[Touch-packages] [Bug 2033646] Re: unattended-upgrade ignores apt-pinning to not-allowed origins
Confirmed by
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1999308
** Changed in: unattended-upgrades (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/2033646
Title:
unattended-upgrade ignores apt-pinning to not-allowed origins
Status in unattended-upgrades package in Ubuntu:
Confirmed
Bug description:
unattended-upgrade ignores apt-pinning to not-allowed origins
=
BUG:
unattended-upgrade notices an upgrade available in NOT-ALLOWED ORIGINS,
but then completely ignores those repositories
even if they contain apt-pinned versions
that are more favorable than versions from allowed origins.
The situation repeats every time there is an upgrade available in an
external PPA.
SOLUTION:
unattended-upgrade should not ignore NOT ALLOWED ORIGINS,
but check them for providing more favorable version
and in such case restrain from doing ANY upgrades for such packages.
Instructions for ubuntu lunar 23.04:
0. Upgrade all packages, uninstall Firefox:
$ sudo apt update
$ sudo apt upgrade
$ sudo snap remove firefox
$ sudo apt remove firefox
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 1:1snap1-0ubuntu3
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
1. Add mozilla-team Firefox PPA and apt-pin it with priority 1001:
$ echo 'deb
https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar main' |
sudo tee /etc/apt/sources.list.d/firefox.list
$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys
9BDB3D89CE49EC21
$ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin-
Priority: 1001' | sudo tee /etc/apt/preferences.d/firefox
$ sudo apt update
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
2. Install Firefox (from mozilla-team Firefox PPA, as pinned):
$ sudo apt install firefox
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.23.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
100 /var/lib/dpkg/status
3. SIMULATE AVAILABLE UPGRADE by downgrading Firefox from Mozilla-
Team's version for Ubuntu 23.04 to 22.04:
Download .deb. file from Mozilla-Team's PPA:
$ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 |
tr -d "'" | sed -E 's/0ubuntu0\.[0-9]+\.[0-9]+\./0ubuntu0.22.04./')
Install it:
$ sudo dpkg -i firefox_*.22.04.*.deb
dpkg: warning: downgrading firefox from 117.0+build2-0ubuntu0.23.04.1~mt1
to 117.0+build2-0ubuntu0.22.04.1~mt1
(Reading database ... 295244 files and directories currently installed.)
Preparing to unpack firefox_117.0+build2-0ubuntu0.22.04.1~mt1_arm64.deb
...
Unpacking firefox (117.0+build2-0ubuntu0.22.04.1~mt1) over
(117.0+build2-0ubuntu0.23.04.1~mt1) ...
Setting up firefox (117.0+build2-0ubuntu0.22.04.1~mt1) ...
Please restart all running instances of firefox, or you will experience
problems.
Processing triggers for gnome-menus (3.36.0-1.1ubuntu1) ...
Processing triggers for desktop-file-utils (0.26-1ubuntu5) ...
Processing triggers for mailcap (3.70+nmu1ubuntu1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for man-db (2.11.2-1) ...
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.22.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.22.04.1~mt1 100
100 /var/lib/dpkg/status
4. Bug in unattended-upgrade:
Firefox is now at priority 100 ("now").
Firefox snap package is at priority 500.
Mozilla-Team PPA has priority 1001, BUT IS
[Touch-packages] [Bug 2033646] Re: unattended-upgrade ignores apt-pinning to not-allowed origins
** Description changed:
unattended-upgrade ignores apt-pinning to not-allowed origins
=
BUG:
unattended-upgrade notices an upgrade available in NOT-ALLOWED ORIGINS,
but then completely ignores those repositories
even if they contain apt-pinned versions
that are more favorable than versions from allowed origins.
The situation repeats every time there is an upgrade available in an
external PPA.
SOLUTION:
unattended-upgrade should not ignore NOT ALLOWED ORIGINS,
but check them for providing more favorable version
and in such case restrain from doing ANY upgrades for such packages.
Instructions for ubuntu lunar 23.04:
0. Upgrade all packages, uninstall Firefox:
$ sudo apt update
$ sudo apt upgrade
$ sudo snap remove firefox
$ sudo apt remove firefox
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 1:1snap1-0ubuntu3
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
1. Add mozilla-team Firefox PPA and apt-pin it with priority 1001:
$ echo 'deb https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar main' | sudo tee /etc/apt/sources.list.d/firefox.list
$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys
9BDB3D89CE49EC21
$ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin-
Priority: 1001' | sudo tee /etc/apt/preferences.d/firefox
$ sudo apt update
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
2. Install Firefox (from mozilla-team Firefox PPA, as pinned):
$ sudo apt install firefox
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.23.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
100 /var/lib/dpkg/status
3. SIMULATE AVAILABLE UPGRADE by downgrading Firefox from Mozilla-Team's
version for Ubuntu 23.04 to 22.04:
Download .deb. file from Mozilla-Team's PPA:
$ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 | tr
- -d "'" | sed 's/0ubuntu0\.[0-9][0-9]\.[0-9][0-9]\./0ubuntu0.22.04./')
+ -d "'" | sed 's/0ubuntu0\.[0-9]+\.[0-9]+\./0ubuntu0.22.04./')
Install it:
$ sudo dpkg -i firefox_*.22.04.*.deb
dpkg: warning: downgrading firefox from 117.0+build2-0ubuntu0.23.04.1~mt1
to 117.0+build2-0ubuntu0.22.04.1~mt1
(Reading database ... 295244 files and directories currently installed.)
Preparing to unpack firefox_117.0+build2-0ubuntu0.22.04.1~mt1_arm64.deb
...
Unpacking firefox (117.0+build2-0ubuntu0.22.04.1~mt1) over
(117.0+build2-0ubuntu0.23.04.1~mt1) ...
Setting up firefox (117.0+build2-0ubuntu0.22.04.1~mt1) ...
Please restart all running instances of firefox, or you will experience
problems.
Processing triggers for gnome-menus (3.36.0-1.1ubuntu1) ...
Processing triggers for desktop-file-utils (0.26-1ubuntu5) ...
Processing triggers for mailcap (3.70+nmu1ubuntu1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for man-db (2.11.2-1) ...
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.22.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.22.04.1~mt1 100
100 /var/lib/dpkg/status
4. Bug in unattended-upgrade:
Firefox is now at priority 100 ("now").
Firefox snap package is at priority 500.
Mozilla-Team PPA has priority 1001, BUT IS NOT IN UNATTENDED-UPGRADE'S
"ALLOWED ORIGINS".
BUG: unattended-upgrade upgrades Firefox package to 1:1snap1-0ubuntu3:
$ sudo unattended-upgrade -v
Starting unattended upgrades script
Allowed origins are: o=Ubuntu,a=lunar, o=Ubuntu,a=lunar-security,
o=UbuntuESMApps,a=lunar-apps-security,
[Touch-packages] [Bug 2033646] Re: unattended-upgrade ignores apt-pinning to not-allowed origins
** Attachment added: "instructions-for-bug-2033646-v2.txt"
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2033646/+attachment/5696805/+files/instructions-for-bug-2033646-v2.txt
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/2033646
Title:
unattended-upgrade ignores apt-pinning to not-allowed origins
Status in unattended-upgrades package in Ubuntu:
New
Bug description:
unattended-upgrade ignores apt-pinning to not-allowed origins
=
BUG:
unattended-upgrade notices an upgrade available in NOT-ALLOWED ORIGINS,
but then completely ignores those repositories
even if they contain apt-pinned versions
that are more favorable than versions from allowed origins.
The situation repeats every time there is an upgrade available in an
external PPA.
SOLUTION:
unattended-upgrade should not ignore NOT ALLOWED ORIGINS,
but check them for providing more favorable version
and in such case restrain from doing ANY upgrades for such packages.
Instructions for ubuntu lunar 23.04:
0. Upgrade all packages, uninstall Firefox:
$ sudo apt update
$ sudo apt upgrade
$ sudo snap remove firefox
$ sudo apt remove firefox
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 1:1snap1-0ubuntu3
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
1. Add mozilla-team Firefox PPA and apt-pin it with priority 1001:
$ echo 'deb
https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar main' |
sudo tee /etc/apt/sources.list.d/firefox.list
$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys
9BDB3D89CE49EC21
$ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin-
Priority: 1001' | sudo tee /etc/apt/preferences.d/firefox
$ sudo apt update
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
2. Install Firefox (from mozilla-team Firefox PPA, as pinned):
$ sudo apt install firefox
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.23.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
100 /var/lib/dpkg/status
3. SIMULATE AVAILABLE UPGRADE by downgrading Firefox from Mozilla-
Team's version for Ubuntu 23.04 to 22.04:
Download .deb. file from Mozilla-Team's PPA:
$ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 |
tr -d "'" | sed -E 's/0ubuntu0\.[0-9]+\.[0-9]+\./0ubuntu0.22.04./')
Install it:
$ sudo dpkg -i firefox_*.22.04.*.deb
dpkg: warning: downgrading firefox from 117.0+build2-0ubuntu0.23.04.1~mt1
to 117.0+build2-0ubuntu0.22.04.1~mt1
(Reading database ... 295244 files and directories currently installed.)
Preparing to unpack firefox_117.0+build2-0ubuntu0.22.04.1~mt1_arm64.deb
...
Unpacking firefox (117.0+build2-0ubuntu0.22.04.1~mt1) over
(117.0+build2-0ubuntu0.23.04.1~mt1) ...
Setting up firefox (117.0+build2-0ubuntu0.22.04.1~mt1) ...
Please restart all running instances of firefox, or you will experience
problems.
Processing triggers for gnome-menus (3.36.0-1.1ubuntu1) ...
Processing triggers for desktop-file-utils (0.26-1ubuntu5) ...
Processing triggers for mailcap (3.70+nmu1ubuntu1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for man-db (2.11.2-1) ...
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.22.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.22.04.1~mt1 100
100 /var/lib/dpkg/status
4. Bug in unattended-upgrade:
Firefox is now at priority 100 ("now").
Firefox snap package is at priority 500.
[Touch-packages] [Bug 2033646] Re: unattended-upgrade ignores apt-pinning to not-allowed origins
Bug https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1999308 is
most likely caused by this issue.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/2033646
Title:
unattended-upgrade ignores apt-pinning to not-allowed origins
Status in unattended-upgrades package in Ubuntu:
New
Bug description:
unattended-upgrade ignores apt-pinning to not-allowed origins
=
BUG:
unattended-upgrade notices an upgrade available in NOT-ALLOWED ORIGINS,
but then completely ignores those repositories
even if they contain apt-pinned versions
that are more favorable than versions from allowed origins.
The situation repeats every time there is an upgrade available in an
external PPA.
SOLUTION:
unattended-upgrade should not ignore NOT ALLOWED ORIGINS,
but check them for providing more favorable version
and in such case restrain from doing ANY upgrades for such packages.
Instructions for ubuntu lunar 23.04:
0. Upgrade all packages, uninstall Firefox:
$ sudo apt update
$ sudo apt upgrade
$ sudo snap remove firefox
$ sudo apt remove firefox
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 1:1snap1-0ubuntu3
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
1. Add mozilla-team Firefox PPA and apt-pin it with priority 1001:
$ echo 'deb
https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar main' |
sudo tee /etc/apt/sources.list.d/firefox.list
$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys
9BDB3D89CE49EC21
$ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin-
Priority: 1001' | sudo tee /etc/apt/preferences.d/firefox
$ sudo apt update
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
2. Install Firefox (from mozilla-team Firefox PPA, as pinned):
$ sudo apt install firefox
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.23.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
100 /var/lib/dpkg/status
3. SIMULATE AVAILABLE UPGRADE by downgrading Firefox from Mozilla-
Team's version for Ubuntu 23.04 to 22.04:
Download .deb. file from Mozilla-Team's PPA:
$ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 |
tr -d "'" | sed
's/0ubuntu0\.[0-9][0-9]\.[0-9][0-9]\./0ubuntu0.22.04./')
Install it:
$ sudo dpkg -i firefox_*.22.04.*.deb
dpkg: warning: downgrading firefox from 117.0+build2-0ubuntu0.23.04.1~mt1
to 117.0+build2-0ubuntu0.22.04.1~mt1
(Reading database ... 295244 files and directories currently installed.)
Preparing to unpack firefox_117.0+build2-0ubuntu0.22.04.1~mt1_arm64.deb
...
Unpacking firefox (117.0+build2-0ubuntu0.22.04.1~mt1) over
(117.0+build2-0ubuntu0.23.04.1~mt1) ...
Setting up firefox (117.0+build2-0ubuntu0.22.04.1~mt1) ...
Please restart all running instances of firefox, or you will experience
problems.
Processing triggers for gnome-menus (3.36.0-1.1ubuntu1) ...
Processing triggers for desktop-file-utils (0.26-1ubuntu5) ...
Processing triggers for mailcap (3.70+nmu1ubuntu1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for man-db (2.11.2-1) ...
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.22.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.22.04.1~mt1 100
100 /var/lib/dpkg/status
4. Bug in unattended-upgrade:
Firefox is now at priority 100 ("now").
Firefox snap package is at priority 500.
Mozilla-Team PPA has priority 1001, BUT IS NOT IN UNATTENDED-UPGRADE'S
"ALLOWED ORIGINS".
[Touch-packages] [Bug 2033646] Re: unattended-upgrade ignores apt-pinning to not-allowed origins
** Description changed: unattended-upgrade ignores apt-pinning to not-allowed origins = BUG: - unattended-upgrade completely ignores NOT ALLOWED ORIGINS + unattended-upgrade notices an upgrade available in NOT-ALLOWED ORIGINS, + but then completely ignores those repositories even if they contain apt-pinned versions that are more favorable than versions from allowed origins. + + The situation repeats every time there is an upgrade available in an + external PPA. SOLUTION: unattended-upgrade should not ignore NOT ALLOWED ORIGINS, but check them for providing more favorable version and in such case restrain from doing ANY upgrades for such packages. + Instructions for ubuntu lunar 23.04: 0. Upgrade all packages, uninstall Firefox: - $ sudo apt update - - $ sudo apt upgrade - - $ sudo snap remove firefox - - $ sudo apt remove firefox - - $ apt-cache policy firefox - firefox: - Installed: (none) - Candidate: 1:1snap1-0ubuntu3 - Version table: - 1:1snap1-0ubuntu3 500 - 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages + $ sudo apt update + + $ sudo apt upgrade + + $ sudo snap remove firefox + + $ sudo apt remove firefox + + $ apt-cache policy firefox + firefox: + Installed: (none) + Candidate: 1:1snap1-0ubuntu3 + Version table: + 1:1snap1-0ubuntu3 500 + 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages 1. Add mozilla-team Firefox PPA and apt-pin it with priority 1001: - $ echo 'deb https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu + $ echo 'deb https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar main' | sudo tee /etc/apt/sources.list.d/firefox.list - $ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys + $ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 9BDB3D89CE49EC21 - $ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin- + $ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin- Priority: 1001' | sudo tee /etc/apt/preferences.d/firefox - $ sudo apt update - - $ apt-cache policy firefox - firefox: - Installed: (none) - Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1 - Version table: - 1:1snap1-0ubuntu3 500 - 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages - 117.0+build2-0ubuntu0.23.04.1~mt1 1001 - 1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar/main arm64 Packages + $ sudo apt update + + $ apt-cache policy firefox + firefox: + Installed: (none) + Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1 + Version table: + 1:1snap1-0ubuntu3 500 + 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages + 117.0+build2-0ubuntu0.23.04.1~mt1 1001 +1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar/main arm64 Packages 2. Install Firefox (from mozilla-team Firefox PPA, as pinned): - $ sudo apt install firefox - - $ apt-cache policy firefox - firefox: - Installed: 117.0+build2-0ubuntu0.23.04.1~mt1 - Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1 - Version table: - 1:1snap1-0ubuntu3 500 - 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages - *** 117.0+build2-0ubuntu0.23.04.1~mt1 1001 - 1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar/main arm64 Packages - 100 /var/lib/dpkg/status + $ sudo apt install firefox + + $ apt-cache policy firefox + firefox: + Installed: 117.0+build2-0ubuntu0.23.04.1~mt1 + Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1 + Version table: + 1:1snap1-0ubuntu3 500 + 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages + *** 117.0+build2-0ubuntu0.23.04.1~mt1 1001 +1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar/main arm64 Packages + 100 /var/lib/dpkg/status 3. SIMULATE AVAILABLE UPGRADE by downgrading Firefox from Mozilla-Team's version for Ubuntu 23.04 to 22.04: Download .deb. file from Mozilla-Team's PPA: - $ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 | tr + $ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 | tr -d "'" | sed 's/0ubuntu0\.[0-9][0-9]\.[0-9][0-9]\./0ubuntu0.22.04./') Install it: - $ sudo dpkg -i firefox_*.22.04.*.deb - dpkg: warning: downgrading firefox from 117.0+build2-0ubuntu0.23.04.1~mt1 to 117.0+build2-0ubuntu0.22.04.1~mt1 - (Reading database ... 295244 files and directories currently installed.) - Preparing to unpack firefox_117.0+build2-0ubuntu0.22.04.1~mt1_arm64.deb ... -
[Touch-packages] [Bug 2033646] Re: unattended-upgrade ignores apt-pinning to not-allowed origins
Bug https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1999308 is most likely caused by this issue. ** Description changed: unattended-upgrade ignores apt-pinning to not-allowed origins = BUG: unattended-upgrade completely ignores NOT ALLOWED ORIGINS even if they contain apt-pinned versions that are more favorable than versions from allowed origins. SOLUTION: unattended-upgrade should not ignore NOT ALLOWED ORIGINS, but check them for providing more favorable version and in such case restrain from doing ANY upgrades for such packages. - Instructions for ubuntu lunar 23.04: 0. Upgrade all packages, uninstall Firefox: - $ sudo apt update - - $ sudo apt upgrade - - $ sudo snap remove firefox - - $ sudo apt remove firefox - - $ apt-cache policy firefox - firefox: - Installed: (none) - Candidate: 1:1snap1-0ubuntu3 - Version table: - 1:1snap1-0ubuntu3 500 - 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages + $ sudo apt update + + $ sudo apt upgrade + + $ sudo snap remove firefox + + $ sudo apt remove firefox + + $ apt-cache policy firefox + firefox: + Installed: (none) + Candidate: 1:1snap1-0ubuntu3 + Version table: + 1:1snap1-0ubuntu3 500 + 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages 1. Add mozilla-team Firefox PPA and apt-pin it with priority 1001: - $ echo 'deb https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu + $ echo 'deb https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar main' | sudo tee /etc/apt/sources.list.d/firefox.list - $ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys + $ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 9BDB3D89CE49EC21 - $ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin- + $ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin- Priority: 1001' | sudo tee /etc/apt/preferences.d/firefox - $ sudo apt update - - $ apt-cache policy firefox - firefox: - Installed: (none) - Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1 - Version table: - 1:1snap1-0ubuntu3 500 - 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages - 117.0+build2-0ubuntu0.23.04.1~mt1 1001 -1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar/main arm64 Packages + $ sudo apt update + + $ apt-cache policy firefox + firefox: + Installed: (none) + Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1 + Version table: + 1:1snap1-0ubuntu3 500 + 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages + 117.0+build2-0ubuntu0.23.04.1~mt1 1001 + 1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar/main arm64 Packages 2. Install Firefox (from mozilla-team Firefox PPA, as pinned): - $ sudo apt install firefox - - $ apt-cache policy firefox - firefox: - Installed: 117.0+build2-0ubuntu0.23.04.1~mt1 - Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1 - Version table: - 1:1snap1-0ubuntu3 500 - 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages - *** 117.0+build2-0ubuntu0.23.04.1~mt1 1001 -1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar/main arm64 Packages - 100 /var/lib/dpkg/status + $ sudo apt install firefox + + $ apt-cache policy firefox + firefox: + Installed: 117.0+build2-0ubuntu0.23.04.1~mt1 + Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1 + Version table: + 1:1snap1-0ubuntu3 500 + 500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages + *** 117.0+build2-0ubuntu0.23.04.1~mt1 1001 + 1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar/main arm64 Packages + 100 /var/lib/dpkg/status 3. SIMULATE AVAILABLE UPGRADE by downgrading Firefox from Mozilla-Team's version for Ubuntu 23.04 to 22.04: Download .deb. file from Mozilla-Team's PPA: - $ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 | tr + $ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 | tr -d "'" | sed 's/0ubuntu0\.[0-9][0-9]\.[0-9][0-9]\./0ubuntu0.22.04./') Install it: - $ sudo dpkg -i firefox_*.22.04.*.deb - dpkg: warning: downgrading firefox from 117.0+build2-0ubuntu0.23.04.1~mt1 to 117.0+build2-0ubuntu0.22.04.1~mt1 - (Reading database ... 295244 files and directories currently installed.) - Preparing to unpack firefox_117.0+build2-0ubuntu0.22.04.1~mt1_arm64.deb ... - Unpacking firefox (117.0+build2-0ubuntu0.22.04.1~mt1) over (117.0+build2-0ubuntu0.23.04.1~mt1) ... -
[Touch-packages] [Bug 2033646] Re: unattended-upgrade ignores apt-pinning to not-allowed origins
** Attachment added: "instructions-for-bug-2033646.txt"
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/2033646/+attachment/5696782/+files/instructions-for-bug-2033646.txt
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to unattended-upgrades in
Ubuntu.
https://bugs.launchpad.net/bugs/2033646
Title:
unattended-upgrade ignores apt-pinning to not-allowed origins
Status in unattended-upgrades package in Ubuntu:
New
Bug description:
unattended-upgrade ignores apt-pinning to not-allowed origins
=
BUG:
unattended-upgrade completely ignores NOT ALLOWED ORIGINS
even if they contain apt-pinned versions
that are more favorable than versions from allowed origins.
SOLUTION:
unattended-upgrade should not ignore NOT ALLOWED ORIGINS,
but check them for providing more favorable version
and in such case restrain from doing ANY upgrades for such packages.
Instructions for ubuntu lunar 23.04:
0. Upgrade all packages, uninstall Firefox:
$ sudo apt update
$ sudo apt upgrade
$ sudo snap remove firefox
$ sudo apt remove firefox
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 1:1snap1-0ubuntu3
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
1. Add mozilla-team Firefox PPA and apt-pin it with priority 1001:
$ echo 'deb
https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu lunar main' |
sudo tee /etc/apt/sources.list.d/firefox.list
$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys
9BDB3D89CE49EC21
$ echo -e 'Package: *\nPin: release o=LP-PPA-mozillateam\nPin-
Priority: 1001' | sudo tee /etc/apt/preferences.d/firefox
$ sudo apt update
$ apt-cache policy firefox
firefox:
Installed: (none)
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
2. Install Firefox (from mozilla-team Firefox PPA, as pinned):
$ sudo apt install firefox
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.23.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
100 /var/lib/dpkg/status
3. SIMULATE AVAILABLE UPGRADE by downgrading Firefox from Mozilla-
Team's version for Ubuntu 23.04 to 22.04:
Download .deb. file from Mozilla-Team's PPA:
$ wget $(apt-get download --print-uris firefox | cut -d' ' -f1 |
tr -d "'" | sed
's/0ubuntu0\.[0-9][0-9]\.[0-9][0-9]\./0ubuntu0.22.04./')
Install it:
$ sudo dpkg -i firefox_*.22.04.*.deb
dpkg: warning: downgrading firefox from 117.0+build2-0ubuntu0.23.04.1~mt1
to 117.0+build2-0ubuntu0.22.04.1~mt1
(Reading database ... 295244 files and directories currently installed.)
Preparing to unpack firefox_117.0+build2-0ubuntu0.22.04.1~mt1_arm64.deb
...
Unpacking firefox (117.0+build2-0ubuntu0.22.04.1~mt1) over
(117.0+build2-0ubuntu0.23.04.1~mt1) ...
Setting up firefox (117.0+build2-0ubuntu0.22.04.1~mt1) ...
Please restart all running instances of firefox, or you will experience
problems.
Processing triggers for gnome-menus (3.36.0-1.1ubuntu1) ...
Processing triggers for desktop-file-utils (0.26-1ubuntu5) ...
Processing triggers for mailcap (3.70+nmu1ubuntu1) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for man-db (2.11.2-1) ...
$ apt-cache policy firefox
firefox:
Installed: 117.0+build2-0ubuntu0.22.04.1~mt1
Candidate: 117.0+build2-0ubuntu0.23.04.1~mt1
Version table:
1:1snap1-0ubuntu3 500
500 http://pl.archive.ubuntu.com/ubuntu lunar/main arm64 Packages
117.0+build2-0ubuntu0.23.04.1~mt1 1001
1001 https://ppa.launchpadcontent.net/mozillateam/ppa/ubuntu
lunar/main arm64 Packages
*** 117.0+build2-0ubuntu0.22.04.1~mt1 100
100 /var/lib/dpkg/status
4. Bug in unattended-upgrade:
Firefox is now at priority 100 ("now").
Firefox snap package is at priority 500.
Mozilla-Team PPA has priority 1001, BUT IS NOT IN UNATTENDED-UPGRADE'S
"ALLOWED ORIGINS".
BUG: unattended-upgrade upgrades Firefox package to
