Automatic update (nightly)

Runs the full update every night at 02:00 – Debian packages, app, modules and iac, without a reboot. Log: journalctl -u iac-auto-update

auto-update LXCVM preselected for new guests

Add to a guest

In the guest as root – container and VM alike:

update --add-modules auto-update

Runs a normal update and installs the module on the way.

From the Proxmox node, without logging in:

pct exec <ID> -- update --add-modules auto-update   # container
ssh root@<IP> update --add-modules auto-update

Choose when creating a guest

Without a dialog, on the Proxmox node:

IAC_NONINTERACTIVE=1 var_modules=auto-update \
  bash -c "$(curl -fsSL https://iac.heyer.systems/<app>/ct.sh)"

var_modules replaces the app's preselection – keep auto-update in the list if you want it. Interactive: choose “advanced” in the dialog, or tick the module in the generator on the app page.

Remove

update --remove-modules auto-update

Removes the module's packages, services, firewall rules and configuration again. Data stays.

Details

Runs the full update every night at 02:00 (local time of the guest): Debian packages, app, modules and iac – exactly like running it by hand, without a reboot and without a release upgrade.

The module is preselected for new guests. If you do not want it, deselect it when you create the guest or remove it later with update --remove-modules auto-update. Existing guests get it with update --add-modules auto-update.

systemctl list-timers iac-auto-update.timer   # next run
journalctl -u iac-auto-update                 # output of the last runs

If an update is running by hand, the nightly run waits for it. An active backup only starts once the update has finished.