From e47cce1f4ed081316250bb5f4ba6540ceaa40b6d Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 28 Jul 2026 09:10:07 +0000 Subject: [PATCH] Update os_auto_upgrade_type default from "" to "managed-security" viam-agent now defaults to "managed-security" for os_auto_upgrade_type instead of "" (no changes). Empty or missing values are treated as "managed-security". Users who want no automatic updates must now set "disable" explicitly. Co-Authored-By: Claude Opus 4.6 (1M context) Claude-Session: https://claude.ai/code/session_01PWrq2oVBzgACupfTm5fgii --- docs/fleet/system-settings.md | 16 ++++++++-------- docs/reference/viam-agent.md | 8 ++++---- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/docs/fleet/system-settings.md b/docs/fleet/system-settings.md index 22e134ef1a..d07d0750fd 100644 --- a/docs/fleet/system-settings.md +++ b/docs/fleet/system-settings.md @@ -112,14 +112,14 @@ Control automatic operating system package updates on the machine. In the machine settings card, open **Settings** and expand **System**. Set `os_auto_upgrade_type`: -| Value | Description | -| ----------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------- | -| `"all"` | Install all available OS package updates using the OS's built-in upgrade schedule. Debian only. | -| `"security"` | Install security updates only using the OS's built-in upgrade schedule. Debian only. | -| "managed-all" | Install all available OS package updates on a schedule controlled by `viam-agent`. Works on apt-based, RPM-based, and Windows distributions. | -| "managed-security" | Install security updates only on a schedule controlled by `viam-agent`. Works on apt-based, RPM-based, and Windows distributions. | -| `"disable"` | Disable automatic OS updates. | -| `""` (empty) | Do not change the system's current update settings. This is the default. | +| Value | Description | +| ----------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------ | +| `"all"` | Install all available OS package updates using the OS's built-in upgrade schedule. Debian only. | +| `"security"` | Install security updates only using the OS's built-in upgrade schedule. Debian only. | +| "managed-all" | Install all available OS package updates on a schedule controlled by `viam-agent`. Works on apt-based, RPM-based, and Windows distributions. | +| "managed-security" | Install security updates only on a schedule controlled by `viam-agent`. Works on apt-based, RPM-based, and Windows distributions. This is the default. | +| `"disable"` | Disable automatic OS updates. | +| `""` (empty) | Treated as `"managed-security"`. To disable automatic updates, set `"disable"` explicitly. | Managed modes work on apt-based distributions (Debian, Ubuntu, Raspberry Pi OS), RPM-based distributions (Fedora, RHEL 7+, Rocky Linux, AlmaLinux, CentOS 7), and Windows (using the PSWindowsUpdate PowerShell module). diff --git a/docs/reference/viam-agent.md b/docs/reference/viam-agent.md index 39ff722502..e7442a2a46 100644 --- a/docs/reference/viam-agent.md +++ b/docs/reference/viam-agent.md @@ -82,10 +82,10 @@ In the machine settings card, open **Settings** and expand **System**: ### OS package updates -| Field | Type | Default | Description | -| ----------------------------------- | ------ | ------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -| `os_auto_upgrade_type` | string | `""` | Controls automatic OS package updates. Accepts `"all"`, `"security"`, `"managed-all"`, `"managed-security"`, `"disable"`, or `""` (leave OS defaults). The modes are described below. | -| `os_managed_upgrade_interval_hours` | float | `24` | How often `viam-agent` checks for and installs packages, in hours. Minimum value: `1`. Only applies when `os_auto_upgrade_type` is `"managed-all"` or `"managed-security"`. | +| Field | Type | Default | Description | +| ----------------------------------- | ------ | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | +| `os_auto_upgrade_type` | string | `"managed-security"` | Controls automatic OS package updates. Accepts `"all"`, `"security"`, `"managed-all"`, `"managed-security"`, `"disable"`, or `""`. If empty or missing, defaults to `"managed-security"`. The modes are described below. | +| `os_managed_upgrade_interval_hours` | float | `24` | How often `viam-agent` checks for and installs packages, in hours. Minimum value: `1`. Only applies when `os_auto_upgrade_type` is `"managed-all"` or `"managed-security"`. | The `"all"` and `"security"` modes delegate scheduling to the operating system's built-in upgrade timer (`unattended-upgrades` on Debian). The `"managed-all"` and `"managed-security"` modes let `viam-agent` control the upgrade schedule directly, which also enables upgrade support on Ubuntu and RPM-based distributions (Fedora, RHEL, Rocky Linux, AlmaLinux, CentOS).