For a while I’ve been content to regularly check my server for updates and protect myself against security vulnerabilities. Yet sometimes I’m away from my computer for a while, so I decided I need my server to automatically install security updates when I can’t get to them.
From a completely manual update process, I know have this:
- Automatically installing security updates via the
unattended-upgrades
package. See the Ubuntu help page for instructions, and this great blog post for configuring automatic updates for non-standard repositories, like GitLab. - SMS notifications when that runs. The configuration file also allows setting an email address. Instead of my regular email, I decided to try an SMS gateway.
- And our course I still manually check for non-security updates regularly.
We’ll see how this goes.