search

konklone / oversight.garden

Bringing together the oversight community's work.
https://oversight.garden
Creative Commons Zero v1.0 Universal
26 stars 9 forks source link

Server, patch thyself #154

Closed divergentdave closed 7 years ago

divergentdave commented 7 years ago

This will rewrite configuration files to automatically install updates. By default, the AMIs already have unattended-upgrades installed, but it just updates package lists daily. This will also download packages and upgrade them daily, plus run autoclean weekly. (as recommended at https://help.ubuntu.com/lts/serverguide/automatic-updates.html) The default configuration will only automatically install package updates in xenial-security. I've already run the three new lines in a root shell on both currently running servers. I'm going to check back in a week or so on /var/log/unattended-upgrades/ to see if things are working.

konklone commented 7 years ago

Patch thyself!

divergentdave commented 7 years ago

Woo!

2016-10-23 16:42:00,216 INFO Initial blacklisted packages:
2016-10-23 16:42:00,216 INFO Initial whitelisted packages:
2016-10-23 16:42:00,216 INFO Starting unattended upgrades script
2016-10-23 16:42:00,216 INFO Allowed origins are: ['o=Ubuntu,a=xenial-security']
2016-10-23 16:42:02,632 INFO Packages that will be upgraded: tzdata
2016-10-23 16:42:02,633 INFO Writing dpkg log to '/var/log/unattended-upgrades/unattended-upgrades-dpkg.log'
2016-10-23 16:42:05,515 INFO All upgrades installed
konklone commented 7 years ago

Nice!!