Hacker News Reader

If you want to automate it just use unattended upgrades for security updates within the container.

This works for sure but is ephemeral - when you have to restart the container for unrelated reasons, the upgrades are lost.