[tor-bugs] #31957 [Internal Services/Tor Sysadmin Team]: automate upgrades

[Tor Bug Tracker & Wiki]

#31957: automate upgrades
-------------------------------------------------+-------------------------
 Reporter:  anarcat                              |          Owner:  hiro
     Type:  project                              |         Status:
                                                 |  assigned
 Priority:  Medium                               |      Milestone:
Component:  Internal Services/Tor Sysadmin Team  |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:                                       |  Actual Points:
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------
Changes (by anarcat):

 * owner:  anarcat => hiro


Old description:

> upgrades take up a significant chunk of time every week and distract
> sysadmins (or at least me) from focusing on other projects.
>
> upgrades should be therefore automated, as much as possible.
>
> see also #31239 about upgrades and this is part of the wider "ops card
> questionnaire", where we answered no to a question about this, see
> #30881.

New description:

 upgrades take up a significant chunk of time every week and distract
 sysadmins (or at least me) from focusing on other projects.

 upgrades should be therefore automated, as much as possible.

 see also #31239 about upgrades and this is part of the wider "ops card
 questionnaire", where we answered no to a question about this, see #30881.

 checklist:

 * [x] install needrestart everywhere, in interactive mode
 * [ ] switch needrestart to automatic mode
 * [ ] install unattended-upgrades everywhere
 * [ ] fix major upgrades docs to disable unattended-upgrades during the
 upgrade run

--

Comment:

 i discussed this with hiro as part of our 2020 roadmap work. she
 volunteered to followup on this.

 i made a checklist in the ticket summary: the next step is to enable
 needrestart automatically everywhere, which we should look at doing soon.
 then we deploy unattended-upgrades everywhere, making sure we update the
 buster major upgrade docs to disable unattended-upgrades while we do major
 upgrades, on step 4.

 so, TL;DR: next step is needrestart auto everywhere.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31957#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online