Unattended Upgrades

I prefer mostly Debian based platform, and while I prefer Ansible for most automation, some headless IoT devices that I maintain, I will prefer to have a pull based configuration rather than push based one for security updates.

Thus another clear alternative is unattended-upgrades. To install it please go through the steps below:

sudo apt update
sudo apt install unattended-upgrades
sudo dpkg-reconfigure unattended-upgrades # Enable Upgrades
sudo nano /etc/apt/apt.conf.d/50unattended-upgrades #Modify configurations
sudo unattended-upgrade --dry-run -d # Check your config
sudo unattended-upgrades # Actually trigger it to verify more