Package updates: apt and dnf

Package updates with apt upgrade or dnf upgrade install security fixes and newer libraries on a Linux VPS you control. On a LogicWeb VPS you have root, so you choose what runs unattended, what you hold, and when you reboot. Shared hosting is different: we patch the node, and you update WordPress, plugins, and themes.

Turn on security-only unattended updates

Debian and Ubuntu include unattended-upgrades. AlmaLinux and Rocky Linux include dnf-automatic. Configure either tool for security errata only, not every available package. That keeps critical CVEs patched overnight without surprise library or database major jumps. After each run, read the mail and the log so you know what changed.

Unattended security updates belong on a VPS. They do not replace a planned window for kernels, MariaDB, or PostgreSQL. Hold those packages until you have a dump, a quiet hour, and a tested path back.

Shared hosting is a different layer

On LogicWeb shared hosting we maintain the cPanel node with LiteSpeed and CloudLinux LVE. You do not get root and you do not run apt or dnf there. Keep WordPress, plugins, and themes current, ideally with WP Toolkit on a staging copy first.

Do not install a second distro PHP beside MultiPHP on a VPS you treat like a panel stack. MultiPHP already selects the binary. A system PHP next to lsphp often points you at the wrong php.ini for hours. If you need a custom PHP build that fights the panel, a VPS is the right product; shared is where we own the node.

Window risky upgrades and reboots

Run a full apt full-upgrade or dnf upgrade only in a maintenance window, especially when MySQL or MariaDB is in the set. Midday on a live store is how a routine update becomes an outage. After library updates, tools such as needrestart on Debian list daemons still linked to old libraries. Restart those services on purpose.

Kernel packages install on disk but do not replace the running kernel until you reboot. Unattended tools can leave “restart required” mail for you to schedule. Pick a quiet time, reboot, then confirm with uname -r. If a service fails after a libc update, check that unit’s journal before running another full upgrade “to be sure.”

Same price at renewal applies to your VPS plan, and the 30-day money-back window covers hosting and VPS if the product is not the right fit. Nameservers stay ns1.logicweb.com and ns2.logicweb.com unless you have a reason to change them.