xyz.sh adds no telemetry and performs no hidden actions. Read the full source on the page or download it with curl -fsSL xyz.sh/ .sh first; every script has a / .sh.sha256 checksum. Piping a remote script to bash is still a risk — review the source first. Only auto-update config files are changed, each backed up first.

Which operating systems are supported?

Declared support: Debian, Ubuntu, CentOS, Rocky Linux, and AlmaLinux. The script detects the distribution and warns on an unknown one. It was tested in Docker containers of these systems (syntax, --dry-run, and whatever can run in a container; see tests/RESULTS.md); parts that need systemd, kernel modules, or the public internet still need a real VPS.

Yes. Run it as root or via sudo bash; it exits with a message otherwise. --dry-run and --status show what it would do first.

Will it reboot automatically?

Not by default. Kernel updates need a reboot to take effect; add --reboot (04:00 by default) or --reboot-time 05:30 to reboot at that time when required.

Automatic Security Updates Tutorial for a VPS

This tutorial shows how to make a VPS install security updates automatically with xyz.sh/autoupdate.

Prerequisites

Root access and working package repositories.

CentOS 7 is end-of-life and its repositories may be unavailable.

Steps

Optional: read the source with curl -fsSL xyz.sh/autoupdate.sh and compare xyz.sh/autoupdate.sh.sha256.

Preview: curl -fsSL xyz.sh/autoupdate | bash -s -- --dry-run

Enable: curl -fsSL xyz.sh/autoupdate | bash -s -- -y

Reboot when required: curl -fsSL xyz.sh/autoupdate | bash -s -- --reboot-time 05:30 -y

Status: curl -fsSL xyz.sh/autoupdate | bash -s -- --status

How to verify

Debian/Ubuntu: check /var/log/unattended-upgrades/; Rocky/AlmaLinux: systemctl list-timers dnf-automatic.timer. Or run curl -fsSL xyz.sh/autoupdate | bash -s -- --status.

How to undo or uninstall

curl -fsSL xyz.sh/autoupdate | bash -s -- --disable -y turns auto-updates off (Debian/Ubuntu sets the switches to 0, RHEL-like systems disable the timer); packages are kept.