Managing security upgrades?
The number of (Ubuntu) servers I have is growing steadily, and with it approaching 10 (including VM's), I'm starting to look for a solution to manage security upgrades beyond the apt-get update && apt-get upgrade mantra.
What are other people using for this? I know RH Satellite/Spacewalk is nice but it's only for RHEL-derivates.
Already looked at unattended upgrades, but I'd like something with a little more options and centrally managed (I have redundant web frontends so they should be upgraded sequentially).
Are there any standard solutions out there (not landscape)? Or should I script it from scratch?
Comments
5 comments postedhttps://code.google.com/p/debmarshal might be the thing for you
The is some sort of deb support for spacewalk:
https://fedorahosted.org/spacewalk/wiki/Deb_support_in_spacewalk
I looked at this before, but it only reports available updates, it was never finished actually...
I would suggest looking at apt-dater. Its a nice console frontend to easily check for upgrades of individual servers or groups of servers. Pending Updates are displayed and installed with the press of a key.
It also available in the repositories of Debian and Ubuntu.
Apt-getting it now to test!