Slightly OT: Which distribution (for being a Docker host) has the best unattended security updates incl. reboots?

Requirements:

- Quick to setup, best would be a one-liner and not something I have to google everytime

- Update and reboot times can be slightly randomized, so the entire cluster won't go down