// Security fixes may install automatically. Platform/media packages remain
// pinned until a rebuilt image passes the RK1 hardware acceptance suite.
#clear Unattended-Upgrade::Allowed-Origins;
#clear Unattended-Upgrade::Origins-Pattern;

Unattended-Upgrade::Origins-Pattern {
        "origin=Debian,codename=${distro_codename}-security,label=Debian-Security";
};

Unattended-Upgrade::Package-Blacklist {
		"^linux-image-.*$";
		"^linux-dtb-.*$";
		"^linux-u-boot-.*$";
		"^armbian-bsp-.*$";
		"^mesa-.*$";
		"^kodi.*$";
		"^rknn.*$";
		"^rockchip.*$";
};

Unattended-Upgrade::Automatic-Reboot "false";
Unattended-Upgrade::Remove-Unused-Kernel-Packages "false";
