[Bug 1654070] Re: sanity check can fail for packages missing dependencies

[Balint Reczey]

Verified with 1.1ubuntu1.18.04.7~16.04.2:

Added a not existing dep to git:
# vi /var/lib/apt/lists/security.ubuntu.com_ubuntu_dists_xenial-security_main_binary-amd64_Packages

# apt-cache show git
...
Package: git
Architecture: amd64
Version: 1:2.7.4-0ubuntu1.6
Multi-Arch: foreign
Priority: optional
Section: vcs
Origin: Ubuntu
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Original-Maintainer: Gerrit Pape <pape at smarden.org>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 23556
Provides: git-completion, git-core
Depends: libc6 (>= 2.16), libcurl3-gnutls (>= 7.16.2), libexpat1 (>= 2.0.1), libpcre3, zlib1g (>= 1:1.2.0), perl-modules, liberror-perl, git-man (>> 1:2.7.4), git-man (<< 1:2.7.4-.), zz-not-existing-dep
...
# installed old git
# apt install git=1:2.7.4-0ubuntu1
...
# unattended-upgrade --dry-run --verbose --debug
Initial blacklisted packages: 
Initial whitelisted packages: 
Starting unattended upgrades script
Allowed origins are: o=Ubuntu,a=xenial, o=Ubuntu,a=xenial-security, o=UbuntuESM,a=xenial
...
Checking: git ([<Origin component:'main' archive:'xenial-updates' origin:'Ubuntu' label:'Ubuntu' site:'archive.ubuntu.com' isTrusted:True>])
pkg git not in allowed origin
sanity check failed
pkgs that look like they should be upgraded: 
Fetched 0 B in 0s (0 B/s)                                                                                         
fetch.run() result: 0
blacklist: []
whitelist: []
Option --dry-run given, *not* performing real actions
Packages that will be upgraded: 
InstCount=0 DelCount=0 BrokenCount=0
#

Now git is not listed among packages to be installed.
The message of not being in an allowed origin is correct, git from -updates is installable. There could be a better debug message and when I add the missing dep to the version in -updates, only the "sanity check failed" is printed.

Users can turn to APT to explain:
root at x-uu-verify:~# apt install git
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Some packages could not be installed. This may mean that you have
requested an impossible situation or if you are using the unstable
distribution that some required packages have not yet been created
or been moved out of Incoming.
The following information may help to resolve the situation:

The following packages have unmet dependencies:
 git : Depends: zz-missing-dep-updates but it is not installable
E: Unable to correct problems, you have held broken packages.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to unattended-upgrades in Ubuntu.
https://bugs.launchpad.net/bugs/1654070

Title:
  sanity check can fail for packages missing dependencies

Status in unattended-upgrades package in Ubuntu:
  Fix Released
Status in unattended-upgrades source package in Xenial:
  Fix Committed

Bug description:
  I've been getting mail for days about pulseaudio-module-gconf and
  -module-zeroconf being upgraded, come to find out its not really
  happening.

  bdmurray at flash:~$ sudo /usr/bin/unattended-upgrade --debug --verbose
  Initial blacklisted packages: nvidia-304
  Initial whitelisted packages: 
  Starting unattended upgrades script
  Allowed origins are: ['o=Ubuntu,a=xenial', 'o=Ubuntu,a=xenial-security', 'o=Ubuntu,a=xenial-updates']
  Checking: pulseaudio-module-gconf ([<Origin component:'universe' archive:'xenial-updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>])
  Checking: pulseaudio-module-zeroconf ([<Origin component:'universe' archive:'xenial-updates' origin:'Ubuntu' label:'Ubuntu' site:'192.168.10.7' isTrusted:True>])
  pkgs that look like they should be upgraded: pulseaudio-module-gconf
  pulseaudio-module-zeroconf
  Fetched 0 B in 0s (0 B/s)                                                                                                                                             
  fetch.run() result: 0
  blacklist: ['nvidia-304']
  whitelist: []
  Checking the black and whitelist: pulseaudio-module-gconf
  Checking the black and whitelist: pulseaudio-module-zeroconf
  Packages that will be upgraded: pulseaudio-module-gconf pulseaudio-module-zeroconf
  Writing dpkg log to '/var/log/unattended-upgrades/unattended-upgrades-dpkg.log'
  All upgrades installed
  InstCount=0 DelCount=0 BrokenCount=0
  Extracting content from '/var/log/unattended-upgrades/unattended-upgrades-dpkg.log' since '2017-01-04 12:27:12'
  Sending mail to 'bdmurray at bizarro.watchtower.local'
  mail returned: 0
  bdmurray at flash:~$ apt-cache policy pulseaudio-module-gconf
  pulseaudio-module-gconf:
    Installed: 1:8.0-0ubuntu3
    Candidate: 1:8.0-0ubuntu3.1
    Version table:
       1:8.0-0ubuntu3.1 500
          500 http://192.168.10.7/ubuntu xenial-updates/universe amd64 Packages
   *** 1:8.0-0ubuntu3 500
          500 http://192.168.10.7/ubuntu xenial/universe amd64 Packages
          100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unattended-upgrades/+bug/1654070/+subscriptions