On Sun, Dec 10, 2017 at 12:22:07PM -0400, Raymond Burkholder wrote:
> >
> > I think its totally adequate to assume people want automatic security
> > updates, on all kinds of systems, unless they opt out.
>
> Security updates, yes. Automated, no. Desktops, maybe. Servers, no.
Are you advocating for having servers with known-security-buggy services
running all over the Internet, then?
> For my infrastructure, updates, of what ever kind, need to be
> incorporated into the test/build/roll-out cycle.
If you have a test/build/roll-out cycle, then you presumably have a
local mirror (and if you don't, well, why not?) Just make sure your
servers only pull from that local mirror, and you're done.
[...]
> So, as an accommodation, a flag in the preseed mechanism to
> enable/disable would be helpful. But would need to be exposed in
> maybe the expert mode menus, which I think was already mentioned.
What Raphaël was proposing is exactly that, yes.
Also, there is absolutely *no* technical difference between "the preseed
mechanism", "a low-priority debconf question", and "something in the
expert mode menus". None. Zero. Zilch.
--
Could you people please use IRC like normal people?!?
-- Amaya Rodrigo Sastre, trying to quiet down the buzz in the DebConf 2008
Hacklab
