[dokuwiki-teams] Re: [Infrastructure] Application update codex

  • From: "Dennis Plöger" <dennis@xxxxxxxxxxxxxx>
  • To: dokuwiki-teams@xxxxxxxxxxxxx
  • Date: Mon, 31 Jan 2011 20:03:30 +0100 (CET)

Hi!

> We're running Debian Stable. By definition there shouldn't be any
> large changes. In fact most updates will be security updates and I
> like these to be applied as fast as possible. If something breaks,
> then just downgrade to the old package (to be found in
> /var/lib/apt/cache). We're not the stock exchange - if we have some
> little downtime now and then it's better than running with security
> problems for several weeks.

Okay, then: update as soon as possible on ALL packages?

> I agree. Especially the rkhunter mails should be adjusted. Versions
> will always be out of date because we run Debian Stable, so checking
> them makes no sense. I'd like to get mails only when there is some
> action that has to be taken.

I adjusted the rkhunter setup, so that package versions aren't checked anymore. 
I guess with the apt-update-checker we're perfectly running fine.

As for the monitoring setup I already configured, that only triggers with a 
severity of >=error are sent out by mail.

> >> And can we push forward the time that the tasks run to about 7am UTC (or at
> least the time that the emails get sent).
> > That should be easy if we all agree on that.
> 
> fine with me

Okay. I simply set the cron.daily-run to 7am UTC then. Delaying the mails would 
be a complete setup mess!

Kind regards
Dennis

Other related posts: