Principia and formulas that use software from outside of Ubuntu

[Ahmed Kamal]

On 06/13/2011 07:05 PM, Gustavo Niemeyer wrote:
>> Why can't we enforce a policy for the formula to run its own security
>> updates (drush upc) would update core drupal and all modules. After all, as
>> mentioned on another thread, an Ensemble user would need to trust it to
>> manage servers in the right way (including updating it). Can't the decision
>> to use apt-get or some other tool be a formula writer's decision?
> I think Clint was referring to a different kind of security upgrade.
> For package security upgrades in the sense we're used to, we'll have a
> "ensemble upgrade" command.  There's some early information about this
> in this document:
>
> https://ensemble.ubuntu.com/docs/upgrades.html
>
My understanding is
ensemble upgrade -> upgrades formula code .. no one has a problem with 
this one
However, the other upgrade is upgrading drupal itself + upgrading 
drupal's installed modules

Clint would like to depend on apt-get for applying those updates, I 
would like to depend on "drush upc" which the upstream way of doing 
that. I'd like to think that which way is better is a formula author's 
decision. Ubuntu's blessed formulas, should perhaps audit formulas to 
ensure that some update mechanism is indeed included, but not 
particularly which one.