ansible playbok to maintain remote servers

[robert rottermann]

Thanks Karl
On 09.01.23 12:47, Karl Auer wrote:
> On Mon, 2023-01-09 at 08:36 +0100, robert rottermann wrote:
>> I am maintaining some 20 servers on diverse provider environments
>> (hetzner, amazon).
>> Now I intend to create an ansible playbook to help me to maintain
>> them.
>>
>> what it should do for most of them:
>>
>> - apt update
>> - apt upgrade
>> - apt autoremove
>> - reboot if necessary
>>
>> Now my questions:
>>
>> - is that a good idea, or a risky one?
> Honestly? Don't update or upgrade servers automatically, unless you can
> also automate checking that the upgrades worked AND automate rollback
> if they did not AND you are OK with an interruption if something fails.
> All this is doubly true if there is anything even slightly out of the
> ordinary being served by them.

Thats why I asked.

And thats why I do a snapshot on the critical servers, before I do the upgrade.

I can do that with the number of servers I have to maintain. Its boring tough.

However I wonder who this is done when you have to maintain hundreds of servers.

robert