auto install security updates

domainjoin.sh

@@ -9,13 +9,16 @@ if [ -f /etc/debian_version ]; then
     wget -O - http://repo.pbis.beyondtrust.com/apt/RPM-GPG-KEY-pbis | apt-key add - 
     wget -O /etc/apt/sources.list.d/pbiso.list http://repo.pbis.beyondtrust.com/apt/pbiso.list 
     apt update
-    apt install -y pbis-open sudo nano htop nload iperf3 iperf3 open-vm-tools
+    apt install -y pbis-open sudo nano htop nload iperf3 iperf3 open-vm-tools unattended-upgrade
 elif [ -f /etc/redhat-release ]; then
     yum install -y wget epel-release
     wget -O /etc/yum.repos.d/pbiso.repo http://repo.pbis.beyondtrust.com/yum/pbiso.repo
     yum clean all
     yum install -y pbis-open sudo nano htop nload iperf3 bind-utils open-vm-tools yum-cron
-    
+    sed --in-place "s/^update_cmd\ =\ default/update_cmd\ =\ security/" /etc/yum/yum-cron.conf
+    sed --in-place "s/^apply_updates\ =\ no/apply_updates\ =\ yes/" /etc/yum/yum-cron.conf
+    systemctl enable yum-cron
+    systemctl start yum-cron 
 else
     echo "Unable to determine linux distro"
     exit