There should be an unattended upgrades service

  • Done
  • quality assurance status badge
Details
6 participants
  • Arne Babenhauserheide
  • Ludovic Courtès
  • Matthew Brooks
  • Tobias Geerinckx-Rice
  • pelzflorian (Florian Pelz)
  • Ricardo Wurmus
Owner
unassigned
Submitted by
pelzflorian (Florian Pelz)
Severity
normal
P
P
pelzflorian (Florian Pelz) wrote on 15 Jul 2019 12:17
(address . bug-guix@gnu.org)
20190715101711.gejdpqkyaq2yri3p@pelzflorian.localdomain
Some users (want to) forget about regularly upgrading Guix System.
There should be an unattended upgrades service. Some requirements
come to mind for its configuration:

1) Some users may want their unattended upgrades service to take care
just of reconfiguring from a recent checkout and some may want it to
take care of updating users’ ~/.config/guix/current and ~/guix-profile
profiles.

2) Maybe there should be libnotify integration for unattended
upgrades if the user uses a desktop environment.

3) Updates may fail if there is no internet connection. Some users
may *not* want upgrades on metered internet connections. Some users
may *not* want upgrades over untrusted connections.

This report is a followup to Ludo’s proposal at
https://issues.guix.gnu.org/issue/36636 to add such a service and
add it to %desktop-services, making it the default setting. Such a
change in defaults could be a bad surprise for some users and should
not go unnoticed, I think.

Regards,
Florian
M
M
Matthew Brooks wrote on 16 Jul 2019 09:29
(address . bug-guix@gnu.org)
20190716022907.534539fc@mailbox.org
If an automatic updater is included by default (which I think would be a rather bad idea), it absolutely needs to be very easy for a user to disable.
GuixSD gives users a hell of a lot more control over the system and software and such than most other operating systems do, and that's a great strength. Leaving all those decisions in the hands of an automatic updating algorithm seems like a great way to discourage users from actually using the full power of the system and instead treat guix as just another generic distribution that decides things for the users instead of letting them decide for themselves. Especially since guix already lets the user know if it's older than about a week or so, which is probably plenty for anything other than the most demanding of security needs.
Further, an automatic upgrade service wouldn't really add anything useful, since cron jobs and scripts can already be used to automate upgrading if one so desires. Additionally, anyone who is able to install the system to begin with would easily be able to set up such a cron job if they wish, since creating the system config file takes more work than making a small bash script with the few commands needed to update everything.
R
R
Ricardo Wurmus wrote on 16 Jul 2019 14:46
(name . Matthew Brooks)(address . matthewfbrooks@mailbox.org)(address . 36659@debbugs.gnu.org)
87sgr6gn9h.fsf@elephly.net
Hi Matthew,

Toggle quote (4 lines)
> If an automatic updater is included by default (which I think would be
> a rather bad idea), it absolutely needs to be very easy for a user to
> disable.

Of course. It would be as simple as removing a service from the list of
default system services in the operating system configuration.

Toggle quote (4 lines)
> Further, an automatic upgrade service wouldn't really add anything
> useful, since cron jobs and scripts can already be used to automate
> upgrading if one so desires.

I disagree. We provide a whole lot of services that aren’t strictly
necessary in order to satisfy what we think are reasonable user
expectations. An upgrade service that’s easily removed or configured
seems nicer to me than having to muck about with cron jobs and scripts
by myself.

--
Ricardo
A
A
Arne Babenhauserheide wrote on 16 Jul 2019 15:23
(address . bug-guix@gnu.org)
87wogiglk8.fsf@web.de
Ricardo Wurmus <rekado@elephly.net> writes:

Toggle quote (10 lines)
>> Further, an automatic upgrade service wouldn't really add anything
>> useful, since cron jobs and scripts can already be used to automate
>> upgrading if one so desires.
>
> I disagree. We provide a whole lot of services that aren’t strictly
> necessary in order to satisfy what we think are reasonable user
> expectations. An upgrade service that’s easily removed or configured
> seems nicer to me than having to muck about with cron jobs and scripts
> by myself.

I would most of all like to see a CVE-checking service that tells me
about security updates. Sometimes I’ll ignore updates for a few weeks
because I have a setup that absolutely must keep working, because I
could not even afford half an hour of brokenness, but I must still do
security updates, and I would like Guix to tell me about those.

Also it would be interesting to have an auto-update service that only
updates /run/current-system

That way users would only have to worry about their personal
installations, but not about the underlying base-system. I think there
are many users who would be most happy if they never had to sudo.

Best wishes,
Arne
--
Unpolitisch sein
heißt politisch sein
ohne es zu merken
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE801qEjXQSQPNItXAE++NRSQDw+sFAl0tz9kACgkQE++NRSQD
w+tldBAAvCFKbMb3qXAtYmPDerOJCbA4U6kxQCfzNcK5rSv5W0/t77P4rRH6Yxmu
IU6fPzlczkHhx0hjUcU6g91tZM+GIWInUtiUh1L7IFsiCbW82XySNHTBmEG4vO58
2bs/QbB6Sr8PQfXOQPVAeoNd2iFHY2WGd2Qh1wduzDRbxcK99MzeCmvfPg9eOKct
+vo9IpfHswfypSXrRo6ZTj7xGqLNknS5JZikONuObrX/aWJ+pd0r6e+sn9a79E5E
7QAQ+1XX5PEbE9JWdJhhuuPz5lJtqbr20v3mNNggxVMgefN7s6omVo+5u9dVF6Bp
ahZYlnHBv16erqjaVpZEbTbK+DSW2o9vieRTsi2gakIEQHZaKiEJ0wAa3Y6o2gXM
C0FgEs6z91Wj5yMJd9rlu0CZjVYyFcZZcwPPS9vnm4SjVl//oIR+07warQ4xKDBB
4roBh/lKVyCjbiZA4m/9oIUDvfbNQDCQb9o5XTWUY0gvymmoWsl2c0uUUjcGGpxy
0nqOP5JjA5UwFl/kNN1HtZZAI3zf73J0CV+xgPCaYHyO6uH18NedrfguLdXLegmO
tAqewablsPsgKxSt0xk/23T2EvdapEAb2NYP2GzzjSkWsUgvfcKIV9WBQpEjlWoj
NoDpptpIOtH6JJEmeAut8k47qV+ydp6SF0m+Quf9HbKAL3XDjG2IswQBAQgAHRYh
BN0ovebZh1yrzkqLHdzPDbMLwQVIBQJdLc/ZAAoJENzPDbMLwQVIbSAD/2lC0uF3
unhvMrRlQaxpfS2+ltqUJCOqxfJXs6K93yEr3DE4L6SFN5nrEUa+CIfTrSBMRH1T
AKRBvRVm2tTqI5mnNQkK0D4s+mbFJ3dkuKLRBfKPG/P8joXzz+QWWukMd0mTe2XT
IxXrXYh+JZKKtryXasqx5ztHy7ZjaN244syp
=332J
-----END PGP SIGNATURE-----

P
P
pelzflorian (Florian Pelz) wrote on 16 Jul 2019 16:04
(address . 36659@debbugs.gnu.org)
20190716140412.b24vfd5jfr6vgydg@pelzflorian.localdomain
This is just my opinions/ideas:

On Tue, Jul 16, 2019 at 02:29:07AM -0500, Matthew Brooks wrote:
Toggle quote (4 lines)
> If an automatic updater is included by default (which I think would
> be a rather bad idea), it absolutely needs to be very easy for a
> user to disable.

Guix System should target non-power users too. It is already much
easier to install packages and services than in Debian, especially if
no sudo were ever needed as Arne wrote in his reply.

Perhaps if the unattended upgrades service were not included in
%desktop-services but selectable in the Guix System graphical
installer and selected by default, users would feel more in control
and existing users would not be surprised.

If unattended-upgrades-service-type checked with NetworkManager for
metered connections *and* if substitutes are available *and* the power
user can configure a blacklist/whitelist of trusted connections, the
only downside I see is less internet bandwidth during upgrades and
slightly more battery drain, but security is more important and the
more responsible default.

Maybe make it configurable if upgrades should be performed when on
battery.

Maybe users could stop an upgrade via libnotify notification?

On Tue, Jul 16, 2019 at 03:23:35PM +0200, Arne Babenhauserheide wrote:
Toggle quote (7 lines)
> I would most of all like to see a CVE-checking service that tells me
> about security updates. Sometimes I’ll ignore updates for a few weeks
> because I have a setup that absolutely must keep working, because I
> could not even afford half an hour of brokenness, but I must still do
> security updates, and I would like Guix to tell me about those.
>

A CVE notification service would be right for %desktop-services, I
think.

Regards,
Florian
L
L
Ludovic Courtès wrote on 24 Jul 2019 18:35
(name . Arne Babenhauserheide)(address . arne_bab@web.de)(address . 36659@debbugs.gnu.org)
87r26fwfto.fsf@gnu.org
Hi,

Arne Babenhauserheide <arne_bab@web.de> skribis:

Toggle quote (3 lines)
> Also it would be interesting to have an auto-update service that only
> updates /run/current-system

Yes, that’s what we’re talking about here, or at least what I had in
mind. :-)

Ludo’.
T
T
Tobias Geerinckx-Rice wrote on 30 Nov 2020 17:40
There should be an unattended upgrades service
(address . 36659-done@debbugs.gnu.org)
87lfeiyf03.fsf@nckx
One was added by Ludo' in commit
79501f26ab6d82c0256ff786a5dfb0000b52ccd3.

The unrelated (CVE) or enhancement (NM integration) suggestions
upthread are separate topics. Closing!

Kind regards,

T G-R
-----BEGIN PGP SIGNATURE-----

iIMEARYKACsWIQT12iAyS4c9C3o4dnINsP+IT1VteQUCX8UgjA0cbWVAdG9iaWFz
LmdyAAoJEA2w/4hPVW15sdYA/3dpgWK1j3mZydoF8aU1YzwAfVIIAUrCLJQsP3c9
XPUoAQCAL6kRCIK7XL7uVwahuq9T/Zxxp3m0LIpTFC3aIeaFAg==
=TVIB
-----END PGP SIGNATURE-----

Closed
?