this post was submitted on 21 Jul 2024
40 points (95.5% liked)

Linux

47341 readers
1207 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I am using unattended-upgrades across multiple servers. I would like package updates to be rolled out gradually, either randomly or to a subset of test/staging machines first. Is there a way to do that for APT on Ubuntu?

An obvious option is to set some machines to update on Monday and the others to update on Wednesday, but that only gives me only weekly updates...

The goal of course is to avoid a Crowdstrike-like situation on my Ubuntu machines.

edit: For example. An updated openssh-server comes out. One fifth of the machines updates that day, another fifth updates the next day, and the rest updates 3 days later.

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 4 points 1 month ago (1 children)

I am not worried about upgrades so bad that they literally don't boot. I am worried about all the possible problems that might break my service.

[–] [email protected] 4 points 1 month ago (1 children)

You also roll back package versions. I'm not sure what problems could arise.

[–] [email protected] 3 points 1 month ago (2 children)

I can roll back with APT too, my question is how to do the staggered rollout.

[–] [email protected] 2 points 1 month ago (1 children)

You have to reboot for an image update. Hence, you can update the computers at different times and days.

[–] [email protected] 3 points 1 month ago

This doesn't seem to enhance my workflow at all. Seems I now would have to reboot, and I still need to find a separate tool to coordinate/stagger updates, like I do now. Or did I miss something?

[–] [email protected] 0 points 1 month ago* (last edited 1 month ago) (1 children)

If the os works always (atomic image based distro), and the docker container work, and both can roll back easily. What else could go wrong?

Don't overthink it :)

[–] [email protected] 1 points 1 month ago

I am not sure what you are taking about. My question is about APT.