diff --git a/common/files/20auto-upgrades b/common/files/20auto-upgrades
new file mode 100644
index 00000000..8d6d7c82
--- /dev/null
+++ b/common/files/20auto-upgrades
@@ -0,0 +1,2 @@
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";
diff --git a/common/init.sls b/common/init.sls
index e1ce6f2d..391e5032 100644
--- a/common/init.sls
+++ b/common/init.sls
@@ -6,10 +6,24 @@ python2:
       - python
 
 {% if grains['os'] == 'Ubuntu' %}
-python2-dev:
+ubuntu-packages:
   pkg.installed:
     - pkgs:
       - python-dev
+      - unattended-upgrades
+
+unattended-upgrades:
+  debconf.set:
+    - data:
+        'unattended-upgrades/enable_auto_updates':
+          type: boolean
+          value: "true"
+  file.managed:
+    - name: /etc/apt/apt.conf.d/20auto-upgrades
+    - source: salt://{{ tpldir }}/files/20auto-upgrades
+    - user: root
+    - group: root
+    - mode: 644
 {% endif %}
 
 pip: