Comment 2 for bug 1615482

Fun story: unattended-upgrades upgraded docker-engine in the middle of a day, breaking gitlab CI builds until a sysadmin figured out what happened and rebooted the machine manually.

unattended-upgrades has an option to postpone unattended reboots to some safer time (like 2AM). Perhaps a similar option to postpone unattended-upgrades themselves would help with this? It's probably fine to run other apt-daily activities (like running apt update or apt upgrade --download-only) during the day.