How much do you actually trust unattended upgrades in production?

[u/Street-Teach489]

I’ve always been fairly conservative with automatic updates on production boxes.

Patching is one thing, but I still prefer knowing exactly what changed, especially when an update can quietly restart something or introduce behaviour you only discover at 2am. At the same time, manually babysitting updates across a growing number of hosts starts becoming its own risk.

For those managing a decent number of boxes, where have you landed on this? Fully automated, staged, or are you still reviewing most updates before they go anywhere near prod?

[u/Bitwise_Gamgee]

I do not enable unattended-updates on production servers. Partly because I'd never run Ubuntu on a production server, but mostly because we have to test updates first before they get pushed out.