Re: Constant up dates, repeated reboots
Worik Stanton <[email protected]>
| Newsgroups | gmane.org.user-groups.linux.dunedin.general |
|---|---|
| Message-ID | <[email protected]> |
On 13/07/14 15:13, Chris Burgess wrote: > We use cron-apt configured to apply security updates overnight, and notify > only for other package updates. > > Seems odd that you're getting asked to reboot though - What packages are > triggering that? Whenever linux-headers is updated. I have not been keeping notes, and I cannot be bothered hunting in logs, but it feels like three times in the last month. But what gets me is the mixture of important and trivial updates in the same stream. A security update may be a denial of service attack by a carefully crafted PDF sent through an printer driver, or it might be the heartbleed bug. Mixing the trivial and the serious leads to fatigue on my end. That is another question: What is a command line way of getting the technical details of a proposed update? W > On 13 Jul 2014 14:35, "Thomi Richards" <[email protected]> wrote: > >> Hi, >> >> On 13 July 2014 10:57, Worik Stanton <[email protected]> wrote: >> >>> It seems to me that there is "boy cries wolf" problem here, where very >>> minor issues are put into the same channel as important issues. >>> >> >> >> If you're running an LTS (like trusty, or precise before it), then I >> believe (I'd need to look this up to be 100% sure) that we only do >> non-security updates into the 'backports' repository. Generally speaking, >> it's reasonably difficult to release a package to an LTS after it's been >> released, so there's usually a good reason for it - either it's something >> that a lot of people are asking for, or it's a security update, or perhaps >> a bugfix release to solve problems people have raised since the LTS >> release. None of that helps you, f course. >> >> One thing you might try is to set up a cron job to automatically download >> (and perhaps automatically install) security updates, so the notifications >> don't bother you. In some cases (kernel drivers, init scripts, system >> daemons) you'll still need to reboot in order to get the added security, >> but it might reduce the annoyance in the meantime. >> >> Cheers, >> >> -- >> Thomi Richards >> >> _______________________________________________ >> DunLUG mailing list >> [email protected] >> http://lists.ethernal.org/listinfo/dunlug >> DunLUG Wiki - http://dunlug.kallisti.net.nz/ >> > -- Why is the legal status of chardonnay different to that of cannabis? I A^2 Dub P.o.S. [email protected] 021-1680650, (03) 4821804 Aotearoa (New Zealand) _______________________________________________ DunLUG mailing list [email protected] http://lists.ethernal.org/listinfo/dunlug DunLUG Wiki - http://dunlug.kallisti.net.nz/
signature.asc
(application/pgp-signature, 538 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJTwfs8AAoJEDgltBsVWtVcZyYIAKrX2GUdFwBNrFnV9Kr5qHVJ im978y8JVw8xRr5c7p5XMEyiyUEUeP1uyZF3CLkQ7buGJzS/yihlIaTUWAWBhMHr xQnLxC1yyGoSxiSn0JcuArd67AxR1Md6VsdRhRtAcmDw2bnMU0HxyCQfy76rVb5Q kEK8HJiVbtnWye7gtn40mtTvkIIeuQa10vO08/79+G0sWdfP97zc7HOR/VScr75I nsduOvzZKEmJJk+iFdGYxgaiqrRzuA6DqQb2L3RsrkUGaa+4UTvi9rDpY+mz2q2g F03W22+0Zs/d3nT+63dn+bwz59tFa6A+1ZdH45hJAKFC8mZovrIaTduSkmqxL1g= =JHXH -----END PGP SIGNATURE-----