`apt` could potentially replace the kernel with a stock one

[giuliomoro]

Issue by giuliomoro
Tuesday Apr 25, 2017 at 01:16 GMT
Originally opened as LBDonovan/image-builder#15

---

apt list --upgradable lists the packages that could be upgrated with apt-get upgrade.
This lists some packages we probably installed manually (e.g.: the kernel). What is the best way to prevent users from mistakenly upgrade some critical packages when doing apt-get upgrade?

apt list --upgradable
Listing... Done
bb-cape-overlays/unknown 4.4.20170418-0rcnee2~stretch+20170421 armhf [upgradable from: 4.4.20170405-0rcnee1~bpo90+20170407]
bb-customizations/unknown 1.20170421-0rcnee1~stretch+20170421 all [upgradable from: 1.20170413-0rcnee4~bpo90+20170413]
bsdmainutils/testing 9.0.12+nmu1 armhf [upgradable from: 9.0.12]
cpp-6/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
g++-6/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
gcc-6/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
gcc-6-base/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libasan3/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libatomic1/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libcc1-0/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libgcc-6-dev/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libgcc1/testing 1:6.3.0-14 armhf [upgradable from: 1:6.3.0-12]
libgomp1/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libicu57/testing 57.1-6 armhf [upgradable from: 57.1-5]
libldap-2.4-2/testing 2.4.44+dfsg-4+b1 armhf [upgradable from: 2.4.44+dfsg-3]
libldap-common/testing 2.4.44+dfsg-4 all [upgradable from: 2.4.44+dfsg-3]
libobjc-6-dev/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libobjc4/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libstdc++-6-dev/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libstdc++6/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
libubsan0/testing 6.3.0-14 armhf [upgradable from: 6.3.0-12]
linux-firmware-image-4.4.61-ti-xenomai-r98/unknown 1stretch armhf [upgradable from: 1cross]
linux-headers-4.4.61-ti-xenomai-r98/unknown 1stretch armhf [upgradable from: 1cross]
linux-image-4.4.61-ti-xenomai-r98/unknown 1stretch armhf [upgradable from: 1cross]

[giuliomoro]

See if this answer helps
https://serverfault.com/a/251091