automatic security upgrade

Its purpose is to keep the computer current with the latest security (and other) updates automatically. If you plan to use it, you should have some means to monitor your systems, such as installing the apt-listchanges package and configuring it to send you emails about updates. And there is always /var/log/dpkg.log, or the files in /var/log/unattended-upgrades

To install these packages, run the following command as root:

apt-get install unattended-upgrades apt-listchanges

To activate unattended-upgrades, you need to ensure that the apt configuration stub /etc/apt/apt.conf.d/50auto-upgrades contains at least the following lines: 

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";

This file can be created manually or by running the following command as root:

dpkg-reconfigure -plow unattended-upgrades

The default configuration file for the unattended-upgrades package is at /etc/apt/apt.conf.d/50unattended-upgrades. The defaults will work fine, but you should read it and make changes as needed.

  • # editor /etc/apt/apt.conf.d/50unattended-upgrades

This section controls which packages are upgraded:

  • Unattended-Upgrade::Origins-Pattern {
        // ...
    };

You should at least uncomment the following line:

  • Unattended-Upgrade::Mail "root";
source: https://wiki.debian.org/UnattendedUpgrades

Leave a Reply

Your email address will not be published. Required fields are marked *

*