Question

4

Good practices for updating a server? [without affecting current running services]

rated 0 times [ 4] [ 0] / answers: 1 / hits: 4200 / 1 Year ago, thu, may 4, 2023, 10:30:43

There are some servers that have a task delegated to them.
For instance, imagine a scenario where there are web servers, data servers etc. that together provide a service to a client.

Now how should I make sure the servers are up to date with new software package releases without blindly choosing an automatic update option? I may not be able to shut down a server for an update. How can I know that which update will affect what all running processes in the system, so that if the update affects a critical process pertaining to a service, I can deny that particular update or re-schedule it for some other time?

--Edited part--
My main focus is that the running service should not be affected, while the security updates for that service should be informed to the admin PC connected in LAN. Also all those updates that do not affect the running service should be automatically updated.

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

eballxeye

Add To Favorites

Follow

Total Points: 370

Total Questions: 91

Total Answers: 139

Location: Suriname

Member since Sat, Jan 1, 2022

2 Years ago

answered 1 Year ago atelti · Accepted Answer

As far as I understand your question: You want security updates automatically installed and other updates postponed until tested and you want to know if this is called "good practice"

Well, yes. This is indeed good practice.

What you need on your ubuntu-server install is the package: unattended-upgrades

running services will not be affected until restarted.

In the edited part of your question you changed the wishlist a bit:
How to update everything except the critical running services.

This one is a bit less straightforward but you could fix their current version so they will not be updated, read here about pinning