[tor-bugs] #31957 [Internal Services/Tor Sysadmin Team]: automate upgrades

[Tor Bug Tracker & Wiki]

#31957: automate upgrades
-------------------------------------------------+-------------------------
 Reporter:  anarcat                              |          Owner:  hiro
     Type:  project                              |         Status:
                                                 |  merge_ready
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tpa-roadmap-february tpa-roadmap-    |  Actual Points:
  march                                          |
Parent ID:                                       |         Points:  0.5
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Old description:

> upgrades take up a significant chunk of time every week and distract
> sysadmins (or at least me) from focusing on other projects.
>
> upgrades should be therefore automated, as much as possible.
>
> see also #31239 about auomated installs and this is part of the wider
> "ops card questionnaire", where we answered no to a question about this,
> see #30881.
>
> checklist:
>
> * [x] install needrestart everywhere, in interactive mode
> * [x] switch needrestart to automatic mode
> * [ ] install unattended-upgrades everywhere
> * [ ] fix major upgrades docs to disable unattended-upgrades during the
> upgrade run
> * ~~[ ] automate reboots~~ see #33406 instead

New description:

 upgrades take up a significant chunk of time every week and distract
 sysadmins (or at least me) from focusing on other projects.

 upgrades should be therefore automated, as much as possible.

 see also #31239 about auomated installs and this is part of the wider "ops
 card questionnaire", where we answered no to a question about this, see
 #30881.

 checklist:

 * [x] install needrestart everywhere, in interactive mode
 * [x] switch needrestart to automatic mode
 * [x] install unattended-upgrades everywhere
 * [ ] fix major upgrades docs to disable unattended-upgrades during the
 upgrade run
 * ~~[ ] automate reboots~~ see #33406 instead

--

Comment (by anarcat):

 hiro deployed unattended upgrades everywhere last week, so this is almost
 done.

 next step here is to fix the docs to mention that we *have* this running
 (and deprecate the tor-prepare-upgrades stuff) and fix the major upgrades
 docs, as documented in the summary.

 we should also make sure that unattended-upgrades follows backports
 upgrade. i installed smartd from backports everywhere in #33684 (on new
 servers) and it would be important to have that work.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31957#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online