clearlinux / distribution

Placeholder repository to allow filing of general bugs/issues/etc against the Clear Linux OS for Intel Architecture linux distribution
522 stars 29 forks source link

proposal: create motd when autoupdate is disabled #1949

Open mdhorn opened 6 years ago

mdhorn commented 6 years ago

Issue

When automatic OS updates are disabled the system can fall behind on security patches. Anyone with root access may disable automatic update via swupd autoupdate --disable on the system; there may be legitimate times for doing this, but these are generally short-lived: testing, short-term incompatibilities, etc.

Proposal

Create a MOTD file when autoupdate is disabled with a reminder message similary to:

 * Automatic OS updates disabled!
   Run `sudo swupd autoupdate --enable` to re-enable.

Remove the MOTD file when autoupdate is enabled.

mdhorn commented 6 years ago

Suggest wording similar to this new warning added the in 3.17.10 release: https://github.com/clearlinux/swupd-client/commit/076cd0a73d5941786e8aee5dc41e4bb3e50dfca1

otaviobp commented 4 years ago

There were some discussion about if we should really have this feature implemented and the the distribution project sounds like a better place to discuss that then the swupd project. If we define that we want this feature and that this should be managed by swupd, just move the ticket back

ahkok commented 4 years ago

Unless there's some IPC mechanism from swupd to something else, I would assume this belongs in the swupd-client repo. We could make it complex by making a trigger like mechanism for these events, but I think that's overdoing it a bit.

I'm +1 on the feature.