3 ms·

Looking at the security page, which generally points to the announce list - and a sample (serious configuration) issue: https://groups.google.com/forum/m/#!top

by e12e 8y ago

Looking at the security page, which generally points to the announce list - and a sample (serious configuration) issue: https://groups.google.com/forum/m/#!topic/nix-security-announce/qrDU0KH_ZRk https://groups.google.com/forum/m/#!topic/nix-security-annou... It's not immediately clear to me that there's an "lts" or "stable" that would allow easy security only updates, preferably in an automatic fashion? Or is this one issue a special case where a) the admin must see the announcement, and b) manually act to secure systems?

tadfisher 8y ago
Updates are committed to the stable nixpkgs branch. These then propagate through the channel. NixOS has a configuration option to enable automatic upgrades[1], which periodically pulls the latest nixpkgs checkout from the channel you're following, rebuilds the system, and switches to that configuration. [1]: https://nixos.org/nixos/manual/#sec-upgrading-automatic https://nixos.org/nixos/manual/#sec-upgrading-automatic