Sign in

how fast do you really patch a small cloud footprint? ours is monthly

maintenanceoperationspatching51 replies · 388 views · started
Reply
  1. Ivan Rahman
    @looseshed-3r5

    our patching is motnhly and entirely manual, which means some servers get skipped for months :D I want to fix this without breaking things. how do you structure rings, approvals and reboots?

    Theres also the reobot question. Some of these servers havent been restarted in a very long time, and everyone is scared of what happens if we do. How do you introduce regular reboots without causing a panic the first time?

    2
  2. Soren M.
    @sorenm141

    uhh do you have a staging or canary group that mirrors production roles?

    1 1 helpful
  4. Ava Pereira
    @ava_subnet
    in reply to @looseshed-3r5

    ahh classic agree teh window with app owners once and put it in writing, including what happens if a patch breaks smth. It turns every monthly argument into following a process.

    26 0 helpful
  5. Aiden Pereira
    @apereira

    Track compliance, not intentions. A simple report of last patch date and pending reboots per server shows which machines silently fell behind.

    1 2 helpful
  6. Dario
    @dariop616

    btw unrelated but anyone elses coffee machine also judging them today

    0 2 helpful
  7. Soren M.
    @sorenm141

    @packetsage what did u end up doing in the end ?

    12 2 helpful
  10. Dima B.
    @voxel_den-19g

    reboots are teh hard part ;) tools like needrestart (Debian/Ubuntu) or needs-restarting -r (RHEL family) tell u whether a reboot is actually required, so u only reboot when needed.

    1 0 helpful
  12. Liv Mendes
    @liv_byte

    ahh classic make a bacukp before u touch the router, learned that the hard way

    4 2 helpful
  14. Dima B.
    @voxel_den-19g

    +1 same here. @voxel_den-19g what did u end up doing in teh end

    1 0 helpful
  15. Pia
    @pia.moreau

    👀

    0 2 helpful
  17. Aiden Pereira
    @apereira
    in reply to @apereira

    oh ive been there lol exact same thing happened to my gaming rig last month. is operations even worth bothering with or should i just leave it

    1 0 helpful
  18. Dima B.
    @voxel_den-19g

    lol same thing happened to me separate security updates from everything else. Unattended security-only updates are fairly low risk on Debian/Ubuntu (unattended-upgrades with only the security origin enabled), while feature updates go through the window.

    2 0 helpful
  20. Pia
    @pia.moreau

    WOWWW finally got it working, thx everyone xD ok this thread just saved my weekend

    0 1 helpful

Reply to this topic

Sign in or create an account to reply.