{"id":155,"date":"2010-04-01T20:49:00","date_gmt":"2010-04-01T20:49:00","guid":{"rendered":"https:\/\/www.root42.de\/blog\/?p=155"},"modified":"2010-04-01T20:49:00","modified_gmt":"2010-04-01T20:49:00","slug":"automatic-security-updates-for-debian","status":"publish","type":"post","link":"https:\/\/www.root42.de\/blog\/?p=155","title":{"rendered":"Automatic security updates for Debian"},"content":{"rendered":"<p>I was wondering how to configure automatic security updates for Debian. Especially for Debian stable, which I am running. Turns out it&#8217;s easy. First, you just install cron-apt. Second, you can configure it by editing \/etc\/cron-apt\/config. I learned from some other blog, that setting one variable helps in getting actually emails for the upgrades, namely setting MAILON=&#8221;upgrade&#8221; in this file does the trick. And lastly, there is a directory \/etc\/cron-apt\/action.d, which contains all the actions that cron-apt will execute. In there is a file named 3-download, which I changed to look as follows:<\/p>\n<div>\n<div><\/div>\n<div><span  style=\"font-family:'courier new';\">autoclean -y<\/span><\/div>\n<div><span  style=\"font-family:'courier new';\">upgrade -y -o APT::Get::Show-Upgraded=true<\/span><\/div>\n<div><\/div>\n<div>The second line is changed from &#8220;dist-upgrade -d &#8230;&#8221;, because you don&#8217;t want any automatic dist-upgrades. That might leave your server in a horrible state. Also, instead of only downloading (-d), you want it to install the upgrades as well. That&#8217;s all and should help you keep up with security patches more easily.<\/div>\n<div><\/div>\n<div><b>Update:<\/b> The updates seem to work fine! Tonight I got the first email that notified me of a successful security update.<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>I was wondering how to configure automatic security updates for Debian. Especially for Debian stable, which I am running. Turns out it&#8217;s easy. First, you just install cron-apt. Second, you can configure it by editing \/etc\/cron-apt\/config. I learned from some other blog, that setting one variable helps in getting actually emails for the upgrades, namely &hellip; <a href=\"https:\/\/www.root42.de\/blog\/?p=155\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Automatic security updates for Debian&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[11,2,10],"tags":[],"_links":{"self":[{"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=\/wp\/v2\/posts\/155"}],"collection":[{"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=155"}],"version-history":[{"count":0,"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=\/wp\/v2\/posts\/155\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=155"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=155"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.root42.de\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=155"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}