Closed pvgenuchten closed 3 years ago
can via playbook
Login to system, run security patch (security patch is already included in the bootstrap playbook)
We should run a sys state evaluation at 24.00 to see which aspects need to be updated.
It's an emerging security aspect that the containerisation increases the numbers of items to check
Done, also documentation: https://apitestdocs.geonovum.nl/howto/howto_system/
Every now and then the OS and the version of docker engine need to be updated to the latest version at the VM host.
I'm not sure if this can be automated. At least a howto article should describe the procedure.
Previously we incidentally had the experiences that updating the docker engine version corrupted some of the containers. Corrupted services would need to be redeployed. Worse case scenario is to require to restore the contents of a mounted volume from a backup (for now no backup option is included).