So a while back I threw Ubuntu 22 LTS on an old Surface Pro 3 and gave it to my Dad.
He loves it, but he's the type who's been burnt by updating software in the past, so he basically refuses any whenever prompted.
Been thinking about throwing Debian with Gnome on it for a while, and wondering if it's stable enough to just let updates happen automatically in the background?
I got no experience with Debian I basically jumped right on EndeavourOS as my main distro when I started using Linux full time.
I've diverged from Debian for desktop use for a few years now (no particular good reason, just for fun) but I have extended family with about the same affinity to updates as your dad.
I think automatic updates for regular end users are nice nowdays, especially if you don't customise stuff too much (DEs, wm, things like that). And even if some issues ever occur in return you get a continuously up-to-date and safer system (imho worth it). And its not like not-updating os solves the issues, it just postpones them, potentially snowballs them (and in that case I just reinstall it).
I switched my dad to Tumbleweed like 3 years ago & set weekly automatic updates, literally no issues with it.
As for serves, Im all for automatic updates in home environment, since my kinda worst case scenario is rolling back to a previous snapshot.
Maybe I could set backup services on a separate node with delayed updates ... but I need more motivation (a clusterfuck) for that.
I'm a debian-er at heart, as much as I'd praise it (and have, in other thread in this post), there's one issue that might be relevant. Almost all of this has been with Debian 10 and 11, I think it's been improved in 12, though, but I'm not sure.
See, I have sister to whom I gave laptop with Debian & Xfce. And created normal (non-admin, non-sudo) users for her as well as both of her kids. Now when they login, NetworkManager will refuse to let them use Wi-fi connection, and require them to choose a different (admin) account and type its password.
Unfortunately although I've been seeing this issue for years now, I never had an opportunity to test it properly, since it always seems to happen to non-admin users only. Also I'm not sure if NM can properly manage connections if a non-admin user creates it -- will it let other non-admin define the same connection? And I spend 99% time on a desktop (mini-pc) with ETH connection, being sudoer, and no Xfce, so I never get to "enjoy" any of these.
(This is also particularly ironic because I always set up wireguard and tell them "if you have any problem, just call me, I can fix it remotely" -- and then literally the only problem they ever have is the one I can NOT fix remotely. 😆 )
Also sometimes after login the system will bug them with "unlocking keychain" dialog which can't be closed, but that could be just side effect of the NM issue and/or just Xfce thing.
I sympathise with your Dad - everyone's had updates go bad, and it's easy to assume the "don't fix what ain't broke" mantra. But to do so is being willfully ignorant of basic computer security. And to be fair, Debian-stable is one of the least troublesome things to just let automatically update.
Debian and Ubuntu have the unattended-upgrades package which is designed to take a lot of the sting out of automatic updating. I'd recommend setting that up and you won't have to touch it again.
There's also the crontab way - "apt-get update && apt-get upgrade" at frequencies that suit you. (A check for reboot afterwards is a good idea).
You're right to be paranoid, it's unrelenting how many and varied are the ways of those wanting to take advantage. I hope you find a good compromise for your dad.
I think Debian with KDE would be better, at least for the current stable as KDE's LTS release aligns better with Debian's. I personally like the feel better, especially coming from Windows.
Ah okay, GNOME is great for touchscreen indeed. I'm just not so sure if it's a great match for Debian. I have used Debian with GNOME and I don't think ot's great at all.
It'll try to restart the affected services after updating, but doesn't always auto restart everything; sometimes it'll leave services running if you'd otherwise need to deal with dependencies and such. In that case, it'll touch a reboot-required file that'll inform you a reboot is necessary next time you log in.
Scheduling a weekly/daily reboot should take care of that, as well as applying kernel updates.
Services are automatically restarted. There is no automatic reboot by default, but that can be enabled if you really want to. Otherwise it'll keep track of whether a reboot is necessary or not.
Beware that Surface computers need a custom kernel for some features to work. It depends on the distro and the features you use, but I'd suggest you see the linux-surface project for more info. As for updates, standard Debian has a stable release model, and is one of the more stable Linux distros in general, so I don't think he would have issues with any automatic updates. I'd just say that you should try to be on standby for tech support, as Linux has many differences and is naturally a bit more prone to issues than Windows.
Debian stable? It's probably about as safe as you can get for that. Problems are rare. Bookworm is supposed to get security updates until 2028. If they keep on being as stable as they have been in my experience the only one he's likely to notice is Firefox updating to a new major version once a year.
I've been using almost exclusively Debian for over 15 years now, and experimenting with it (not stable) couple years longer. Last time I had issues booting or upgrading was loooong time ago, but I think I was using sid back then. (Yeah, I was young & restless back then! 🧓 🙃 )
Traditionally, the flipside of this was that the packages were sometimes old. Maybe 10 years ago I would still have reasons to complain about some parts being too old but nowadays I have basically no issues. Especially since most such gaps can be filled with flatpak or AppImage. (I rely on flatpak for Signal, Telegram, Minecraft, and AppImage for NeoVim and several other things.)
(My usage is development under i3+alacritty+nvim, browsing using qutebrowser (running directly from git repo), Firefox and Chromium, sometimes gaming, mostly steam or gog.)
One point, though, In my experience Firefox is updating much more often than "once a year", which is annoying because it basically goes on a strike every time.
Better than anything else, IME. My home server hasn't had a fresh install since Debian 8. It's now on 12 and each time I just dist-upgrade.
There are sometimes the odd breakage, but it's a lot less hassle than reinstalling everything. (we use EL at work and that takes months to migrate to new machines)
Before upgrading, you should check the release notes to be sure if a manual change is required (eg.: bookworm amd64). But usually, it's a easy process.
I just migrated a bunch of servers to Bookworm.
That was the first time ever I had any issues. There was a dependency loop that kept some packages from finishing installation.
Simply running apt dist-upgrade a second time fixed it.
On desktop I usually do manual installation of updates(mostly cos I don't want to get any important running program restarted), in servers I use automatic updates via cron job as part of the automation process, these two work for me.
Automatic updates is what to choose if you want someone else to fix your problems. As long as you don't run into problems introduced by automatic updates, automatic updates should be fine.