Re: Install security upgrades by default in jessie?

2014-04-16 Thread Mathieu Parent (Debian)
OK,

As nobody seems for a against, let's clarify.

2014-04-11 22:31 GMT+02:00 Mathieu Parent (Debian) sath...@debian.org:
 Hello all,

 Currently, Debian, as installed by default (unless a DE is installed
 too) doesn't install security fixes automatically.

 An experienced user will activate this and keep all machines safe
 [user-updates], but others will have a less secure computer.

 Couldn't we activate security upgrades by default?

 Which tool? unattended-upgrades?

Answering myself: u-u seems the best solution.

 How/where? d-i only? debootstrap? tasksel? ...

debootrap seems too low level: it will add a additional 55MB (+16%)
because of python deps.

Proposal: install u-u from d-i (with a question of low priority, true
by default)[1], and change u-u to have
unattended-upgrades/enable_auto_updates defaults to true.

[snip]
[1]: base-installer: library.sh in configure_apt.

Regards
-- 
Mathieu Parent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cafx5sbxtapwfua6k4kjdvludjrc9o7j1y0wxhtty0n2nksm...@mail.gmail.com



Install security upgrades by default in jessie?

2014-04-11 Thread Mathieu Parent (Debian)
Hello all,

Currently, Debian, as installed by default (unless a DE is installed
too) doesn't install security fixes automatically.

An experienced user will activate this and keep all machines safe
[user-updates], but others will have a less secure computer.

Couldn't we activate security upgrades by default?

Which tool? unattended-upgrades?

How/where? d-i only? debootstrap? tasksel? ...

It was proposed for debian-edu in 2010 [debian-edu-2010], and is
currently under discussion for a wheezy cloud image
[debian-cloud-u-u].

[user-updates]: There are various ways: manual, unattended-upgrades,
cron-apt, apt-dater, home-made, ...
[debian-edu-2010]: https://lists.debian.org/debian-edu/2010/09/msg00023.html
[debian-cloud-u-u]: https://lists.debian.org/debian-cloud/2014/04/msg00044.html

Regards
-- 
Mathieu Parent


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/CAFX5sbyaGjCQudi4J+te774QMD=L3u1RAyAYWF=fGsyh5=SL=g...@mail.gmail.com