I see that the GUI configuration for update-manager has a maximum check interval of once per day. I'm sure Canonical thought about this carefully, but these days I don't want to be without a potentially important update for as long as 24 hours.
How can I set up my desktop system so that it:
- Automatically applies security updates
- Checks for security updates more frequently than once per day (if this can be done via push notifications rather than checking regularly, perhaps better)
- Promptly graphically prompts for reboot if necessary (for bonus points: UI should explain why the reboot is needed, e.g. reference to updated package changelogs / CVEs)
Should I use unattended-upgrades, or run update-manager from a crontab, or something else? How can I configure these tools to achieve what I want?