메뉴
Configure automatic security updates on Ubuntu/Debian VPS servers to patch vulnerabilities and prevent exploitation of known security flaws.
기본적으로 소스를 먼저 확인하는 Prompt가 선택됩니다. 직접 명령으로 전환하거나 로컬 사본을 다운로드할 수도 있습니다.
설치 여부를 결정하기 전에 SKILL.md와 SkillsMP에 표시된 보조 파일을 읽어 보세요.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/mikr13/secure-server-setup-skills --skill auto-updates명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
SOC 직업 분류 기준
SKILL.md 표시 중
| name | auto-updates |
| description | Configure automatic security updates on Ubuntu/Debian VPS servers to patch vulnerabilities and prevent exploitation of known security flaws. |
| license | MIT |
| compatibility | Ubuntu, Debian, and derivative Linux distributions |
| metadata | {"author":"secure-server-skill","version":"1.0","category":"security"} |
| allowed-tools | Bash(apt:*, dpkg-reconfigure:*, systemctl:*) |
Enable automatic security updates on VPS servers to ensure systems are patched against known vulnerabilities.
This skill helps AI agents configure automatic security updates on Ubuntu/Debian-based VPS servers. Every piece of software has vulnerabilities - patches fix them. If you're not patching, you're running known-vulnerable software that attackers have pre-built exploits for.
Key capabilities:
Use this skill when you need to:
Critical understanding: A server that's been up for 400 days isn't impressive - it's concerning. Regular updates and reboots are essential for security.
First, update the package list and upgrade all installed packages:
sudo apt update && sudo apt upgrade -y
What this does:
apt update - Refreshes the package index from repositoriesapt upgrade -y - Installs available updates without promptingInstall the unattended-upgrades package:
sudo apt install unattended-upgrades -y
Enable automatic updates using the configuration tool:
sudo dpkg-reconfigure unattended-upgrades
Select "Yes" when prompted to enable automatic updates.
Alternative manual configuration:
Edit /etc/apt/apt.conf.d/50unattended-upgrades to customize:
sudo nano /etc/apt/apt.conf.d/50unattended-upgrades
Key settings to review:
Unattended-Upgrade::Allowed-Origins - Which updates to installUnattended-Upgrade::Automatic-Reboot - Auto-reboot if required (default: false)Unattended-Upgrade::Automatic-Reboot-Time - When to reboot (e.g., "02:00")Unattended-Upgrade::Remove-Unused-Dependencies - Clean up old packagesCheck that unattended-upgrades is active:
sudo systemctl status unattended-upgrades
View the automatic upgrade log:
sudo cat /var/log/unattended-upgrades/unattended-upgrades.log
To enable automatic reboots when kernel updates require them, edit /etc/apt/apt.conf.d/50unattended-upgrades:
Unattended-Upgrade::Automatic-Reboot "true";
Unattended-Upgrade::Automatic-Reboot-Time "02:00";
The default update frequency is configured in /etc/apt/apt.conf.d/20auto-upgrades:
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::AutocleanInterval "7";
Perform a dry run to see what would be updated:
sudo unattended-upgrade --dry-run --debug
Manually trigger an update cycle:
sudo unattended-upgrade --debug
Check the systemd timer status:
sudo systemctl status apt-daily.timer
sudo systemctl status apt-daily-upgrade.timer
Enable timers if disabled:
sudo systemctl enable apt-daily.timer
sudo systemctl enable apt-daily-upgrade.timer
View recent update activity:
sudo journalctl -u unattended-upgrades
Some packages may be held back. List them:
apt-mark showhold
Unhold if safe:
sudo apt-mark unhold <package-name>
/var/log/unattended-upgrades/See references/apt-config.md for detailed APT configuration options.
See scripts/setup-auto-updates.sh for automated setup script.
ssh-hardening - Secure SSH configurationfirewall-configuration - Set up UFW firewallfail2ban-setup - Configure brute-force protection