Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On my own computer, I have been used to run apt-get upgrade directly for years.

But few days ago I have a chance to admin a ubuntu server. I guess my old habit is bad.

Should/how I update security updates only to minimize dependence issus?

And how can I confirm the source is trustworthy(by SHA or other hash), keep the middleman attack away?

share|improve this question
Ubuntu repositories are GnuPG-signed; apt-get will verify the signature each time you do an 'update'. – sendmoreinfo Dec 17 '11 at 23:10

Using apt-get is fine on an Ubuntu system. If you only want to include security related updates, make sure that you don't have the lucid-updates distro in your source list (i.e. only have lucid and lucid-security). All the package tools will verify GPG signatures and SHA hashes by default, and will explicitly prompt you to continue if they are unable to do so.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.