Linux / Ubuntu patch management?

[relion]

I'm a Windows guy so this might sound stupid...

I just created an Azure instance of 3CX using PBXExpress. The instance uses Ubuntu / Linux.

Do I need to worry about doing updates every month the same way you do in Windows? Or is doing updates in 3CX management console sufficient?

 

[VoIPTools]

The 3CX support distribution is for Debian not Ubuntu, right?

 

[relion]

Sorry, I misspoke. Yes, it's Debian.

 

[nb]

Hi
The updates in the management console are for 3CX.
We had an option to update security updates of debian and we disabled it from the ui. We are planning a way on how to get around this.

However i forgot to mention that we can control via updates when to update debian security updates.

To do it manually follow this guide
https://www.3cx.com/blog/voip-howto/os-security-updates-debian/

We are working on a solution.

 

[relion]

Thank you for the reply Nicky.

I would love to see 3CX re-enable the security update feature, but vet the updates so all we have to do is check "Automatically update 3CX" and not have to worry about management of the underlying OS. It sounds like that's already under development so I will be eagerly awaiting

 

[nb]

Actually correction - unattended upgrades is already installed. Update 6 will expose the controlling UI for this.. By default users will have the option to allow 3CX to manage Debian security updates.
of course if they want to handle this on their own, they switch it off.

more details on this later on.

 

[relion]

Looks like update 5 is in beta, so update 6 will be coming in the following months? Good to hear there are concrete plans to bring the feature back!

 

[nb]

Update 5 will be final soon.
Actually security updates are already managed because unattended packager is added in all debian installs and set to security updates. So I was wrong earlier.

Only the visual checkbox was removed because we control it from the 3CX Updates.

However we will bring this option back to the ui because all necessary control improvements are done.. Wait for it.. Update 6 will be quicker!!!

 

[CCAdmin]

I got an email from Google Cloud services today that they are "end of life"-ing Debian 8. The 3CX PBXExpress installation uses Debian 8. They gave a link on how to upgrade the system to Debian 9, but I'm curious if any testing has been done before we upgrade the OS? Are we safe in manually upgrading/updating? Should we wait until 3CX adds it to the UI?

Am I going to need to perform these tweaks after I upgrade to get 3CX to work?:
https://www.3cx.com/blog/docs/linux-version-9-stretch/

 

[CCAdmin]

Just noticed this link:
https://www.3cx.com/blog/docs/upgrading-debian/

Is this what we should follow before GCS ends Debian 8?

 

[nb]

I got an email from Google Cloud services today that they are "end of life"-ing Debian 8. The 3CX PBXExpress installation uses Debian 8. They gave a link on how to upgrade the system to Debian 9, but I'm curious if any testing has been done before we upgrade the OS? Are we safe in manually upgrading/updating? Should we wait until 3CX adds it to the UI?

Am I going to need to perform these tweaks after I upgrade to get 3CX to work?:
https://www.3cx.com/blog/docs/linux-version-9-stretch/

Debian 8 has been hidden from Debian's own website from the moment the article was published - 1 year ago. So yes - run the script and update.

Yes you are perfectly safe to update - it takes 5 min.

Now that link you put is not the right one - you need this

https://www.3cx.com/blog/docs/upgrading-debian/
The script is this (usage documented in blog post)
https://downloads.3cx.com/downloads/misc/debian8to9/update.sh

 

[nb]

Just noticed this link:
https://www.3cx.com/blog/docs/upgrading-debian/

Is this what we should follow before GCS ends Debian 8?

the gcloud email tells you to read the instructions on how to upgrade debian 8 to 9.
I am happy to say that our script is much easier for you than you having to follow or read all this
https://www.debian.org/releases/stable/amd64/release-notes/ch-upgrading.html

Nonetheless, we are planning to make an upgrade button in the management console
If we do not manage to do this to upgrade debian 8 to 9 we WILL definitely do it to update debian 9 to 10 (for when 10 is out)

 

[CCAdmin]

Ya'll are awesome thanks!
I'll work on a patch/maintenance window right away for running the script.

 

[nb]

We are going to make a button that does this for you from the interface.
We will use this from 8-9 and when Debian 10 - buster is out we will use it to update from 9-10...