Debian security updates only installed via automatic updating

[SteveITS]

Starting a new thread, from thread https://www.3cx.com/community/threads/3cx-debian-vm-crash.79543/post-366821

just to clarify, 3CX does indeed install Debian Security Updates, however, this is only if the "Automatic Updates" option is enabled in the "Management Console >> Updates section".

and

Interesting. That's an important bit of knowledge. We've been installing 3CX updates manually just to have more fine grained control. So in order to get security updates we should change to automatic and let it self update, then change back.

and

Additional clarification would be great. We don't ever have automatic updates turned on. So if 3CX is not doing system/security updates when doing the 3CX updates manually, we either need a separate automatic update option for those, a setting for delayed automatic updates, preferably configurable, or we need to know the update cycle (daily, weekly, etc). I don't really want to go toggling automatic updates on and off but that seems to be the only option until we can get more granularity in the updates.

@ChrisC_3CX does this apply to SBC updates also? They need to be done automatically not manually?

 

[jcostlow]

If this needs to be a new thread post, I can create a new post.

I have always updated 3CX manually to have control but after seeing this I enabled automatic updates on a few to get Debian updates.

If a backup is scheduled during the automatic updates will that prevent updates from running or will the updates run after the backup finishes?

 

[ChrisC_3CX]

PBX
------
To first clarify regarding 3CX and Debian Security updates:

1. If the "Automatically update 3CX" option in the "Updates" section of the Management Console is disabled, then Debian Security updates are never performed by 3CX. Not even when you manually update 3CX by downloading and installing the updated from the Management Console's "Update" section.

2. If the "Automatically update 3CX" option is enabled, then 3CX will also check and install Debian Security updates as well as 3CX updates, both based on the update cycle and within the time frame you defined in the "Updates" section. They will of course be updated in a manner to not hinder each other.

It is worth to note that, as 3CX updates require the 3CX services to restart, so do some Debian Security Updates require the machine to restart. This does not apply for all Debian Security updates but when it does, the reboot will take place again within the defined timeframe in the updates section.

SBC
------
We don't perform updates related to the OS hosting the 3CX SBC, these have to be managed by the administrator.

Regarding your last question, we generally do not recommend having the Backup Scheduled to run within or close to the update time frame.

 

[SteveITS]

Under no circumstances do we perform updates related to the OS hosting the 3CX SBC, these have to be managed by the administrator.

That's good info also, since I'm pretty sure that's the first context I heard that "3CX does it." To reiterate then, for SBCs we should be installing OS updates periodically?

Edit: ...because I thought the goal was not to install/update things and break the 3CX software.