Upgrade packages on production server

trellis
2
  1. Never do anything manually that causes any side-effect. Meaning you can SSH into your server to look at things, troubleshoot etc, maybe restart services, but don’t changes files, change packages, etc. It defeats the purpose of Trellis.

If you want to update packages you have a few choices:

  • add a task to run apt-get upgrade (not recommended since it’s system wide but at least test on staging/dev first)
  • manually specify a version for any tasks that install a package (see apt Ansible docs)
  • add a latest=yes argument to any apt action (see Ansible docs)
  1. Yes it’s completely safe. That’s the magic of Ansible and proper server configuration management :smile:
3 Likes