Ubuntu Patch Management

Archives Ansible Project
1

I’m wanting to manage the rollout of Ubuntu package updates across my production servers.

The workflow I have in mind:

  1. Update a test server with the latest packages
  2. Test this server for any issues, over the course of a week
  3. If all okay, deploy only these tested updates to my production servers. I don’t want any more recent (and therefore untested) updates sneaking in to my production servers.

Could anyone point me in the right direction on how to do this with Ansible?

Specifically: How can I “capture” the package versions of my test server, and install only those updates to my live systems?

Thank you!

2

Hi,

usually the simplest way is to have your own repository mirror. This way, you firt sync the mirror, upgrade test host and after internal tests, you update rest of servers. After that you can sync repo again and repeat.