apt unattended-upgrades

• https://www.linuxadictos.com/guia-completa-sobre-actualizaciones-desatendidas-en-debian.html

sudo apt install unattended-upgrades

sudo dpkg-reconfigure -plow unattended-upgrades

• permitir ciertos orígenes:
  

  /etc/apt/apt.conf.d/50unattended-upgrades

  Unattended-Upgrade::Allowed-Origins {
      "${distro_id}:${distro_codename}-security";
  };

  /etc/apt/apt.conf.d/50unattended-upgrades

  Unattended-Upgrade::Allowed-Origins {
      "${distro_id}:${distro_codename}";
      "${distro_id}:${distro_codename}-updates";
  };

• excluir paquetes:
  

  Unattended-Upgrade::Package-Blacklist {
      "linux-image";
      "apache2";
  };

• Frecuencia y programación de actualizaciones:
  

  APT::Periodic::Update-Package-Lists "1";
  APT::Periodic::Unattended-Upgrade "1";
  APT::Periodic::Download-Upgradeable-Packages "1";
  APT::Periodic::AutocleanInterval "7";

• less /var/log/unattended-upgrades/unattended-upgrades.log

• simulación:

  sudo unattended-upgrade --dry-run -d

• /etc/apt/apt.conf.d/20auto-upgrades

  APT::Periodic::Unattended-Upgrade "0";

• sudo apt remove unattended-upgrades