- auto-upgrade packages from buster-updates, proposed-updates, security, backports - split the upgrade into minimal steps (so that shutodwns during upgrades are possible) - enable logging to syslog - daily, automatic update of package lists, download and installation of upgrades