Lion Cipher Lab
Set up automatic security updates on Linux
- Cyber / Security Engineer
- Beginner
- ~35 min
- Free · no account required
Why it matters
Unpatched, out-of-date software is one of the most common ways real organizations get breached, and the reason is timing: when a vendor publishes a fix, the flaw it fixes becomes public knowledge, and attackers immediately go hunting for machines that have not applied it. The safest patch is the one that lands without anyone having to remember. This lab turns 'I should update sometime' into a background service that applies security fixes on its own and, if a reboot is needed, takes it in a window you choose — the single highest-return security habit you can automate on a machine you leave…
What you'll learn
- enabling automatic security updates
- unattended-upgrades (Debian/Ubuntu)
- dnf-automatic (Fedora/RHEL)
- configuring a controlled reboot window
- reading update logs
- patch management as a defensive control
Steps in this lab
- What we're automating, and why speed is the whole point
- Security update vs. upgrade — what you automate, and what you don't
- Debian / Ubuntu: install unattended-upgrades
- Debian / Ubuntu: turn it on and keep it to security only
- Debian / Ubuntu: reboot only in a window you choose
- Debian / Ubuntu: test it, then read the log
- Fedora / RHEL: the same thing with dnf-automatic
- The balance — automate the safe patching, stage the rest