon X1, HP Elitebook from ~3 years ago, HP Elitebook from just > now. > > Suggestions for the next purchase are welcome :-). All of the above works flawlessly on my Thinkpad X220 running Debian Sid with GNOME. -- Why is it that all of the instruments seeking intelligent life in the universe are pointed away from Earth? signature.asc Description: OpenPGP digital signature
Work-needing packages report for Apr 7, 2017
The following is a listing of packages for which help has been requested through the WNPP (Work-Needing and Prospective Packages) system in the last week. Total number of orphaned packages: 1067 (new: 5) Total number of packages offered up for adoption: 159 (new: 1) Total number of packages requested help for: 42 (new: 0) Please refer to http://www.debian.org/devel/wnpp/ for more information. The following packages have been orphaned: eancheck (#859485), orphaned 2 days ago Description: Check digit validator for EAN/PLU/UPC barcode numbers Installations reported by Popcon: 32 Bug Report URL: http://bugs.debian.org/859485 fonts-humor-sans (#859180), orphaned 6 days ago Description: Font that looks like handwritten text Installations reported by Popcon: 447 Bug Report URL: http://bugs.debian.org/859180 pycryptopp (#859182), orphaned 6 days ago Description: python wrappers for the crypto++ library Reverse Depends: python-pycryptopp-dbg tahoe-lafs Installations reported by Popcon: 568 Bug Report URL: http://bugs.debian.org/859182 shutilwhich (#859181), orphaned 6 days ago Description: backport of python3's shutil.which module Installations reported by Popcon: 1 Bug Report URL: http://bugs.debian.org/859181 zfec (#859186), orphaned 6 days ago Description: fast erasure codec with python bindings Reverse Depends: tahoe-lafs Installations reported by Popcon: 186 Bug Report URL: http://bugs.debian.org/859186 1062 older packages have been omitted from this listing, see http://www.debian.org/devel/wnpp/orphaned for a complete list. The following packages have been given up for adoption: molly-guard (#859596), offered yesterday Description: protects machines from accidental shutdowns/reboots Installations reported by Popcon: 7496 Bug Report URL: http://bugs.debian.org/859596 158 older packages have been omitted from this listing, see http://www.debian.org/devel/wnpp/rfa_bypackage for a complete list. For the following packages help is requested: autopkgtest (#846328), requested 127 days ago Description: automatic as-installed testing for Debian packages Reverse Depends: debci-worker openstack-pkg-tools Installations reported by Popcon: 766 Bug Report URL: http://bugs.debian.org/846328 balsa (#642906), requested 2020 days ago Description: An e-mail client for GNOME Reverse Depends: balsa-dbg Installations reported by Popcon: 695 Bug Report URL: http://bugs.debian.org/642906 busybox (#854181), requested 61 days ago Description: Tiny utilities for small and embedded systems Reverse Depends: bootcd busybox-syslogd dropbear-initramfs live-boot-initramfs-tools open-infrastructure-system-boot udhcpc udhcpd wicd-daemon zfs-initramfs Installations reported by Popcon: 194499 Bug Report URL: http://bugs.debian.org/854181 cups (#532097), requested 2861 days ago Description: Common UNIX Printing System Reverse Depends: bluez-cups boomaga chromium cinnamon-settings-daemon cloudprint cups cups-backend-bjnp cups-browsed cups-bsd cups-client (66 more omitted) Installations reported by Popcon: 177982 Bug Report URL: http://bugs.debian.org/532097 cyrus-sasl2 (#799864), requested 561 days ago Description: authentication abstraction library Reverse Depends: 389-ds-base 389-ds-base-libs 389-dsgw adcli autofs-ldap cairo-dock-mail-plug-in claws-mail claws-mail-acpi-notifier claws-mail-address-keeper claws-mail-archiver-plugin (127 more omitted) Installations reported by Popcon: 195739 Bug Report URL: http://bugs.debian.org/799864 dee (#831388), requested 265 days ago Description: model to synchronize mutiple instances over DBus Reverse Depends: dee-tools gir1.2-dee-1.0 libdee-1.0-4-dbg libdee-dev zeitgeist-core Installations reported by Popcon: 64483 Bug Report URL: http://bugs.debian.org/831388 developers-reference (#759995), requested 950 days ago Description: guidelines and information for Debian developers Installations reported by Popcon: 19603 Bug Report URL: http://bugs.debian.org/759995 devscripts (#800413), requested 555 days ago Description: scripts to make the life of a Debian Package maintainer easier Reverse Depends: apt-build apt-listdifferences aptfs arriero bzr-builddeb customdeb debci debian-builder debmake debpear (24 more omitted) Installations reported by Popcon: 12993 Bug Report URL: http://bugs.debian.org/800413 ejabberd (#767874), requested 885 days ago Description: distributed, fault-tolerant Jabber/XMPP
Re: "Ask HN: What do you want to see in Ubuntu 17.10?"
Hi, On 07.04.2017 01:58, Michael Biebl wrote: >> - Suspend >> - Hibernate >> - Airplane-mode Hotkey (especially hard apparently) >> - Volume Hotkeys >> - Brightness Hotkeys >> - Suspend/hibernate hotkeys >> - Hot-plug of external monitor > All of the above works flawlessly on my Thinkpad X220 running Debian Sid > with GNOME. Fujitsu Lifebook E782: - suspend/hibernate: works - rfkill: hard switch and button work (although I'd prefer to use the button as a launcher) - touchpad button: works (but doesn't tell the OS) - volume/brightness hotkeys: generate X11 key events - lock/suspend/hibernate/info hotkeys: generate X11 key events - external monitor hotplug: works, except for pulseaudio routing Simon signature.asc Description: OpenPGP digital signature
Re: "Ask HN: What do you want to see in Ubuntu 17.10?"
On Sat, Apr 1, 2017 at 4:48 AM, Chris Lamb wrote: > There's a very active conversation happening on Hacker News right > now entitled «What do you want to see in Ubuntu 17.10?»: > > https://news.ycombinator.com/item?id=14002821 There is a followup and some analysis of the thread here: http://blog.dustinkirkland.com/2017/04/thank-you-note-to-hackernews.html It is being discussed here: https://news.ycombinator.com/item?id=14049868 -- bye, pabs https://wiki.debian.org/PaulWise
Re: "Ask HN: What do you want to see in Ubuntu 17.10?"
On Thu, 2017-04-06 at 09:22 +1000, Russell Stuart wrote: > Anyway, this discussion prompted me to get off my bum and look at why > unattended-upgrades wasn't working. Turns out the default install > has "label=Debian-Security", and all these laptops are running > testing. I guess the assumption that people running testing have the > wherewithal to configure their machines properly isn't unreasonable. And ... that wasn't the full story. The full story is when you install unattended-upgrades it defaults to "off", or more precisely this debconf setting default to "false": unattended-upgrades/enable_auto_updates This sort of thing drives me insane. Unattended-upgrades doesn't do anything if you don't set this to true, and why would you install it if you didn't want it to run? I guess it must be because some packages depend on it, and maybe they run it themselves rather than relying on anacron. If that's the reason the solution is to split into two packages, maybe "unattended-upgrades" which does do what it says on the box and "unattended-upgrades-common" witch other packages can depend on safely. signature.asc Description: This is a digitally signed message part