// Activate the apt daily upgrade mechanism if not already enabled
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";

// Allow upgrades from standard distro origins
Unattended-Upgrade::Allowed-Origins {
    "${distro_id}:${distro_codename}";
    "${distro_id}:${distro_codename}-updates";
};

// Scope auto-upgrades to guest-agent only
Unattended-Upgrade::Package-Allowlist {
    "guest-agent";
};

// Safety options
Unattended-Upgrade::AutoFixInterruptedDpkg "true";
Unattended-Upgrade::MinimalSteps "true";