Automatic updates

Use this skill to inspect or configure periodic upgrades. Keep the requested maintenance policy: enabling a schedule does not authorize an immediate full upgrade, automatic reboot, or removal of dependencies.

Inspect first

• Identify the distribution/release and installed unattended-upgrades version. Inspect apt-config dump, /etc/apt/apt.conf.d/, held packages, timers, and recent upgrade logs.
• Confirm allowed origins against this distribution's installed configuration. Ubuntu security, Debian security, third-party repositories, and Ubuntu Pro/ESM have different origin requirements. Do not copy an Ubuntu origin list onto Debian.
• Record existing automatic reboot, package cleanup, notification and scheduling choices. If the request is an audit, report findings without changing them.

Configure

For operational details and lock troubleshooting, read references/apt-config.md.

1. If missing, install unattended-upgrades using the target's package manager within the authorized setup scope. This helper does not install packages.
2. Preview scripts/setup-auto-updates.sh: