syspatch cron job

[bsdsource]

I would like to check for any new patches daily at 3:00 am using syspatch and update my system if there are any new patches. If are new patches I would like to install them and then reboot my system. Anyone have a cron job script or anything that would accomplish this task?

[beavers]

I think the general wisdom is that you should be present for updates in case something unexpected happens, but you could certainly check for updates by adding this to root's tab:

0 3 * * *	/usr/sbin/syspatch -c

syspatch(8) even mentions this very use case. Otherwise if you're dead set on applying the updates unattended, it doesn't have to be any more complicated than:

0 3 * * *	/usr/sbin/syspatch && /sbin/reboot

[bsdsource]

I was aware of the syspatch -c command but it would seem the appropriate use for that command is for an admin who is present.

I'll probably just tinker with the syspatch script and change it to reboot my machine after patches are automatically installed using a cron job. Had to tinker with it before when I was unable to use syspatch on a dated nightly build installed release of OpenBSD.

Thanks for your input.

[jggimi]

I use syspatch -c in daily.local(5) on all production servers. The output is empty except when a patch is available.

[bsdsource]

Thanks for your alternative suggestion jggimi.