Public bug reported: On most systems I administer, both debsums and unattended-upgrades are installed and run from cron daily.
unattended-upgrades has been configured to wait for a random amount of time before doing its thing, and this every now and then causes it to perform an upgrade at the time debsums is running. During such an upgrade (especially of large packages like kernel headers), debsums can find a mismatch between the files on disk and the checksums, but these are false positives. I guess this can be fixed by adding an option to debsums to let it (read-)lock the dpkg admin dir before doing its job, so it can be prevented from running concurrently with software altering package state. The bug has been observed on 16.04 systems with all upgrades applied, but looking at the debsums changelogs I see no reason to believe this has been fixed. ** Affects: debsums (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1789570 Title: debsums runs concurrently with unattended-upgrades which leads to false positives To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/debsums/+bug/1789570/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs