Debian with unattended-upgrades and a [weekly] scheduled restart has worked for me for a long time.

It should basically be a prompt with a default of Y on first-time setup at this point.