ubuntu server 14.04和16.04开启自动安全更新

一、更新的内容

修改 /etc/apt/apt.conf.d/50unattended-upgrades

// Automatically upgrade packages from these (origin:archive) pairs
Unattended-Upgrade::Allowed-Origins {
"${distro_id}:${distro_codename}-security";
// Extended Security Maintenance; doesn't necessarily exist for
// every release and this system may not have it installed, but if
// available, the policy for updates is such that unattended-upgrades
// should also install from here by default.
//把需要自动更新的那些行取消注释，不需要自动更新的就注释掉（一般情况下，开启安全security更新就好了）
"${distro_id}ESM:${distro_codename}";
"${distro_id}:${distro_codename}-updates";
"${distro_id}:${distro_codename}-proposed";
"${distro_id}:${distro_codename}-security";
//"${distro_id}:${distro_codename}-backports";
};

二、不更新的内容

哪些软件包不更新的，要写在下面，并且取消注释。（如果只开了安全security更新，这里可以不用管）

// List of packages to not update (regexp are supported)
Unattended-Upgrade::Package-Blacklist {
      "vim";
      "libc6";
      "libc6-dev";
      "libc6-i686";
};

http://xzh.i3geek.com