Geonovum / ogc-api-testbed

OGC API Testbed Template - Stable
https://apitestbed.geonovum.nl
GNU General Public License v3.0
4 stars 4 forks source link

describe howto update OS and docker engine at the VM host #33

Closed pvgenuchten closed 3 years ago

pvgenuchten commented 3 years ago

Every now and then the OS and the version of docker engine need to be updated to the latest version at the VM host.

I'm not sure if this can be automated. At least a howto article should describe the procedure.

Previously we incidentally had the experiences that updating the docker engine version corrupted some of the containers. Corrupted services would need to be redeployed. Worse case scenario is to require to restore the contents of a mounted volume from a backup (for now no backup option is included).

pvgenuchten commented 3 years ago

can via playbook

Login to system, run security patch (security patch is already included in the bootstrap playbook)

We should run a sys state evaluation at 24.00 to see which aspects need to be updated.

It's an emerging security aspect that the containerisation increases the numbers of items to check

justb4 commented 3 years ago

Done, also documentation: https://apitestdocs.geonovum.nl/howto/howto_system/