I find this to be most accurate with Debian
I find this to be most accurate with Debian
I find this to be most accurate with Debian
Do you work for the North Korean government or something OP? Why discourage people from keeping their systems secure?
What they are referring to is people just don't update their server because during that time they wouldn't be able to make a profit. This goes more to middle siszed businesses but happens rather often
Security is an art... the art of not giving a fuck about your data
-Op, probably
I find this to be least acurate with debian.. on other distros a patch may or may not install a new version of that package. that can bring changes to the behavior.
On debian stable the security issues are backported. So you can patch and be sure that there is no changes to the behavior of the system. It is basically the reason all vm's i manage are debian stable.
It is also true they never crash. But that is expected of linux. It is the extreme reliabillity that is the debian killer feature for me.
Me with my 'homelab' nas:
system (user-facing) package has an update? It'll auto-update overnight
dockerized service has feature updates? Let watchtower handle it with the weekly schedule
dockerized service with security patch? yeah, let's hit that this afternoon
actual system update? EVERYTHING IS GOING OFFLINE -4 SECONDS AGO FOR THIS
The system is going down NOW.
https://youtu.be/Z1TlbLfaJp8?si=nL9C6MqHUbWm0cy-
The system is down
Debian updates are not usually that big of a deal especially if you have HA configured
i'm pretty sure security updates are optional.
Just put a "these colors don't run" text in the log in
Unatended-upgrades keeps all systems securly patched. But there is a need for a reboot for kernel updates now and then.
I remember when Linux fan boys would give Windows users shit for needing to restart for updates.
"Until you crash, no on cares will reboot you."
I have two words for you, "compensating controls."
It's like goddamn magic.
yes, im guilty of this. haven't got time to update my server to v12
Isn't live patching a thing?
Meirl
But Debian has security updates and you can set up unattended upgrades.
Updates in Linux are far more tolerable. There’s really no reason to delay Debian stable, imo, unless you absolutely can’t risk some downtime.
Server rats excepted, it’s just a process that goes in the background and at most, you have to reboot the kernel.
There’s no staring at the Blue Screen of Boredom while windows update holds your machine hostage.