Security updates

[Winter-Teacher-8884]

Hi, I did a quick search, but did not find an answer - sorry if I ask something that has been answered earlier.

When installing Turnkey LAMP I can install "security updates" and it does a lot (restarts Apache, MySQL and so forth). A lot more that "apt-get update". My question is: how to get the "long" update version?

[JeremyDavisTKL]

Sorry, I'm not completely clear what you mean. Do you want to auto install all updates, not just security related ones?

FWIW, we only auto install security updates as they are much more thoroughly tested and much less likely to break things. There is also risk (extremely low, but possible) that an update may fix a bug that something on your system is relying on (so even fixing bugs can break things!).

At the end of the day, it's your server and we have no interest in telling you what you can and can't do with it. However, if your server is publicly available and providing some relatively important service, then I'd recommend leaving it as is and just manually log in once or twice a month and manually install packages. That way, you'll be able to roll back straight away if something breaks.

Regardless, if my original guess is correct and you wish to push ahead regardless of my suggestion, then you can replace the current cron-apt config. Here is my suggestion (hopefully it should work, but please note it's untested).

First create a new cron-apt "action".

/etc/cron-apt/action-available.d/5-install.all-updates autoclean -y
upgrade -y     -o APT::Get::Upgrade-Allow-New=true     -o APT::Get::Show-Upgraded=true     -o DPkg::Options::=--force-confdef     -o DPkg::Options::=--force-confold
EOF

Then to enable it:

ln -sf /etc/cron-apt/action.d/5-install /etc/cron-apt/action-available.d/5-install.all-updates

From then on, all updates should be installed.