Keeping Pi Updated

Why Regular Updates Matter

If your Raspberry Pi is providing services like Pi-hole, Jellyfin, Samba, and OpenVPN, keeping it updated is one of the most important maintenance tasks you can perform. Security patches, bug fixes, and performance improvements are released frequently, and applying them regularly helps keep your server stable and secure.

The commands below assume you are connected to your Raspberry Pi over SSH and are running Debian-based Raspberry Pi OS.

Step 1 - Connect to Your Pi

ssh yourusername@your-pi-ip-address

Once logged in, all updates can be completed from the terminal.

Step 2 - Refresh the Package Lists

Always begin by downloading the latest package information from your configured repositories.

sudo apt update

This command does not install anything. It simply tells your Pi what newer versions are available.

Step 3 - Upgrade Installed Packages

Install all available updates.

sudo apt upgrade -y

This upgrades existing packages without removing or replacing others.

Step 4 - Perform a Full Distribution Upgrade

Next, allow Debian to install packages that may require adding or removing dependencies.

sudo apt full-upgrade -y

This is recommended because kernel updates and other important system packages sometimes require dependency changes.

Step 5 - Remove Unneeded Packages

Clean up packages that are no longer required.

sudo apt autoremove -y
sudo apt autoclean

This helps keep your system clean and frees disk space.

Step 6 - Update Pi-hole

Pi-hole maintains its own update utility which updates the core software, web interface, and FTL engine.

pihole -up

After the update completes, you can verify everything is current by running:

pihole -v

Step 7 - Jellyfin, Samba, and OpenVPN

If these applications were installed from the official Debian repositories or their supported repositories, they were already updated during the earlier apt upgrade and apt full-upgrade steps.

You can verify their installed versions if desired.

jellyfin --version
smbd --version
openvpn --version

Step 8 - Check Whether a Reboot Is Needed

Kernel updates often require a reboot.

test -f /var/run/reboot-required && echo "Reboot required."

If a reboot is required, simply run:

sudo reboot

My Complete Update Routine

The following commands are the complete sequence I typically run whenever I update my Raspberry Pi.

sudo apt update
sudo apt upgrade -y
sudo apt full-upgrade -y
sudo apt autoremove -y
sudo apt autoclean
pihole -up
test -f /var/run/reboot-required && echo "Reboot required."

If "Reboot required." is displayed, finish with:

sudo reboot

How Often Should You Update?

For a home server, updating every few weeks is usually sufficient. If your Raspberry Pi is exposed to the Internet—such as hosting OpenVPN or any other public-facing service—consider checking for updates weekly. Frequent updates reduce the time your system is exposed to known security vulnerabilities while keeping your applications running smoothly.

Final Thoughts

Keeping a Raspberry Pi updated is straightforward once you establish a routine. Start by updating Debian packages, perform a full upgrade, remove obsolete packages, then update Pi-hole using its built-in updater. Following this order ensures the operating system is current before any application-specific updates are applied, resulting in a stable, secure server that continues providing reliable DNS filtering, media streaming, file sharing, and VPN access.