wiki:TorRelayGuide/DebianUbuntuUpdates

Version 8 (modified by Dbryrtfbcbhgf, 22 months ago) (diff)

Test your setup added

Debian

  1. Install the required packages
    apt-get install unattended-upgrades apt-listchanges
    
  1. Put the configuration file /etc/apt/apt.conf.d/50unattended-upgrades in place. Optional, replace "root" with your email address to get reports on unattended upgrades logs
    Unattended-Upgrade::Origins-Pattern {
            "origin=Debian,codename=${distro_codename},label=Debian-Security";
    	"origin=TorProject";
    };
    
    Unattended-Upgrade::Package-Blacklist {
    };
    
    Unattended-Upgrade::Mail "root";
    
  1. If you want to automatically reboot add the following at the the end of the file /etc/apt/apt.conf.d/50unattended-upgrades:
    Unattended-Upgrade::Automatic-Reboot "true";
    
  1. Create the file /etc/apt/apt.conf.d/20auto-upgrades by running the following command.
    sudo dpkg-reconfigure -plow unattended-upgrades
    
  2. Add the following two lines to the new file at /etc/apt/apt.conf.d/20auto-upgrades:
    APT::Periodic::Update-Package-Lists "1";
    APT::Periodic::AutocleanInterval "5";
    APT::Periodic::Unattended-Upgrade "1";
    APT::Periodic::Verbose "1";
    

Test your unattended-upgrades setup with the following command.

sudo unattended-upgrade -d

The results from the above command should at a minimum contain the following allowed origins.

Allowed origins are: ['origin=Debian,codename=xenial,label=Debian-Security', 'origin=TorProject']