Auto apply all "Recommended System Patches"
-
Hi all,
I would like to automate applying of all available recommended system patches.
Don't ask why :)Updating "System_Patches" package to latest version - lets say that bit I can do trough CLI - Ansible
Question is how to apply it all in one go and not doing it manually trough GUI.
https://10.10.102.1/system_patches.php?all=apply&type=recommendedDo you have any idea how this could be archived ?
Tnx
-
Last time I checked, some patches require manually restarting services and/or reboot.
Seems like a recipe for disaster.
-
@elvisimprsntr
Saw that info
cron reload after apply is an option, so let's say that will be covered. -
@bozo-bogd said in Auto apply all "Recommended System Patches":
Do you have any idea how this could be archived ?
Most patches impact the GUI - so stop visiting the GUI and the question doesn't exist anymore, the answer becomes irrelevant.
But there are exceptions :
This patches a file that builds a config file for a process.
The SSH server process.
That's not something that should be auto applied (and process restarted to finish up).
That's is and stays a human decision, also known as the 'admin', because he is the one who knows how the system is used.
And for those who don't use SSH : the patch is irrelevant.So the question could go to often asked "can pfSense (itself) auto update and auto upgrade ?"
Same answer : for the moment : imho : never. -
Imo it comes down to what a user actually wants.
Some companies like Microsoft, Meraki and many ISP aim to take ownership of the hardware and effectively provided and externally managed system. Uniformity is then imposed on the user and the user gets to live in a walled garden. There appears to be a market for such products.
I didn't think this was the market segment pfsense was targeting.
-
@bozo-bogd
if you have found a solution, plz post it here ;)
