Auto-Updates Icon

Auto-Updates

Turnkey automated package maintenance, zero-day CVE patching, compiler-aware reboot protection, and unified multi-distribution management for Linux.

v1.4.3-1 GPL-3.0-or-later Rocky Linux Rocky 10 AlmaLinux Alma 10 Fedora Fedora 44 Debian Debian 13 Ubuntu Ubuntu 26.04 LTS

The "UFW" for Linux Package Maintenance

Linux distributions have long shipped raw update automation engines—such as dnf-automatic on RPM systems and unattended-upgrades on Debian and Ubuntu. Yet on millions of Linux servers and developer workstations, automatic updates are left disabled or half-configured out of fear: fear of unannounced middle-of-the-night reboots, fear of broken daily upgrades, or simply the friction of juggling disparate config files, cron entries, and systemd overrides.

Auto-Updates provides an intelligent, human-friendly management layer that brings turnkey reliability to Linux maintenance. What ufw did for iptables, auto-updates does for package automation—delivering unified CLI semantics, zero-configuration defaults, real-time observability, and smart compile-time protection across enterprise and community Linux.

Key Features

  • Unified Multi-Distro CLI: Control your update policies with the exact same commands across Rocky Linux 10, AlmaLinux 10, Fedora 44, Debian 13, and Ubuntu 26.04 LTS.
  • "Goldilocks" Hybrid Schedule (weekly-all): Applies fast, low-risk zero-day security CVE patches Monday through Saturday, then performs a full system upgrade on Sunday at 03:30 AM.
  • Build & Compiler Protection: Never lose an overnight compile or training run. Intelligently scans for active build processes (gcc, cargo, make, ninja, rpmbuild, containerd) and system inhibitor locks before any reboot.
  • Instant Observability Dashboard: Run auto-updates status for immediate, color-coded visibility into systemd timers, next scheduled action, active backend (DNF5 / DNF4 / APT), and reboot state.
  • Granular Reboot Policies: Configure reboots with full clarity using never, when-needed (reboots only when kernel or glibc patches mandate it), or when-changed.
  • Safe Dry-Run Auditing: Inspect pending updates non-destructively at any time using auto-updates check.
  • Zero-Config Turnkey Activation: Automatically coordinates systemd timers upon package installation, resolving and disabling conflicting stock distro timers out-of-the-box.
  • Native Desktop & AppStream Cataloging: Fully cataloged in GNOME Software and KDE Discover with rich 1080p hero banners, multi-screenshot galleries, and desktop app integration.

Comparative Analysis

How auto-updates compares against raw, low-level distro automation utilities:

Capability Raw dnf-automatic Raw unattended-upgrades Auto-Updates
Turnkey Activation Manual timer & conf editing Varies by distribution Active on install (03:30 AM)
Multi-Distro CLI RPM only APT only Unified across RPM & DEB
Hybrid Weekly Mode Requires custom scripts Requires cron/script hacks Native weekly-all schedule
Status Dashboard Complex journalctl parsing Inspect raw log files auto-updates status
Build & Compile Protection Blind reboot Blind reboot Detects build locks & defers
Safe Dry-Run Audit Complex flags Complex flags auto-updates check
Schedule Adjustment Systemd timer drop-ins Systemd / cron overrides sudo auto-updates set-time

Management CLI Commands

The installed auto-updates utility provides complete administrative management and configuration:

# Inspect real-time status, timers, backend, and reboot state:
auto-updates status

# Configure update schedule (security, all, or weekly-all):
sudo auto-updates set-mode weekly-all

# Set intelligent reboot policy (never, when-needed, when-changed):
sudo auto-updates set-reboot when-needed

# Adjust daily execution schedule time:
sudo auto-updates set-time 03:30

# Perform a safe, read-only dry-run check:
auto-updates check

# Trigger an immediate manual update run:
sudo auto-updates run

# View comprehensive Unix manual page:
man auto-updates