Differences

This shows you the differences between two versions of the page.

--- linux:unattended-updates [2018/07/23 12:28] – Wulf Rajek
+++ linux:unattended-updates [2023/06/05 14:05] (current) – [Initial installation and configuration] Wulf Rajek
@@ Line 1: / Line 1: @@
 ====== Unattended Updates ======
+In order to install updates automatically, the unattended-upgrades package needs to be installed and configured. It can install only security updates or updates from any branch or repository that's desired. It can reboot automatically or not at all and it can exclude specific packages.
+===== Initial installation and configuration =====
 <code>
@@ Line 9: / Line 13: @@
 #uncomment the desired origin. For only security updates, comment out everything else
 Unattended-Upgrade::Origins-Pattern {
-      "o=Debian,n=stretch";
+      "o=Debian,n=bullseye";
-      "o=Debian,n=stretch-updates";
+      "o=Debian,n=bullseye-updates";
-      "o=Debian,n=stretch-proposed-updates";
+      "o=Debian,n=bullseye-proposed-updates";
-      "o=Debian,n=stretch,l=Debian-Security";
+      "o=Debian,n=bullseye-security";
+      "o=Debian,n=bullseye,l=Debian-Security";
+//To enable ALL updates, use this:
+//      "site=*";
 };
@@ Line 28: / Line 36: @@
 #Don't force updates
 Unattended-Upgrade::AutoFixInterruptedDpkg "false";
 #set mail to whoever should receive it and make sure bsd-mailx or sendmail
@@ Line 36: / Line 43: @@
 #configure reboot if desired.
 Unattended-Upgrade::Automatic-Reboot "false";
 </code>
@@ Line 52: / Line 58: @@
 <code>
 vi /etc/cron.d/unattended-upgrade
-*/4 * * * root sleep $(( $RANDOM \% 14400 ));PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin unattended-upgrade
+*/4 * * * root sleep $(( 1$(date +\%N) \% 14400 ));PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin unattended-upgrade
 </code>
+Test the configuration using:
+<code>sudo unattended-upgrades --dry-run
+tail /var/log/unattended-upgrades/unattended-upgrades.log
+</code>
+===== Additional Repositories =====
 To include additional repositories, the origin and suite (archive) names need to be identified first:
@@ Line 80: / Line 93: @@
 </code>
-Test the configuration using:
-<code>sudo unattended-upgrades --dry-run
-tail /var/log/unattended-upgrades/unattended-upgrades.log
+===== Notify required reboot on login =====
+<code>
+vi /root/.profile
+</code>
+add after the .bashrc call, but before the mesg line:
+<code>
+[ -f /var/run/reboot-required ] && echo -e "\n*** System restart required ***\n"
 </code>
-To allow unattended upgrades for all packages, use:
+===== Running on battery =====
+For unattended-upgrades to skip upgrades when the system is running on battery, the following package needs to be installed:
 <code>
-Unattended-Upgrade::Origins-Pattern {
+apt-get install powermgmt-base
-        "site=*";
-};
 </code>