Opened 4 months ago

Last modified 6 days ago

#31957 assigned project

automate upgrades

Reported by: anarcat Owned by: hiro
Priority: Medium Milestone:
Component: Internal Services/Tor Sysadmin Team Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description (last modified by anarcat)

upgrades take up a significant chunk of time every week and distract sysadmins (or at least me) from focusing on other projects.

upgrades should be therefore automated, as much as possible.

see also #31239 about upgrades and this is part of the wider "ops card questionnaire", where we answered no to a question about this, see #30881.


  • [x] install needrestart everywhere, in interactive mode
  • [ ] switch needrestart to automatic mode
  • [ ] install unattended-upgrades everywhere
  • [ ] fix major upgrades docs to disable unattended-upgrades during the upgrade run

Child Tickets

Change History (4)

comment:1 Changed 4 months ago by anarcat

Parent ID: #30881

i setup needrestart everywhere, using a puppet module. it's currently in "interactive" mode, which means it will do nothing during automated upgrades and will prompt during manual ones. my hope is to use needrestart manually for a while to see if it works well and, when it does, deploy it automated everywhere.

i also eventually want to run unattended-upgrades everywhere.

between those two tools, we should get rid of 50-75% of the manual work involved here, the remaining being reboots. those could also be automated, if we find a way for the servers to coordinate among themselves.

comment:2 Changed 3 months ago by anarcat

Parent ID: #30881

remove from parent "ops report card" thing, as i want to close that ticket and it will be open forever if it depends on all the tickets generated from it.

Last edited 6 days ago by anarcat (previous) (diff)

comment:3 Changed 2 months ago by anarcat

Description: modified (diff)

link to the auto install and questionnaire bits

comment:4 Changed 6 days ago by anarcat

Description: modified (diff)
Owner: changed from anarcat to hiro

i discussed this with hiro as part of our 2020 roadmap work. she volunteered to followup on this.

i made a checklist in the ticket summary: the next step is to enable needrestart automatically everywhere, which we should look at doing soon. then we deploy unattended-upgrades everywhere, making sure we update the buster major upgrade docs to disable unattended-upgrades while we do major upgrades, on step 4.

so, TL;DR: next step is needrestart auto everywhere.

Note: See TracTickets for help on using tickets.