I would expect some logs too. Also, this machine is only running Octane and Queue worker. DB, Cache and everything else are on different machines in cloud.
Indeed there are unattended upgrades enabled, and I think you made very right guess with that. There was an update at that time:
sudo cat /var/log/unattended-upgrades/unattended-upgrades.log
2025-09-12 06:34:29,276 INFO Starting unattended upgrades script
2025-09-12 06:34:29,277 INFO Allowed origins are: o=Ubuntu,a=noble, o=Ubuntu,a=noble-security, o=UbuntuESMApps,a=noble-apps-security, o=UbuntuESM,a=noble-infra-security
2025-09-12 06:34:29,277 INFO Initial blacklist:
2025-09-12 06:34:29,277 INFO Initial whitelist (not strict):
2025-09-12 06:34:44,024 INFO Removing unused kernel packages: linux-headers-6.8.0-64
2025-09-12 06:34:54,390 INFO Packages that were successfully auto-removed: linux-headers-6.8.0-64
2025-09-12 06:34:54,391 INFO Packages that are kept back:
2025-09-12 06:34:54,711 INFO Packages that will be upgraded: apport apport-core-dump-handler cloud-init iputils-ping iputils-tracepath jq libgnutls30t64 libjq1 libperl5.38t64 libpq5 libpython3.12-minimal libpython3.12-stdlib libpython3.12t64 libsqlite3-0 libssh-4 libtiff6 libudisks2-0 libxml2 linux-headers-generic linux-headers-virtual linux-image-virtual linux-libc-dev linux-tools-common linux-virtual nginx nginx-common perl perl-base perl-modules-5.38 postgresql-client-16 python3-apport python3-problem-report python3-urllib3 python3.12 python3.12-minimal sudo udisks2
2025-09-12 06:34:54,711 INFO Writing dpkg log to /var/log/unattended-upgrades/unattended-upgrades-dpkg.log
2025-09-12 06:39:36,651 INFO All upgrades installed
2025-09-12 06:40:05,228 INFO Packages that were successfully auto-removed: linux-headers-6.8.0-60 linux-headers-6.8.0-60-generic linux-image-6.8.0-60-generic linux-modules-6.8.0-60-generic linux-tools-6.8.0-60 linux-tools-6.8.0-60-generic
2025-09-12 06:40:05,228 INFO Packages that are kept back:
However, looking at list of upgraded packages, I do not understand which upgrade exactly became the reason for restarting. There is also this logfile:
sudo cat /var/log/unattended-upgrades/unattended-upgrades-dpkg.log
<big part of log I did not include; there is tail>
Restarting services...
systemctl restart laravel-octane.service laravel-queue-db.service
Service restarts being deferred:
systemctl restart apt-daily-upgrade.service
/etc/needrestart/restart.d/dbus.service
systemctl restart unattended-upgrades.service
No containers need to be restarted.
No user sessions are running outdated binaries.
No VM guests are running outdated hypervisor (qemu) binaries on this host.
Log ended: 2025-09-12 06:39:22
Log started: 2025-09-12 06:39:23
(Reading database ... 138682 files and directories currently installed.)
Preparing to unpack .../sudo_1.9.15p5-3ubuntu5.24.04.1_amd64.deb ...
Unpacking sudo (1.9.15p5-3ubuntu5.24.04.1) over (1.9.15p5-3ubuntu5) ...
Setting up sudo (1.9.15p5-3ubuntu5.24.04.1) ...
Processing triggers for man-db (2.12.0-4build2) ...
Processing triggers for libc-bin (2.39-0ubuntu8.5) ...
Restarting services...
Service restarts being deferred:
systemctl restart apt-daily-upgrade.service
/etc/needrestart/restart.d/dbus.service
systemctl restart unattended-upgrades.service
No containers need to be restarted.
No user sessions are running outdated binaries.
No VM guests are running outdated hypervisor (qemu) binaries on this host.
Log ended: 2025-09-12 06:39:27
Log started: 2025-09-12 06:39:28
(Reading database ... 138682 files and directories currently installed.)
Preparing to unpack .../libssh-4_0.10.6-2ubuntu0.1_amd64.deb ...
Unpacking libssh-4:amd64 (0.10.6-2ubuntu0.1) over (0.10.6-2build2) ...
Setting up libssh-4:amd64 (0.10.6-2ubuntu0.1) ...
Processing triggers for libc-bin (2.39-0ubuntu8.5) ...
Restarting services...
systemctl restart fwupd.service laravel-octane.service laravel-queue-db.service packagekit.service unscd.service
Job for laravel-queue-db.service failed.
See "systemctl status laravel-queue-db.service" and "journalctl -xeu laravel-queue-db.service" for details.
Job for laravel-octane.service failed.
See "systemctl status laravel-octane.service" and "journalctl -xeu laravel-octane.service" for details.
It is more interesting. Lines with services restart are repeating several times in short span of time. Like, system tried to restart services after successful upgrade of many packages. There is list of packages: postgresql-client-16 libpq5 libxml2 libgnutls30t64 libsqlite3-0 libtiff6 libssh-4. After each upgrade there is that log line:
Restarting services...
systemctl restart fwupd.service laravel-octane.service laravel-queue-db.service packagekit.service unscd.service
I think I am going to disable unattended upgrades for now, but here is the question: why some unrelated package update results in services restart? It's not like my service is directly dependent on postgres-client, libsql, libxml etc.
Thank you for the hint!