소프트웨어 소스 및 업데이트 전략

cat /etc/apt/sources.list.d/ubuntu.sources

Types: deb deb-src
URIs: http://archive.ubuntu.com/ubuntu
Suites: resolute resolute-updates resolute-backports
Components: main restricted universe multiverse
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

# Back up the original configuration
sudo cp /etc/apt/sources.list.d/ubuntu.sources /etc/apt/sources.list.d/ubuntu.sources.bak
 
# Edit the source configuration
sudo nano /etc/apt/sources.list.d/ubuntu.sources

Types: deb deb-src
URIs: https://mirrors.aliyun.com/ubuntu
Suites: resolute resolute-updates resolute-backports resolute-security
Components: main restricted universe multiverse
Signed-By: /usr/share/keyrings/ubuntu-archive-keyring.gpg

sudo apt update

# Add a PPA
sudo add-apt-repository ppa:graphics-drivers/ppa
 
# Update the index after adding
sudo apt update
 
# Install software from the PPA; choose the version reported by ubuntu-drivers devices
sudo apt install nvidia-driver-XXX

# Remove a PPA
sudo add-apt-repository --remove ppa:graphics-drivers/ppa
 
# Update the index
sudo apt update

# Download the GPG key
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg
 
# Add the repository (DEB822 format)
# Note: Docker's official repository may not yet publish the resolute suite.
# If apt update reports a missing Release file, temporarily fall back to noble.
sudo tee /etc/apt/sources.list.d/docker.sources << 'EOF'
Types: deb
URIs: https://download.docker.com/linux/ubuntu
Suites: resolute
Components: stable
Signed-By: /usr/share/keyrings/docker-archive-keyring.gpg
EOF
 
# Update and install
sudo apt update
sudo apt install docker-ce docker-ce-cli containerd.io

# View all source files
ls /etc/apt/sources.list.d/
 
# View all sources used by APT
apt policy
 
# Check which source a package comes from
apt policy nginx

# Update the package index
sudo apt update
 
# Upgrade installed packages
sudo apt upgrade
 
# Smart upgrade (may install or remove dependencies)
sudo apt full-upgrade
 
# View upgradable packages without actually upgrading
apt list --upgradable
 
# Upgrade a specific package
sudo apt install --only-upgrade nginx

# View APT operation history
cat /var/log/apt/history.log
 
# View compressed history logs
zless /var/log/apt/history.log.1.gz
 
# View dpkg operation log
cat /var/log/dpkg.log

# Hold a package version
sudo apt-mark hold package-name
 
# Unhold a package
sudo apt-mark unhold package-name
 
# View all held packages
apt-mark showhold

# Install (usually pre-installed on Ubuntu 26.04)
sudo apt install unattended-upgrades
 
# Enable automatic updates
sudo dpkg-reconfigure -plow unattended-upgrades

sudo nano /etc/apt/apt.conf.d/50unattended-upgrades

Unattended-Upgrade::Allowed-Origins {
    "${distro_id}:${distro_codename}";
    "${distro_id}:${distro_codename}-security";
    "${distro_id}:${distro_codename}-updates";
//  "${distro_id}:${distro_codename}-proposed";
//  "${distro_id}:${distro_codename}-backports";
};

// Blacklist packages from auto-updating
Unattended-Upgrade::Package-Blacklist {
    "linux-image*";
    "linux-headers*";
    "nginx";
};

// Automatically remove no-longer-needed dependencies
Unattended-Upgrade::Remove-Unused-Dependencies "true";

// Automatically remove no-longer-needed kernels
Unattended-Upgrade::Remove-Unused-Kernel-Packages "true";

// Automatically reboot if necessary
Unattended-Upgrade::Automatic-Reboot "true";
Unattended-Upgrade::Automatic-Reboot-Time "03:00";

// Email notifications
Unattended-Upgrade::Mail "admin@example.com";
Unattended-Upgrade::MailReport "on-change";

sudo nano /etc/apt/apt.conf.d/20auto-upgrades

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::AutocleanInterval "7";

# Dry run (does not actually install)
sudo unattended-upgrade --dry-run --debug
 
# Run automatic updates immediately
sudo unattended-upgrade -v
 
# View automatic update logs
cat /var/log/unattended-upgrades/unattended-upgrades.log

# Recommended: auto-install security updates, manually install feature updates
# /etc/apt/apt.conf.d/20auto-upgrades
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::AutocleanInterval "7";

sudo apt update && apt list --upgradable
sudo apt upgrade

# Recommended server configuration
# /etc/apt/apt.conf.d/50unattended-upgrades
Unattended-Upgrade::Allowed-Origins {
    "${distro_id}:${distro_codename}-security";
};
 
Unattended-Upgrade::Automatic-Reboot "false";
Unattended-Upgrade::Mail "admin@example.com";

# Ensure the current system is fully updated
sudo apt update && sudo apt full-upgrade
 
# Check if a new version is available
do-release-upgrade -c
 
# Perform the version upgrade
sudo do-release-upgrade

# Clean the downloaded deb package cache
sudo apt clean
 
# Remove no-longer-needed dependencies
sudo apt autoremove
 
# Clean residual configuration files
dpkg -l | awk '$1 == "rc" {print $2}'