unattended upgrades or just apt udte/upgrade and reboot once a day?
reddit / selfhosted

----------------------------------------------------------------------
NeitherManner · 2023-10-26 01:23

I installed unattended upgrades through some ansible role, but I was
wondering if the update and upgrade + reboot through script would be
simpler. How would I do this script?

----------------------------------------------------------------------
thekrautboy · 2023-10-26 02:25

/r/LinuxQuestions /r/Linux4Noobs

----------------------------------------------------------------------
lvlint67 · 2023-10-26 02:56

Once a day is probably too frequent

----------------------------------------------------------------------
usrdef · 2023-10-26 03:14

Yeah, I have a self-hosted repo.

Once a day, my server runs through a huge list of different Github
repos that provide .deb files for installation. It fetches all those
.deb files, and then registers them with my apt source server. Then
all I have to do is sudo apt update and I've got the latest version of
all my programs.

Out of the once a day scan, in reality, I have a new update for a
program maybe once every two weeks.

And then a  lot of the normal packages I use haven't seen updates
since 2020 or 2022.

----------------------------------------------------------------------
bufandatl · 2023-10-26 04:42

I run updates once a week via CI/CD pipelines with my ansible
playbook. And that’s frequent enough.

----------------------------------------------------------------------
BarServer · 2023-10-26 08:12

Depends on your use-caae. If you are able to reboot automatically
without harm to your services and infrastructure: Why not?

What I like about unattended-uogradea is the blacklist. Like: Don't
update stateful services (active/passive setups) automatically and
don't reboot automatically.
Instead I have monitoring checksbthat a) the newest installed kernel
matches the running one and b) if a reboot is required.

----------------------------------------------------------------------
Alleexx_ · 2023-10-26 08:29

I do have installed unattended upgrades for most of my vms (a next
cloud VM, some docker vms, and a book stack VM which I currently
migrate to docker) and I have had no issues so far. I'm not running
unattended upgrades on my proxmox server, bc I heard that that could
break the whole system easily.

But also I have a simple backup plan, which saved me lots of times
already. But idk if the errors why I had to restore the vms was the
unattended upgrades, or just some other inconsistency. But hey,
restoring backups successfully is a great feeling😂