Ubuntu 26.04 LTS – unattended-upgrades causes sustained high CPU and I/O

📖 ~1 min read

Table of contents

1. Symptom & Impact
2. Environment & Reproduction
3. Root Cause Analysis
4. Quick Triage
5. Step-by-Step Diagnosis
6. Solution – Primary Fix
7. Solution – Alternative Approaches
8. Verification & Acceptance Criteria
9. Rollback Plan
10. Prevention & Hardening
11. Related Errors & Cross-Refs
12. References & Further Reading

Symptom & Impact

Administrators observe: Ubuntu 26.04 LTS – unattended-upgrades causes sustained high CPU and I/O. Application latency spikes during maintenance windows.

Environment & Reproduction

Issue appears on hosts with large package sets or constrained disks.

# Baseline context
lsb_release -a
ps -eo pid,ppid,cmd,%cpu,%mem --sort=-%cpu | head
iostat -xz 1 5
sudo systemctl status unattended-upgrades --no-pager
sudo journalctl -u unattended-upgrades -n 80 --no-pager

Root Cause Analysis

Heavy package downloads, decompression, and trigger processing can saturate CPU and storage, especially with concurrent backup or scan jobs.

Quick Triage

Confirm whether load source is package operations or another process.

# Quick triage
pgrep -fa unattended-upgrade
sudo tail -n 100 /var/log/unattended-upgrades/unattended-upgrades.log
vmstat 1 5
free -h

Step-by-Step Diagnosis

Measure timer overlap and package transaction duration.

# Detailed diagnosis
systemctl list-timers --all | grep -E 'apt|unattended'
sudo journalctl -u apt-daily.service -u apt-daily-upgrade.service -n 120 --no-pager
sudo grep -n 'Starting unattended upgrades script' /var/log/unattended-upgrades/unattended-upgrades.log

Solution – Primary Fix

Move update windows and tune unattended-upgrades to reduce contention.

# Primary fix
sudo systemctl edit apt-daily.timer
sudo systemctl edit apt-daily-upgrade.timer
sudo mkdir -p /etc/apt/apt.conf.d
sudo sed -i 's/^//Unattended-Upgrade::MinimalSteps/Unattended-Upgrade::MinimalSteps/' /etc/apt/apt.conf.d/50unattended-upgrades
sudo systemctl restart apt-daily.timer apt-daily-upgrade.timer

Solution – Alternative Approaches

Use manual controlled updates for performance-sensitive systems.

# Alternative
sudo systemctl disable --now unattended-upgrades
sudo apt-get update
sudo apt-get upgrade -y
sudo systemctl enable unattended-upgrades

Verification & Acceptance Criteria

CPU and I/O remain within expected thresholds during update cycles.

# Verify
systemctl list-timers --all | grep -E 'apt|unattended'
ps -eo cmd,%cpu --sort=-%cpu | head
iostat -xz 1 3
sudo unattended-upgrade --dry-run --debug

Rollback Plan

Revert timer overrides and unattended-upgrades config if updates stop running.

# Rollback
sudo systemctl revert apt-daily.timer apt-daily-upgrade.timer
sudo apt-get install --reinstall unattended-upgrades
sudo systemctl restart apt-daily.timer apt-daily-upgrade.timer unattended-upgrades

Prevention & Hardening

Schedule maintenance with low-traffic windows and monitor package job duration.

# Hardening
sudo journalctl -u unattended-upgrades --since '7 days ago' --no-pager | tail -n 200
sudo apt-get autoremove -y
sudo apt-get autoclean

Related Errors & Cross-Refs

Related signals include apt-daily overlaps, lock contention, and dpkg trigger backlogs.

Related tutorial: View the step-by-step tutorial for Ubuntu 26.04 LTS.

View all Ubuntu 26.04 LTS tutorials on the Tutorials Hub →

Browse all common problems & solutions on the Tutorials Hub.

References & Further Reading

Ubuntu unattended-upgrades guide and systemd timer administration documentation.