I am using unattended-upgrades across multiple servers. I would like package updates to be rolled out gradually, either randomly or to a subset of test/staging machines first. Is there a way to do that for APT on Ubuntu?

An obvious option is to set some machines to update on Monday and the others to update on Wednesday, but that only gives me only weekly updates…

The goal of course is to avoid a Crowdstrike-like situation on my Ubuntu machines.

edit: For example. An updated openssh-server comes out. One fifth of the machines updates that day, another fifth updates the next day, and the rest updates 3 days later.

  • remram@lemmy.mlOP
    link
    fedilink
    arrow-up
    2
    ·
    3 months ago

    I can roll back with APT too, my question is how to do the staggered rollout.

    • GravitySpoiled@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 months ago

      You have to reboot for an image update. Hence, you can update the computers at different times and days.

      • remram@lemmy.mlOP
        link
        fedilink
        arrow-up
        2
        ·
        3 months ago

        This doesn’t seem to enhance my workflow at all. Seems I now would have to reboot, and I still need to find a separate tool to coordinate/stagger updates, like I do now. Or did I miss something?

    • GravitySpoiled@lemmy.ml
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      edit-2
      3 months ago

      If the os works always (atomic image based distro), and the docker container work, and both can roll back easily. What else could go wrong?

      Don’t overthink it :)