How to make debian 12 automatically updates security updates, without having to do anything at all?

Question

My goal is to give a laptop (with Debian) to a person who will only use it to browse the web. And who will not open the terminal to type sudo apt update...etc.

I started looking and was told that gnome-software update does the job.

But then here is my question: how is the reboot done ? I imagine it is often necessary.

Is the need to reboot explicitly signaled to the user?

Answer 1

You should be able to just edit

/etc/apt/apt.conf.d/50unattended-upgrades 

Uncomment

//Unattended-Upgrade::Automatic-Reboot "false"; 

and replace false with true.

Potentially also setting a convenient time Unattended-Upgrade::Automatic-Reboot-Time "02:00"; or if users are logged in Unattended-Upgrade::Automatic-Reboot-WithUsers "true";