I use the configuration fragment below:
Unattended-Upgrade {
Automatic-Reboot "false";
InstallOnShutdown "false";
Keep-Debs-After-Install "false";
MailReport "on-change";
MinimalSteps "false";
OnlyOnACPower "true";
Origins-Pattern {
"origin=Debian,codename=${distro_codename}-security",label="Debian-Security";
"origin=Debian,codename=${distro_codename}-updates",label="Debian";
"origin=Debian,codename=${distro_codename}",label="Debian";
"origin=Debian,codename=${distro_codename}-debug",label="Debian debug";
};
Remove-New-Unused-Dependencies "true";
Remove-Unused-Kernel-Packages "true";
Remove-Unused-Dependencies "true";
};
Any time linux-image-amd64 pulls a new kernel, the oldest one found on the system gets removed (as per Remove-Unused-Kernel-Packages) but not purged. It would be desirable for this configuration key to purge the package, since there's no point in leaving old kernel configurations installed.
Thanks!
Martin-Éric