Ubuntu 定时更新系统步骤
一 推荐方式 使用 unattended-upgrades 自动安装安全更新
sudo apt update && sudo apt install unattended-upgrades -ysudo dpkg-reconfigure --priority=low unattended-upgrades(会自动创建/修改 /etc/apt/apt.conf.d/20auto-upgrades)sudo nano /etc/apt/apt.conf.d/20auto-upgrades,确保包含:
APT::Periodic::Update-Package-Lists "1";APT::Periodic::Download-Upgradeable-Packages "1";APT::Periodic::AutocleanInterval "7";APT::Periodic::Unattended-Upgrade "1";sudo nano /etc/apt/apt.conf.d/50unattended-upgrades"${distro_id}:${distro_codename}-security";"${distro_id}ESM:${distro_codename}";Unattended-Upgrade::Remove-Unused-Dependencies "true";software-properties-gtk(或“软件和更新”)二 可选 自定义时间或全量升级的定时任务
sudo nano /etc/systemd/system/apt-upgrade.service
[Unit]Description=APT upgrade[Service]Type=oneshotExecStart=/usr/bin/apt update && /usr/bin/apt full-upgrade -yExecStartPost=/usr/bin/apt autoremove -ysudo nano /etc/systemd/system/apt-upgrade.timer
[Unit]Description=Daily APT upgrade[Timer]OnCalendar=dailyPersistent=true[Install]WantedBy=timers.targetsudo systemctl daemon-reload && sudo systemctl enable --now apt-upgrade.timersudo crontab -e0 3 * * * /usr/bin/apt update && /usr/bin/apt full-upgrade -y三 验证与日志查看
cat /var/log/unattended-upgrades/unattended-upgrades.logsystemctl list-timers | grep apt-upgradeapt list --upgradableUnattended-Upgrade::Mail)并确保系统已配置 MTA。四 注意事项
Unattended-Upgrade::Automatic-Reboot "true"; 与 Unattended-Upgrade::Automatic-Reboot-Time "02:00"; 设置在低峰时段重启,并提前做好数据与配置备份。