search

philippemnoel / whist-whist

Whist Browser
https://whist.com
Apache License 2.0
8 stars 3 forks source link

Reenable unattended upgrades on our EC2 instances #4904

Open philippemnoel opened 2 years ago

philippemnoel commented 2 years ago

Feature Description This was suggested by @npip99 as a way to guarantee security against 0-days:

Capture d’écran, le 2021-12-16 à 16 26 31
djsavvy commented 2 years ago

Couldn't we just re-enable unattended-upgrades or something once we've made our AMI? (so in the userdata)

philippemnoel commented 2 years ago

Couldn't we just re-enable unattended-upgrades or something once we've made our AMI? (so in the userdata)

How will that translate to multicloud? I personally would prefer we handle things like this in a multicloud-compatible way, if possible, given that this project is crucial and is not super far off)

djsavvy commented 2 years ago

Every cloud provider has a concept of userdata, since you need to be able to run commands on instance startup.

https://cloud.google.com/compute/docs/instances/startup-scripts

https://docs.microsoft.com/en-us/azure/virtual-machines/user-data

philippemnoel commented 2 years ago

Every cloud provider has a concept of userdata, since you need to be able to run commands on instance startup.

https://cloud.google.com/compute/docs/instances/startup-scripts

https://docs.microsoft.com/en-us/azure/virtual-machines/user-data

Alright, then sure why not whatever works