[SAC] Timeline for updating the OSGeo VMs?

[Alex Mandel]

On 11/17/2013 01:37 PM, Markus Neteler wrote:

Backup machine is racked. OSUOSL has been tight on time so they're going
to give Martin remote access to do the system install. Hopefully we can
get started on it this coming week.

> 
> On Sun, Nov 17, 2013 at 10:30 PM, Frank Warmerdam <warmerdam at pobox.com> wrote:
> ...
>> The webextra VM is hopefully not too hard, but we do need to be a bit
>> careful with Trac
> 
> right!
> 
>> since I assume we are not running the stock Trac.
> 
> ops, hope that got documented.
>

I think LDAP is likely the only non-stock portion. FYI, I think trac is
installed manually via pypi not packages (or conversely we can on a
newer machine). We actually have a clone of the Trac VM Trac2 that's
been sitting around a long time in the hopes someone would have time to
try a Trac upgrade. I can request a re-clone of the current Trac VM if
we want to try upgrading it or we can just build one from scratch on the
newest Debian. We do have the capacity to run an extra VM (more once
Backup is moved) for the purposes of leaving a machine live while
working on an upgrade.

>> The www.osgeo.org machine running ancient RHEL won't be upgraded, but
>> hopefully it will soon be replaced with a new web VM at OSU OSL.
> 
> Looking forward to that since it will also free up money allocated to
> the renting of the old server.
> 
> ...

I think we all are, I have not heard from Webcom recently on if they are
making progress with the technical issues revolving around Drupal/Php
versions.

>>> I actually do security fixes (manually) on all machines regularly
>>> (those I know at least).
>>
>> Ah, cool.  It might be nice to document this procedure in the wiki with a
>> brief note on when it was last done, so that others could also assist.
> 
> I do that for years in race condition with Martin Spott :-)
> So it is more effort for me documenting each time the update in the
> Wiki rather than just doing it.
> 
>> Do you have a sense of how frequently we ought to be doing this?  Weekly?
>> Monthly?
> 
> I have my friendly apticron report which kindly sends me an email in
> case of updates coming in. Upon that I perform the update accordingly.
> Likewise Martin AFAIK.
> 
> Best
> Markus

Thanks,
Alex