Keeping Debian up to date

[Voipy]

With the increasing speed at which vulnerabilities are being picked up, we want to stay ahead of any issues and keep Debian as up-to-date as possible.

Is it always safe to run the below? Should we exclude anything to be safe?

sudo apt updates
sudo apt upgrade

 

[yaboc]

With the increasing speed at which vulnerabilities are being picked up, we want to stay ahead of any issues and keep Debian as up-to-date as possible.

Is it always safe to run the below? Should we exclude anything to be safe?

sudo apt updates
sudo apt upgrade

good question. i always backup before doing apt update && apt upgrade -y and obviously fspbx upgrades and so far everything works fine, but it'd be good to hear feedback from @pbxgeek

 

[pbxgeek]

I’d definitely back up before any major OS update. It's hard to predict what each update will do or whether it might break dependencies. I'd avoid updating PHP. We addressed the vulnerability as soon as it was announced with a coordinated FS PBX update. Some people updated manually too soon, which caused some services to stop working. Nothing serious happened; they just needed a restart. The FS PBX update handles that automatically, so there are no issues.

 

[Voipy]

yeah I always back up as a matter of course. We used to leave debian alone in the past for long (way too long really) times. But with all the crap happening out there we now want to start updating regularly. Damned if you don't - and sometime if you do I guess.

 

[gw22]

Definitely interested in this - afraid to update in fears of breaking something

 

[gw22]

I’d definitely back up before any major OS update. It's hard to predict what each update will do or whether it might break dependencies. I'd avoid updating PHP. We addressed the vulnerability as soon as it was announced with a coordinated FS PBX update. Some people updated manually too soon, which caused some services to stop working. Nothing serious happened; they just needed a restart. The FS PBX update handles that automatically, so there are no issues.

"Avoid updating PHP" - if you do this apt update && apt upgrade -y , does it not upgrade PHP? If so, how do we prevent?

 

[Voipy]

First run:

apt-mark hold "php*"

then update

Then, if you want:

apt-mark unhold "php*"

 

[gw22]

@Voipy thank you