Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
World desk4 min

How to Automate Security Updates on a Bluehost Self-Managed VPS

Choose the update procedure for your VPS’s Linux distribution, enable its scheduler, then verify runs and make separate decisions about email alerts and reboots.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To enable automatic security updates on a Bluehost Self-Managed VPS, first identify its Linux distribution: use unattended-upgrades on Ubuntu or Debian, and dnf-automatic on AlmaLinux, Rocky Linux, CentOS Stream, or Fedora. The two paths use different package managers and schedulers, so follow only the one that matches your server.

Before you enable automatic updates

Bluehost’s setup guidance calls for root or sudo privileges, access to the distribution’s package repositories, initial manual updates, and recent backups. Its VPS documentation says root SSH access is available to VPS customers; follow Bluehost’s account and access guidance for your server. Bluehost explains SSH access here.

As an Amazon Associate I earn from qualifying purchases.

Confirm that the server can reach its repositories before relying on unattended installation. For Ubuntu or Debian, refresh package lists with sudo apt update. For the DNF family, check repository access with sudo dnf check-update. If you see a DNS or network error such as “Could not resolve host,” fix connectivity first. Bluehost also recommends applying initial OS updates as part of securing a new server. See Bluehost’s server-hardening guidance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Ubuntu or Debian: configure unattended-upgrades

Bluehost’s APT-based procedure installs unattended-upgrades, enables automatic installation through the distribution’s configuration dialog, then checks its behavior with a dry run. Run these commands as a sudo-capable administrator:

  1. Refresh the package list and install the updater:

    sudo apt update
    sudo apt install unattended-upgrades -y
  2. Open the configuration dialog:

    sudo dpkg-reconfigure --priority=low unattended-upgrades

    When prompted, choose the affirmative option to automatically download and install stable updates.

  3. Test the configuration without applying an update:

    sudo unattended-upgrades --dry-run --debug

    The output can show packages that would be upgraded. This verifies the current dry-run behavior; it does not guarantee that future repository updates will always install successfully.

To review which origins are eligible and whether email or reboot behavior is configured, inspect /etc/apt/apt.conf.d/50unattended-upgrades. Bluehost’s Ubuntu instructions describe security-origin settings as the relevant scope; review the file on your own distribution before changing it. See Bluehost’s automatic-update setup instructions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

AlmaLinux, Rocky Linux, CentOS Stream, or Fedora: configure dnf-automatic

On these DNF-based systems, Bluehost’s alternate procedure installs dnf-automatic, enables its systemd timer, and sets it to apply security updates:

  1. Install the package:

    sudo dnf install dnf-automatic -y
  2. Enable and start the timer:

    sudo systemctl enable --now dnf-automatic.timer
  3. Edit /etc/dnf/automatic.conf and set the update behavior:

    apply_updates = yes
    upgrade_type = security
  4. Check whether the timer is active and when it is scheduled:

    Rank #3
    HP MicroServer Gen10 Plus Mini Tower Server, Intel Xeon E-2224 3.4GHz, 32GB RAM, 16TB Storage, RAID, Windows Server 2019
    • HP MicroServer Gen10 Plus Tower Server for Business with Microsoft Windows Server 2019 OS!
    • Intel Xeon E-2224 Quad-Core 3.4GHz 8MB CPU, Up To 4.6GHz Turbo
    • 32GB (2 x 16GB) DDR4 PC4-21300 2666MHz Unbuffered Memory
    • 16TB (4 x 4TB) 7.2K 6Gb/s SATA 3.5" HDDs in RAID
    • Hard drives and memory upgrades included separately NOT installed, installation required.
    systemctl status dnf-automatic.timer
    systemctl list-timers dnf-automatic.timer

Bluehost describes the DNF timer as daily, with 6:00 a.m. system time as its default or example schedule. Treat that as the provider’s description, not a guaranteed run time: inspect the installed timer and its next activation. If you decide to change the calendar, inspect the unit first; after editing a timer, reload systemd and restart it with sudo systemctl daemon-reload and sudo systemctl restart dnf-automatic.timer. Bluehost’s guide covers this DNF path.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to confirm updates are running

Ubuntu and Debian

Check /etc/apt/apt.conf.d/10periodic and confirm that unattended-upgrade runs are not disabled. Bluehost gives APT::Periodic::Unattended-Upgrade "1"; as an example of an enabled setting; a value of "0" disables the expected automatic runs. Review run history in /var/log/unattended-upgrades/. You can also inspect the service with:

sudo systemctl status unattended-upgrades.service

An inactive or dead service status by itself does not establish failure: interpret it alongside the distribution’s scheduling configuration and logs. Bluehost describes Ubuntu/Debian runs as daily through a cron.daily job, typically around 6:25 a.m. system time, but local configuration determines the actual schedule. Check /etc/cron.daily/ and the periodic configuration rather than assuming that example time applies to your VPS.

DNF-based systems

Use systemctl status dnf-automatic.timer to check timer state and systemctl list-timers dnf-automatic.timer to see its schedule and next activation. The timer’s installed unit and schedule are authoritative for the server.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshoot a missed run or update failure

Bluehost’s troubleshooting guide recommends checking the relevant timer or service, package-manager access, configuration, and logs when updates do not appear. Read its troubleshooting steps.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Make email and reboot choices separately

Email notifications

Notifications are optional and require working mail delivery. Bluehost describes using a local mail transfer agent such as Postfix for DNF, and a mail utility or Postfix with Unattended-Upgrade::Mail and Unattended-Upgrade::MailOnlyOnError for Ubuntu/Debian. Installing local mail software alone does not guarantee delivery to an external inbox: Bluehost says external delivery may require SMTP relay settings or an email service, and it does not provide a free relay. Test delivery and inspect relay and mail logs if messages do not arrive.

Automatic reboots

A reboot is a separate operational choice, not a prerequisite for enabling automatic package updates. Bluehost identifies reboot = when-needed as a DNF option and Unattended-Upgrade::Automatic-Reboot "true"; as an Ubuntu/Debian option. Choose whether to permit automatic restarts based on application availability and maintenance requirements; a reboot can interrupt running services. Bluehost documents the relevant configuration options.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.