How to properly update system with myVesta

Post Reply
User avatar
dpeca
Site Admin
Posts: 387
Joined: Fri Jun 19, 2020 9:59 am
How to properly update system with myVesta

Post by dpeca »

Good practice is to update your server at least one time per month with new software updates and security fixes.

Here is how to do that.

Log in to your SSH, as root.
Type:

Code: Select all

apt update
and then:

Code: Select all

apt -y upgrade
During this process, you will be probably asked to overwrite existent conf files with new one.
Please select No (or select "keep the local version currently installed").
Those options are actually default options.

Why not to override conf files?
Here is an example.
If you override php.ini with new version - you'll override disable_functions option (that we put as best security setup) and that way you will actually downgrade security of your web system.
Other example is /etc/exim4/exim4.conf.template - we modified that file a lot, and if you install default Debian version of that file, you will completly mess up exim4 service.
During updates, it is very often that apt will also ask to overwrite /etc/clamav/clamd.conf or /etc/roundcube/config.inc.php.
Just don't do it.

Actually, there are very rare situations where you should override config files during apt upgrades... almost never.
In general, most likely you will mess up services if you install config files that comes via apt updates.

Tags:

azlanirda
Posts: 18
Joined: Mon Feb 01, 2021 12:30 pm
Re: How to properly update system with myVesta

Post by azlanirda »

does this means that we can remove the default cron update after installation in vesta?

and only perform the update like you suggest above?

thanks.

User avatar
dpeca
Site Admin
Posts: 387
Joined: Fri Jun 19, 2020 9:59 am
Re: How to properly update system with myVesta

Post by dpeca »

azlanirda wrote:
Tue Feb 02, 2021 4:25 pm
does this means that we can remove the default cron update after installation in vesta?
Cron v-update-sys-vesta-all will just update myVesta.
System will not be updated.

I don't suggest to remove v-update-sys-vesta-all, in future maybe there will be urgent security update for myVesta.


Post Reply