Version 9 (modified by Dbryrtfbcbhgf, 3 years ago) (diff)

More clarifications


  1. Install the required packages
    apt-get install unattended-upgrades apt-listchanges
  1. Put the code below into the configuration file /etc/apt/apt.conf.d/50unattended-upgrades, everything that was originally inside the generated file can be removed before you add the new code below. Optional, replace "root" with your email address to get reports on unattended upgrades logs.
    Unattended-Upgrade::Origins-Pattern {
    Unattended-Upgrade::Package-Blacklist {
    Unattended-Upgrade::Mail "root";
  1. If you want to automatically reboot add the following at the the end of the file /etc/apt/apt.conf.d/50unattended-upgrades:
    Unattended-Upgrade::Automatic-Reboot "true";
  1. Create the file /etc/apt/apt.conf.d/20auto-upgrades by running the following command.
    sudo dpkg-reconfigure -plow unattended-upgrades
  2. Add the following two lines to the new file at /etc/apt/apt.conf.d/20auto-upgrades:
    APT::Periodic::Update-Package-Lists "1";
    APT::Periodic::AutocleanInterval "5";
    APT::Periodic::Unattended-Upgrade "1";
    APT::Periodic::Verbose "1";

Test your unattended-upgrades setup with the following command.

sudo unattended-upgrade -d

The results from the above command should at a minimum contain the following allowed origins.

Allowed origins are: ['origin=Debian,codename=xenial,label=Debian-Security', 'origin=TorProject']