哪一个安全的自动更新的apt选项

我在man手册上做了一些研究，特别是在man apt.conf和man apt-get ，发现了以下内容。 如果你觉得我忘记了什么，请发表评论。

• 使用--only-upgrade选项，或者将aptconfiguration项APT::Get::Only-Upgrade为true
• aptconfiguration项APT::Get::force-yes设置为false
• 使用选项--no-remove ，或者将aptconfiguration项APT::Get::Remove为false

不确定只有 – --trivial-only / APT::Get::Trivial-Only在这里有帮助，需要更好的调查。

有了aptitude ，相关的作品似乎是：

• 使用带有--no-new-installs选项的safe-upgrade命令
• 将Aptitude::Delete-Unused为false，以便不会自动Aptitude::Delete-Unused使用的软件包（我可能会不同意未使用的内容）
• join-R / --without-recommends可能有帮助，需要更多的调查

更新我在旧系统上做了一些testing：

 # grep ^Ubuntu /etc/motd Ubuntu 10.04.4 LTS 

apt-get看起来比较谨慎，结果在正常的apt-get upgrade和apt-get -o APT::Get::Only-Upgrade=true --no-remove -o APT::Get::force-yes=false upgrade之间没有区别apt-get -o APT::Get::Only-Upgrade=true --no-remove -o APT::Get::force-yes=false upgrade 。

aptitude似乎更具侵略性，而“安全select”似乎在做他们的工作。 标准升级（它实际上运行safe-upgrade ）

 # aptitude -s -y upgrade W: The "upgrade" command is deprecated; use "safe-upgrade" instead. Lettura elenco dei pacchetti... Fatto Generazione albero delle dipendenze Lettura informazioni sullo stato... Fatto Reading extended state information Initializing package states... Fatto Resolving dependencies... The following NEW packages will be installed: linux-image-2.6.32-55-generic-pae{a} The following packages will be upgraded: linux-generic-pae linux-image-generic-pae linux-image-server linux-libc-dev linux-server 5 packages upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0B/32.8MB of archives. After unpacking 98.2MB will be used. Would download/install/remove packages. 

现在用“安全”选项：

 # aptitude -s -y --no-new-installs -R -o Aptitude::Delete-Unused=false safe-upgrade Lettura elenco dei pacchetti... Fatto Generazione albero delle dipendenze Lettura informazioni sullo stato... Fatto Reading extended state information Initializing package states... Fatto Resolving dependencies... The following packages have been kept back: linux-generic-pae linux-image-generic-pae The following packages will be upgraded: linux-image-server linux-libc-dev linux-server 3 packages upgraded, 0 newly installed, 0 to remove and 2 not upgraded. Need to get 0B/878kB of archives. After unpacking 0B will be used. Would download/install/remove packages. 

更类似于我想要的。

不幸的是，这两个集合都不能阻止安装新软件包，或者在使用install命令而不是upgrade / safe-upgrade升级时升级其他软件包，所以我回到了原来的方式：当它做一个潜在的，偏执的盟友不安全的操作时，可以让他/她停下来。 从某种意义上说，我有一个更好的安全网，但我不能阻止。