4 ms·

Then you're not patching it?

• Spivak 5y ago
  How our system works: 1. Every night we build a new freshly patched Ubuntu image. 2. Three times a week we run a deploy that rebuilds our entire infrastructure in place with the latest Ubuntu image as the base [1]. 3. Once the deploy runs we never run apt install or apt update again. So rather than server.update() we do server = server.update() [1] This sounds fancy but I promise it's stupid simple, all the complexity is in the auto scaling groups and the load balancers which we don't manage. And it's the exact same procedure to do code deploys which we do multiple times a day.