Unattended and or automated updates for Debian are surprisingly stable...
Setting up unattened-upgrades on Debian Jessie (maybe others) to enable upgrade of all packages.
- apt-cache policy | grep release
- vim /etc/apt/apt.conf.d/50unattended-upgrades
- // Archive or Suite based matching section
- Match up to sections from apt-cache policy command above
- note: the \ is important for escaping things like "o=Google\, Inc.,a=stable";
- tail -F /var/log/unattended-upgrades/unattended-upgrades.log
- manually start by running unattended-upgrade if desired
The matching for allowed repos can be simplified to allow all from Debian. The old method while correct is a lot of work to enable each repo.
sed -i '/Origins-Pattern/a "o=Debian";' /etc/apt/apt.conf.d/50unattended-upgrades
Don't try to install one package at a time, normal updates should be small so keep the ball rolling
Install updates on shutdown. There could be reasons to do this or not, I would set it true for encrypted drives as the reboot would be an issue.
Clean up any packaging changes. Rare but clean is good
If un-encrypted drives, use this to move the reboot time to when ever.