特殊:Badtitle/NS100:AutomaticSecurityUpdates:修订间差异
小无编辑摘要 |
小无编辑摘要 |
||
(未显示2个用户的8个中间版本) | |||
第4行: | 第4行: | ||
=== Introduction === | === Introduction === | ||
This is a simple tutorial that will teach you to create a script and a cron job to go out and automatically install security updates without requiring you to do anything. There are always some security risks involved in running software upgrades without supervision, but there are also benefits. If you believe it's important to stay up to date with the latest security patches, then you should follow this simple tutorial. | This is a simple tutorial that will teach you to create a script and a cron job to go out and automatically install security updates without requiring you to do anything. There are always some security risks involved in running software upgrades without supervision, but there are also benefits. If you believe it's important to stay up to date with the latest security patches, then you should follow this simple tutorial. | ||
=== Instructions === | === Using apt.conf.d === | ||
If you are using GNOME, go to the "System" menu, then "Administration", then "Software Sources". | |||
Open up the "Updates" tab and select "Automatic updates", also select "Install security updates without confirmation". | |||
Alternately you may configure the <code><nowiki>unattended-upgrades</nowiki></code> package via the command line; simply change your '''''/etc/apt/apt.conf.d/10periodic''''' to: | |||
<pre><nowiki> | |||
APT::Periodic::Update-Package-Lists "1"; | |||
APT::Periodic::Download-Upgradeable-Packages "1"; | |||
APT::Periodic::AutocleanInterval "5"; | |||
APT::Periodic::Unattended-Upgrade "1"; | |||
</nowiki></pre> | |||
Details about what these values mean may be found in the header of the '''/etc/cron.daily/apt''' file. | |||
And '''''/etc/apt/apt.conf.d/50unattended-upgrades''''': | |||
<pre><nowiki> | |||
// Automatically upgrade packages from these (origin, archive) pairs | |||
Unattended-Upgrade::Allowed-Origins { | |||
"Ubuntu karmic-security"; | |||
}; | |||
// List of packages to not update | |||
Unattended-Upgrade::Package-Blacklist { | |||
// "vim"; | |||
// "libc6"; | |||
// "libc6-dev"; | |||
// "libc6-i686"; | |||
}; | |||
// Send email to this address for problems or packages upgrades | |||
// If empty or unset then no email is sent, make sure that you | |||
// have a working mail setup on your system. The package 'mailx' | |||
// must be installed or anything that provides /usr/bin/mail. | |||
//Unattended-Upgrade::Mail "root@localhost"; | |||
// Automatically reboot *WITHOUT CONFIRMATION* if a | |||
// the file /var/run/reboot-required is found after the upgrade | |||
//Unattended-Upgrade::Automatic-Reboot "false"; | |||
</nowiki></pre> | |||
https://help.ubuntu.com/community/IconsPage?action=AttachFile&do=get&target=IconNote.png '''Note:''' Using this method requires that you modify /etc/apt/apt.conf.d/10periodic and /etc/apt/apt.conf.d/50unattended-upgrades every time you upgrade your system to the next Ubuntu release. Be sure to replace '''karmic''' with the code name for your Ubuntu version! | |||
=== Using cron === | |||
==== Instructions ==== | |||
To begin, press Alt+F2 and create a new file: | To begin, press Alt+F2 and create a new file: | ||
<pre><nowiki> | <pre><nowiki> | ||
第11行: | 第50行: | ||
If you're using KDE, use this command instead: | If you're using KDE, use this command instead: | ||
<pre><nowiki> | <pre><nowiki> | ||
kdesudo kate /etc/cron.weekly/apt-security-updates | |||
</nowiki></pre> | </nowiki></pre> | ||
Copy the following text into this new file, save, and exit: | Copy the following text into this new file, save, and exit: | ||
第19行: | 第58行: | ||
date >> /var/log/apt-security-updates | date >> /var/log/apt-security-updates | ||
aptitude update >> /var/log/apt-security-updates | aptitude update >> /var/log/apt-security-updates | ||
aptitude upgrade -o Aptitude::Delete-Unused=false --assume-yes --target-release `lsb_release -cs`-security >> /var/log/apt-security-updates | aptitude safe-upgrade -o Aptitude::Delete-Unused=false --assume-yes --target-release `lsb_release -cs`-security >> /var/log/apt-security-updates | ||
echo "Security updates (if any) installed" | echo "Security updates (if any) installed" | ||
</nowiki></pre> | </nowiki></pre> | ||
Recently (since Ubuntu 7.10), the aptitude action 'upgrade' is deprecated. There are now two ways to upgrade, a safe one (conservative, if an update needs to add or remove dependencies, it won't update) and a full one (it will always upgrade even though it impacts other packages by adding them or removing them, previously called 'dist-upgrade'). The actions are now 'safe-upgrade' or 'full-upgrade'. See the manual page of aptitude (<code><nowiki>man aptitude</nowiki></code>) for more details. | |||
Once you are complete, you want to make the file executable. So, via the terminal, type the following line: | Once you are complete, you want to make the file executable. So, via the terminal, type the following line: | ||
<pre><nowiki> | <pre><nowiki> | ||
sudo chmod +x /etc/cron.weekly/apt-security-updates | sudo chmod +x /etc/cron.weekly/apt-security-updates | ||
</nowiki></pre> | </nowiki></pre> | ||
=== Post-Install Setup and Execution Information === | ==== Post-Install Setup and Execution Information ==== | ||
This script will run once weekly and it installs all available packages from the security repository. It also generates a log in ~-/var/log/apt-security-updates-~ for later inspection in case something goes wrong. | This script will run once weekly and it installs all available packages from the security repository. It also generates a log in ~-/var/log/apt-security-updates-~ for later inspection in case something goes wrong. | ||
This script will output information to a log file, so to prevent this log file from getting too large we need to make sure it gets rotated out. To do this, we'll use the ~-logrotate-~ utility, which comes with Ubuntu. Press Alt+F2 and type this command: | This script will output information to a log file, so to prevent this log file from getting too large we need to make sure it gets rotated out. To do this, we'll use the ~-logrotate-~ utility, which comes with Ubuntu. Press Alt+F2 and type this command: | ||
第34行: | 第74行: | ||
For KDE, use this command instead: | For KDE, use this command instead: | ||
<pre><nowiki> | <pre><nowiki> | ||
kdesudo kate /etc/logrotate.d/apt-security-updates | |||
</nowiki></pre> | </nowiki></pre> | ||
Paste this into the editor, save, and exit: | Paste this into the editor, save, and exit: | ||
<pre><nowiki> | <pre><nowiki> | ||
/var/log/apt-security-updates { | /var/log/apt-security-updates { | ||
rotate 2 | rotate 2 | ||
weekly | weekly | ||
size 250k | size 250k | ||
compress | compress | ||
notifempty | notifempty | ||
} | } | ||
</nowiki></pre> | </nowiki></pre> | ||
This will rotate the log file every week (`weekly`), or if it's over 250kB in size (`size 250k`), compressing old versions (`compress`). The previous two log files will be kept (`rotate 2`), and no rotation will occur if the file is empty (`notifempty`). | This will rotate the log file every week (`weekly`), or if it's over 250kB in size (`size 250k`), compressing old versions (`compress`). The previous two log files will be kept (`rotate 2`), and no rotation will occur if the file is empty (`notifempty`). | ||
=== Using cron-apt to handle automatic updating === | ==== Using cron-apt to handle automatic updating ==== | ||
Updating can be also done automatically by using package called [http://packages.ubuntu.com/ | Updating can be also done automatically by using package called [http://packages.ubuntu.com/intrepid/cron-apt cron-apt]. Please read man page before doing anything. | ||
---- | ---- | ||
[[category:CategorySecurity]] | [[category:CategorySecurity]] | ||
[[category:UbuntuHelp]] | [[category:UbuntuHelp]] |
2010年5月19日 (三) 21:39的最新版本
文章出处: |
{{#if: | {{{2}}} | https://help.ubuntu.com/community/AutomaticSecurityUpdates }} |
点击翻译: |
English {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/af | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Afrikaans| [[::AutomaticSecurityUpdates/af|Afrikaans]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/ar | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|العربية| [[::AutomaticSecurityUpdates/ar|العربية]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/az | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|azərbaycanca| [[::AutomaticSecurityUpdates/az|azərbaycanca]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/bcc | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|جهلسری بلوچی| [[::AutomaticSecurityUpdates/bcc|جهلسری بلوچی]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/bg | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|български| [[::AutomaticSecurityUpdates/bg|български]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/br | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|brezhoneg| [[::AutomaticSecurityUpdates/br|brezhoneg]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/ca | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|català| [[::AutomaticSecurityUpdates/ca|català]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/cs | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|čeština| [[::AutomaticSecurityUpdates/cs|čeština]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/de | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Deutsch| [[::AutomaticSecurityUpdates/de|Deutsch]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/el | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Ελληνικά| [[::AutomaticSecurityUpdates/el|Ελληνικά]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/es | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|español| [[::AutomaticSecurityUpdates/es|español]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/fa | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|فارسی| [[::AutomaticSecurityUpdates/fa|فارسی]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/fi | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|suomi| [[::AutomaticSecurityUpdates/fi|suomi]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/fr | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|français| [[::AutomaticSecurityUpdates/fr|français]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/gu | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|ગુજરાતી| [[::AutomaticSecurityUpdates/gu|ગુજરાતી]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/he | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|עברית| [[::AutomaticSecurityUpdates/he|עברית]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/hu | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|magyar| [[::AutomaticSecurityUpdates/hu|magyar]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/id | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Bahasa Indonesia| [[::AutomaticSecurityUpdates/id|Bahasa Indonesia]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/it | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|italiano| [[::AutomaticSecurityUpdates/it|italiano]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/ja | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|日本語| [[::AutomaticSecurityUpdates/ja|日本語]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/ko | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|한국어| [[::AutomaticSecurityUpdates/ko|한국어]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/ksh | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Ripoarisch| [[::AutomaticSecurityUpdates/ksh|Ripoarisch]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/mr | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|मराठी| [[::AutomaticSecurityUpdates/mr|मराठी]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/ms | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Bahasa Melayu| [[::AutomaticSecurityUpdates/ms|Bahasa Melayu]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/nl | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Nederlands| [[::AutomaticSecurityUpdates/nl|Nederlands]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/no | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|norsk| [[::AutomaticSecurityUpdates/no|norsk]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/oc | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|occitan| [[::AutomaticSecurityUpdates/oc|occitan]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/pl | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|polski| [[::AutomaticSecurityUpdates/pl|polski]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/pt | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|português| [[::AutomaticSecurityUpdates/pt|português]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/ro | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|română| [[::AutomaticSecurityUpdates/ro|română]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/ru | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|русский| [[::AutomaticSecurityUpdates/ru|русский]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/si | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|සිංහල| [[::AutomaticSecurityUpdates/si|සිංහල]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/sq | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|shqip| [[::AutomaticSecurityUpdates/sq|shqip]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/sr | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|српски / srpski| [[::AutomaticSecurityUpdates/sr|српски / srpski]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/sv | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|svenska| [[::AutomaticSecurityUpdates/sv|svenska]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/th | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|ไทย| [[::AutomaticSecurityUpdates/th|ไทย]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/tr | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Türkçe| [[::AutomaticSecurityUpdates/tr|Türkçe]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/vi | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|Tiếng Việt| [[::AutomaticSecurityUpdates/vi|Tiếng Việt]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/yue | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|粵語| [[::AutomaticSecurityUpdates/yue|粵語]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/zh | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|中文| [[::AutomaticSecurityUpdates/zh|中文]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/zh-hans | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|中文(简体)| [[::AutomaticSecurityUpdates/zh-hans|中文(简体)]]}}|}} {{#ifexist: {{#if: UbuntuHelp:AutomaticSecurityUpdates | UbuntuHelp:AutomaticSecurityUpdates | {{#if: | :}}AutomaticSecurityUpdates}}/zh-hant | • {{#if: UbuntuHelp:AutomaticSecurityUpdates|中文(繁體)| [[::AutomaticSecurityUpdates/zh-hant|中文(繁體)]]}}|}} |
{{#ifeq:UbuntuHelp:AutomaticSecurityUpdates|:AutomaticSecurityUpdates|请不要直接编辑翻译本页,本页将定期与来源同步。}} |
{{#ifexist: :AutomaticSecurityUpdates/zh | | {{#ifexist: AutomaticSecurityUpdates/zh | | {{#ifeq: {{#titleparts:AutomaticSecurityUpdates|1|-1|}} | zh | | }} }} }} {{#ifeq: {{#titleparts:AutomaticSecurityUpdates|1|-1|}} | zh | | }}
- title Automatic Security Updates
Introduction
This is a simple tutorial that will teach you to create a script and a cron job to go out and automatically install security updates without requiring you to do anything. There are always some security risks involved in running software upgrades without supervision, but there are also benefits. If you believe it's important to stay up to date with the latest security patches, then you should follow this simple tutorial.
Using apt.conf.d
If you are using GNOME, go to the "System" menu, then "Administration", then "Software Sources".
Open up the "Updates" tab and select "Automatic updates", also select "Install security updates without confirmation".
Alternately you may configure the unattended-upgrades
package via the command line; simply change your /etc/apt/apt.conf.d/10periodic to:
APT::Periodic::Update-Package-Lists "1"; APT::Periodic::Download-Upgradeable-Packages "1"; APT::Periodic::AutocleanInterval "5"; APT::Periodic::Unattended-Upgrade "1";
Details about what these values mean may be found in the header of the /etc/cron.daily/apt file. And /etc/apt/apt.conf.d/50unattended-upgrades:
// Automatically upgrade packages from these (origin, archive) pairs Unattended-Upgrade::Allowed-Origins { "Ubuntu karmic-security"; }; // List of packages to not update Unattended-Upgrade::Package-Blacklist { // "vim"; // "libc6"; // "libc6-dev"; // "libc6-i686"; }; // Send email to this address for problems or packages upgrades // If empty or unset then no email is sent, make sure that you // have a working mail setup on your system. The package 'mailx' // must be installed or anything that provides /usr/bin/mail. //Unattended-Upgrade::Mail "root@localhost"; // Automatically reboot *WITHOUT CONFIRMATION* if a // the file /var/run/reboot-required is found after the upgrade //Unattended-Upgrade::Automatic-Reboot "false";
Note: Using this method requires that you modify /etc/apt/apt.conf.d/10periodic and /etc/apt/apt.conf.d/50unattended-upgrades every time you upgrade your system to the next Ubuntu release. Be sure to replace karmic with the code name for your Ubuntu version!
Using cron
Instructions
To begin, press Alt+F2 and create a new file:
gksudo gedit /etc/cron.weekly/apt-security-updates
If you're using KDE, use this command instead:
kdesudo kate /etc/cron.weekly/apt-security-updates
Copy the following text into this new file, save, and exit:
#! /bin/sh echo "**************" >> /var/log/apt-security-updates date >> /var/log/apt-security-updates aptitude update >> /var/log/apt-security-updates aptitude safe-upgrade -o Aptitude::Delete-Unused=false --assume-yes --target-release `lsb_release -cs`-security >> /var/log/apt-security-updates echo "Security updates (if any) installed"
Recently (since Ubuntu 7.10), the aptitude action 'upgrade' is deprecated. There are now two ways to upgrade, a safe one (conservative, if an update needs to add or remove dependencies, it won't update) and a full one (it will always upgrade even though it impacts other packages by adding them or removing them, previously called 'dist-upgrade'). The actions are now 'safe-upgrade' or 'full-upgrade'. See the manual page of aptitude (man aptitude
) for more details.
Once you are complete, you want to make the file executable. So, via the terminal, type the following line:
sudo chmod +x /etc/cron.weekly/apt-security-updates
Post-Install Setup and Execution Information
This script will run once weekly and it installs all available packages from the security repository. It also generates a log in ~-/var/log/apt-security-updates-~ for later inspection in case something goes wrong. This script will output information to a log file, so to prevent this log file from getting too large we need to make sure it gets rotated out. To do this, we'll use the ~-logrotate-~ utility, which comes with Ubuntu. Press Alt+F2 and type this command:
gksudo gedit /etc/logrotate.d/apt-security-updates
For KDE, use this command instead:
kdesudo kate /etc/logrotate.d/apt-security-updates
Paste this into the editor, save, and exit:
/var/log/apt-security-updates { rotate 2 weekly size 250k compress notifempty }
This will rotate the log file every week (`weekly`), or if it's over 250kB in size (`size 250k`), compressing old versions (`compress`). The previous two log files will be kept (`rotate 2`), and no rotation will occur if the file is empty (`notifempty`).
Using cron-apt to handle automatic updating
Updating can be also done automatically by using package called cron-apt. Please read man page before doing anything.