#!/bin/bash
exec > /root/patch_run.log 2>&1
export DEBIAN_FRONTEND=noninteractive
apt-get update -q
apt-get -y -o Dpkg::Options::="--force-confold" upgrade
apt-get -y install unattended-upgrades
dpkg-reconfigure -f noninteractive unattended-upgrades
echo "PATCH DONE $(date)"
shutdown -r 04:00 "scheduled kernel reboot — hardening 2026-07-18 (cancel: shutdown -c)"
echo "REBOOT SCHEDULED 04:00"