Hi! > We're running Debian Stable. By definition there shouldn't be any > large changes. In fact most updates will be security updates and I > like these to be applied as fast as possible. If something breaks, > then just downgrade to the old package (to be found in > /var/lib/apt/cache). We're not the stock exchange - if we have some > little downtime now and then it's better than running with security > problems for several weeks. Okay, then: update as soon as possible on ALL packages? > I agree. Especially the rkhunter mails should be adjusted. Versions > will always be out of date because we run Debian Stable, so checking > them makes no sense. I'd like to get mails only when there is some > action that has to be taken. I adjusted the rkhunter setup, so that package versions aren't checked anymore. I guess with the apt-update-checker we're perfectly running fine. As for the monitoring setup I already configured, that only triggers with a severity of >=error are sent out by mail. > >> And can we push forward the time that the tasks run to about 7am UTC (or at > least the time that the emails get sent). > > That should be easy if we all agree on that. > > fine with me Okay. I simply set the cron.daily-run to 7am UTC then. Delaying the mails would be a complete setup mess! Kind regards Dennis