[cupcakestand]

If you want to automate it just use unattended upgrades for security updates within the container.

[mschuster91]

This works for sure but is ephemeral - when you have to restart the container for unrelated reasons, the upgrades are lost.