Is it ok to do an apt-get update/upgrade once in a while, or does trellis expect things to be more static? I’m asking because I ran lynis, and it reported a package with security issues.

It should be fine, but who knows. That’s why dev/staging servers are important to test these out beforehand. Trellis only expects the main packages to be fairly stable. The good thing is that most of these packages will get minor version updates in a backwards compatible manner. ie: it’s fine to d…

That being said: it’s very important to update your software consistently and stay up to date with security patches But how, if not with apt-get?

Roots Discourse

Apt-get update once in a while

trellis

swalkinshaw January 16, 2018, 5:20pm 4

See Is it safe to update remote server packages? for more specific solutions.

1 Like