Principia and formulas that use software from outside of Ubuntu
kim0 at ubuntu.com
Mon Jun 13 17:36:46 UTC 2011
On 06/13/2011 07:05 PM, Gustavo Niemeyer wrote:
>> Why can't we enforce a policy for the formula to run its own security
>> updates (drush upc) would update core drupal and all modules. After all, as
>> mentioned on another thread, an Ensemble user would need to trust it to
>> manage servers in the right way (including updating it). Can't the decision
>> to use apt-get or some other tool be a formula writer's decision?
> I think Clint was referring to a different kind of security upgrade.
> For package security upgrades in the sense we're used to, we'll have a
> "ensemble upgrade" command. There's some early information about this
> in this document:
My understanding is
ensemble upgrade -> upgrades formula code .. no one has a problem with
However, the other upgrade is upgrading drupal itself + upgrading
drupal's installed modules
Clint would like to depend on apt-get for applying those updates, I
would like to depend on "drush upc" which the upstream way of doing
that. I'd like to think that which way is better is a formula author's
decision. Ubuntu's blessed formulas, should perhaps audit formulas to
ensure that some update mechanism is indeed included, but not
particularly which one.
More information about the Ensemble