Updates in your box: what happens automatically and how to switch it off
Your box keeps itself up to date. Two things run every day for that, without you doing anything. The box is yours: you can switch either of them off at any time.
What happens automatically
- Debian security updates:
unattended-upgradesinstalls the security updates once a day. All other packages stay as they are. - Claude Code and Codex: A timer checks once a day for new versions and installs them. It also deletes old versions, which would otherwise take up gigabytes. It keeps the one in use and the one before.
We never restart your box for this. An agent that is working keeps working.
See what ran
systemctl list-timers euhost-update-agents.timer
journalctl -u euhost-update-agents.service
cat /var/log/unattended-upgrades/unattended-upgrades.log
Restart after an update
Some updates, such as a new kernel, only take effect after a restart. This file shows whether one is needed:
cat /var/run/reboot-required
Restart the box when it suits you: in Studio on the box's page with "Restart", or in the terminal with sudo reboot.
Switch updates off
The updates of Claude Code and Codex:
sudo systemctl disable --now euhost-update-agents.timer
Debian's security updates (choose "No" there):
sudo dpkg-reconfigure -plow unattended-upgrades
To switch them on again, use sudo systemctl enable --now euhost-update-agents.timer and choose "Yes" in the second command.
Update by hand
sudo /usr/local/sbin/euhost-update-agents
sudo apt update && sudo apt upgrade