Debian 13.5 Trixie: What Homelab Admins Should Know

Debian 13.5 was released on 16 May 2026. It’s a point release, which means no new features, no surprises - just accumulated security fixes and updated installer images. That’s exactly what you want from a server OS.

If you’ve been sitting on a Trixie install waiting to see if something breaks before you update, you can stop waiting. Here’s what changed and how to run the update without losing a Saturday.

What Actually Changed in 13.5

Point releases in Debian are boring by design. The 13.5 announcement describes it as mainly corrections for security issues, along with a few adjustments for serious problems. The security fixes were already published as separate advisories, so a server that installs updates from security.debian.org regularly has most of them already. The point release also refreshes the installer images.

The list of updated packages is long (well over a hundred). Among those a homelab server is likely to have: openssl, curl, glibc, gnutls28, systemd, sudo, rsync, qemu, lxc, docker.io, grub2 and tzdata. Read the announcement for what each fix is about.

If your server runs untrusted code (containers, other users), the security updates matter more than on a single-user box. Either way, the update itself is routine.

The Right Way to Update a Running Homelab Server

Don’t just apt upgrade on a machine serving things your household actually uses. Snapshotting first takes two minutes and gives you an easy way back.

Step 1: Snapshot in Proxmox First

If your server is a Proxmox VM or LXC container, snapshot it before touching packages:

# On the Proxmox host - replace 101 with your VM/CT ID
pvesh create /nodes/$(hostname)/qemu/101/snapshot \
  --snapname pre-debian-135 \
  --description "Before Debian 13.5 update $(date +%Y-%m-%d)"

For LXC containers:

pct snapshot 101 pre-debian-135 --description "Before Debian 13.5 update"

Takes about five seconds. Rollback takes about ten. Worth it every time.

Step 2: Run the Actual Update

# Always update the package index first
sudo apt update

# Check what's queued - don't skip this
apt list --upgradable 2>/dev/null | head -40

# Full-upgrade handles dependency changes that upgrade won't
sudo apt full-upgrade -y

# Clean up old packages
sudo apt autoremove --purge -y
sudo apt autoclean

# Check if a reboot is needed (kernel or libc updates)
if [ -f /var/run/reboot-required ]; then
  echo "Reboot required"
  cat /var/run/reboot-required.pkgs
fi

Use full-upgrade over upgrade. On a point release it almost never matters, but upgrade will silently skip packages that require dependency changes. You won’t notice until something breaks later for a completely different-looking reason.

Step 3: After the Reboot

Verify the kernel version actually changed if one was patched:

uname -r
# Compare against: https://packages.debian.org/trixie/linux-image-amd64

Check that your services came back up:

systemctl --failed
journalctl -p err -b --since "10 minutes ago"

If systemd logged errors in the first ten minutes after boot, you want to know now.

A Note on Docker Compose Stacks

Containers share the host kernel, so kernel fixes reach them as soon as the host reboots into the new kernel. Their userland is different: libraries such as glibc and OpenSSL inside a container come from its image, not from the host. Updating the host doesn’t patch them. Pull updated images and recreate the containers:

docker compose pull && docker compose up -d

Debian Trixie vs Ubuntu 24.04 LTS for Homelab: The Honest Answer

This question comes up constantly. Here’s where each one actually wins:

Show only differences

Criteria	Debian Trixie	Ubuntu 24.04 LTS
Support window	~5 years	5 yr LTS / 10 w/ Pro
Baseline RAM (minimal)	Lower ★	Higher
Newer mainline kernel	✕	✓ ★
No Snap by default	✓ ★	✕
Predictable / no surprises	✓ ★	✕
Ecosystem & docs coverage	Large	Larger ★
MicroK8s / Snap store	✕	✓ ★
Best for NAS / DNS / app server	✓	✓

Debian Trixie wins when:

• You want a server that doesn’t surprise you for 5 years
• You’re running static workloads: Pihole, Home Assistant, Jellyfin, Nextcloud, NFS/Samba
• You care about baseline memory usage (Debian’s minimal install genuinely uses less RAM)
• You want to understand exactly what’s installed - no cloud-init, no snap, no mystery services

Ubuntu 24.04 LTS wins when:

• You need a newer kernel without backport gymnastics (Ubuntu ships mainline-adjacent kernels)
• You’re deploying something with official Ubuntu support or tutorials (Canonical’s ecosystem is still larger)
• You want Landscape, MicroK8s, or anything in the Snap store
• You’re running AMD GPUs and want the latest ROCm without a fight

The argument that Ubuntu is “more stable” for homelabs is mostly mythology at this point. Ubuntu has had rougher point releases than Debian in the last two years. Trixie’s package selection is newer than Ubuntu 24.04 in most categories because it was released later. The “old boring packages” knock on Debian doesn’t apply to Trixie the way it did to Buster.

The real reason most people end up on Ubuntu is familiarity and documentation coverage. That’s a valid reason. Just don’t confuse it with a technical argument.

My take: new homelab build in 2026 should default to Debian Trixie unless you have a specific reason not to. Existing Ubuntu machines aren’t worth migrating just for the sake of it.

One Gotcha Worth Mentioning

If you’re running Debian Trixie on a machine with unattended-upgrades configured, check that it’s actually picking up security updates from the right origin. The source string changed slightly between Bullseye and Trixie:

# /etc/apt/apt.conf.d/50unattended-upgrades
# Make sure you have this origin pattern:
Unattended-Upgrade::Origins-Pattern {
    "origin=Debian,codename=${distro_codename}-security,label=Debian-Security";
};

The ${distro_codename} variable should resolve to trixie automatically, but if you copied a config from an older machine that hardcoded bullseye-security, your security updates have been silently skipped. Worth checking.

What’s Next

• Proxmox VE Homelab Setup: Install, Network, and First VM
• Build a Homelab Docker Compose Stack the Right Way
• Linux Server Security Hardening: The Practical Checklist
• Monitoring Your Homelab with Grafana and Prometheus