4 ms·
What I would find more useful is a way to do something like: $ apt-get upgrade --security-only on a normal ubuntu distribution. The key thing for me is to
by d_theorist 11y ago
What I would find more useful is a way to do something like:
$ apt-get upgrade --security-only
on a normal ubuntu distribution. The key thing for me is to have as little change as possible from the time the machine is initially provisioned.
- kpcyrd 11y agodebian supports something like this, if you remove the jessie-updates line and only have the release source (which is never changed) and the security source in /etc/apt/sources.list I'm not sure if this is recommended, I could imagine that some security fixes might be based on updated packages from jessie-updates. You might also run into fixed bugs by ignoring stability fixes, personally I don't think it's worth it.
- d_theorist 11y agoYou are probably right. Interesting though; thanks.
- iam-TJ 11y agosudo /usr/bin/unattended-upgrade This will only use the ${dist}-security target. Most systems should have this installed and available. The default configuration is at: /etc/apt/apt.conf.d/50unattended-upgrades It is configured as a system service that runs automatically at shutdown.
- d_theorist 11y agoAh, nice. Thanks.