man unattended-upgrades

CONFIGURATION
       The  configuration  is  done  via  the  apt  configuration  mechanism.  The  default  configuration  file can be found at
       /etc/apt/apt.conf.d/50unattended-upgrades

// Unattended-Upgrade::Origins-Pattern controls which packages are
// upgraded.
//
// Lines below have the format format is "keyword=value,...".  A
// package will be upgraded only if the values in its metadata match
// all the supplied keywords in a line.  (In other words, omitted
// keywords are wild cards.) The keywords originate from the Release
// file, but several aliases are accepted.  The accepted keywords are:
//   a,archive,suite (eg, "stable")
//   c,component     (eg, "main", "contrib", "non-free")
//   l,label         (eg, "Devuan", "Devuan-Security")
//   o,origin        (eg, "Devuan")
//   n,codename      (eg, "ascii", "ascii-updates")
//     site          (eg, "deb.devuan.org")
// The available values on the system are printed by the command
// "apt-cache policy", and can be debugged by running
// "unattended-upgrades -d" and looking at the log file.
//
// Within lines unattended-upgrades allows 2 macros whose values are
// derived from /etc/debian_version:
//   ${distro_id}            Installed origin.
//   ${distro_codename}      Installed codename (eg, "ascii")
Unattended-Upgrade::Origins-Pattern {
        // Codename based matching:
        // This will follow the migration of a release through different
        // archives (e.g. from testing to stable and later oldstable).
//      "o=Devuan,n=ascii";
//      "o=Devuan,n=ascii-updates";
//      "o=Devuan,n=ascii-proposed-updates";

        // Archive or Suite based matching:
        // Note that this will silently match a different release after
        // migration to the specified archive (e.g. testing becomes the
        // new stable).
//      "o=Devuan,a=stable";
//      "o=Devuan,a=stable-updates";
//      "o=Devuan,a=proposed-updates";

        // Activate *-security by default.
        // This will make it easier for Devuan derivatives.
        // "a=*-security";
	//
	"o=Devuan,n=chimaera-security";
};

// List of packages to not update (regexp are supported)
Unattended-Upgrade::Package-Blacklist {
//	"vim";
//	"libc6";
//	"libc6-dev";
//	"libc6-i686";
};

// This option allows you to control if on a unclean dpkg exit
// unattended-upgrades will automatically run 
//   dpkg --force-confold --configure -a
// The default is true, to ensure updates keep getting installed
//Unattended-Upgrade::AutoFixInterruptedDpkg "false";

// Split the upgrade into the smallest possible chunks so that
// they can be interrupted with SIGUSR1. This makes the upgrade
// a bit slower but it has the benefit that shutdown while a upgrade
// is running is possible (with a small delay)
//Unattended-Upgrade::MinimalSteps "true";

// Install all unattended-upgrades when the machine is shutting down
// instead of doing it in the background while the machine is running
// This will (obviously) make shutdown slower
//Unattended-Upgrade::InstallOnShutdown "true";

// Send email to this address for problems or packages upgrades
// If empty or unset then no email is sent, make sure that you
// have a working mail setup on your system. A package that provides
// 'mailx' must be installed. E.g. "user@example.com"
Unattended-Upgrade::Mail "root";

// Set this value to "true" to get emails only on errors. Default
// is to always send a mail if Unattended-Upgrade::Mail is set
//Unattended-Upgrade::MailOnlyOnError "true";

// Do automatic removal of new unused dependencies after the upgrade
// (equivalent to apt-get autoremove)
Unattended-Upgrade::Remove-Unused-Dependencies "true";

// Automatically reboot *WITHOUT CONFIRMATION* if
//  the file /var/run/reboot-required is found after the upgrade 
//Unattended-Upgrade::Automatic-Reboot "false";

// Automatically reboot even if there are users currently logged in.
//Unattended-Upgrade::Automatic-Reboot-WithUsers "true";

// If automatic reboot is enabled and needed, reboot at the specific
// time instead of immediately
//  Default: "now"
//Unattended-Upgrade::Automatic-Reboot-Time "02:00";

// Use apt bandwidth limit feature, this example limits the download
// speed to 70kb/sec
//Acquire::http::Dl-Limit "70";

// Enable logging to syslog. Default is False
Unattended-Upgrade::SyslogEnable "true";

// Specify syslog facility. Default is daemon
// Unattended-Upgrade::SyslogFacility "daemon";

       "o=Devuan,n=chimaera-security"; 

marjorie@grendel:~$ dig realupdown.com

; <<>> DiG 9.16.33-Debian <<>> realupdown.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3657
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;realupdown.com.			IN	A

;; AUTHORITY SECTION:
com.			599	IN	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1672611035 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sun Jan 01 22:16:02 GMT 2023
;; MSG SIZE  rcvd: 116

; marjorie@grendel:~$ dig realupnow.com

<<>> DiG 9.16.33-Debian <<>> realupnow.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56743
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 0
;; QUESTION SECTION:
;realupnow.com.			IN	A

;; AUTHORITY SECTION:
realupnow.com.		3599	IN	SOA	dns1.registrar-servers.com. hostmaster.registrar-servers.com. 1664668104 43200 3600 604800 3601

;; Query time: 71 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Dec 31 23:48:36 GMT 2022
;; MSG SIZE  rcvd: 112

; <<>> DiG 9.16.33-Debian <<>> meeble.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62974
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;meeble.net.			IN	A

;; ANSWER SECTION:
meeble.net.		2399	IN	A	88.97.31.244

;; Query time: 99 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Sat Dec 31 23:49:04 GMT 2022
;; MSG SIZE  rcvd: 55

dmesg |grep iwlwifi
[    5.797902] iwlwifi 0000:21:00.0: firmware: failed to load iwlwifi-cc-a0-66.ucode (-2)
[    5.797969] iwlwifi 0000:21:00.0: Direct firmware load for iwlwifi-cc-a0-66.ucode failed with error -2
[    5.797979] iwlwifi 0000:21:00.0: firmware: failed to load iwlwifi-cc-a0-65.ucode (-2)
[    5.798003] iwlwifi 0000:21:00.0: Direct firmware load for iwlwifi-cc-a0-65.ucode failed with error -2
[    5.798010] iwlwifi 0000:21:00.0: firmware: failed to load iwlwifi-cc-a0-64.ucode (-2)
[    5.798034] iwlwifi 0000:21:00.0: Direct firmware load for iwlwifi-cc-a0-64.ucode failed with error -2
[    5.798041] iwlwifi 0000:21:00.0: firmware: failed to load iwlwifi-cc-a0-63.ucode (-2)
[    5.798064] iwlwifi 0000:21:00.0: Direct firmware load for iwlwifi-cc-a0-63.ucode failed with error -2
[    5.801899] iwlwifi 0000:21:00.0: firmware: direct-loading firmware iwlwifi-cc-a0-62.ucode
[    5.801904] iwlwifi 0000:21:00.0: api flags index 2 larger than supported by driver
[    5.801910] iwlwifi 0000:21:00.0: TLV_FW_FSEQ_VERSION: FSEQ Version: 89.3.35.37
[    5.802068] iwlwifi 0000:21:00.0: loaded firmware version 62.49eeb572.0 cc-a0-62.ucode op_mode iwlmvm
[    5.802081] iwlwifi 0000:21:00.0: firmware: failed to load iwl-debug-yoyo.bin (-2)
[    5.870642] iwlwifi 0000:21:00.0: Detected Intel(R) Wi-Fi 6 AX200 160MHz, REV=0x340
[    6.000186] iwlwifi 0000:21:00.0: Detected RF HR B3, rfid=0x10a100
[    6.065031] iwlwifi 0000:21:00.0: base HW address: dc:21:48:57:1b:5b
[12516.990241] (NULL device *): firmware: direct-loading firmware iwlwifi-cc-a0-62.ucode

Sep 19 17:08:35 grendel kernel: [91634.237980] amdgpu 0000:30:00.0: amdgpu: failed to write reg 1a6f4 wait reg 1a706
Sep 19 17:08:56 grendel kernel: [91655.526407] amdgpu 0000:30:00.0: amdgpu: failed to write reg 28b4 wait reg 28c6