--thanks hn:shocks for covering the debian side of things-- I know on centos, I put this in cron 2x a day: yum update-minimal --security && curl https://logse

--thanks hn:shocks for covering the debian side of things-- I know on centos, I put this in cron 2x a day: yum update-minimal --security && curl https://logserver/api/$(hostname)/$(needs-restarting https://logserver/api/$(hostname)/$(needs-restarting -r) It grabs all the security based updates, and installs only those. And it reports the reboot required status. I watch that and make a reboot ticket if it hits the true endpoint. Edit: the server part is just Node-red watching for those endpoint GETs. Once it sees a true, it fires a Jira ticket in the Change Management space for a security based reboot.