DO Ideas 2

Create a kernel upgrade notification

I like to be security-conscious and keep all my servers as fresh as possible regarding security upgrades.

I assume DO periodically upgrades the default kernels used for droplets.

So please,

1) Unless you're already doing this, always load the newest stable kernel when a droplet is rebooted
2) Make it possible to opt-in to regular notifications whenever one of the default kernels that a user has droplets running on receives a security upgrade

Then I can reboot my droplets whenever a security upgrade is available.

  • Luke
  • Sep 11 2018
  • Attach files
  • Gerald commented
    September 11, 2018 18:04
  • Gerald commented
    September 11, 2018 18:04

    I also support this idea of having notification whenever new kernel is available on digital ocean so that we can boot to it.

  • Luke commented
    September 11, 2018 18:04

    Michał, that won't help - you can't upgrade kernel yourself for DO droplets.

    Anon - You're right.

  • Michał Zieliński commented
    September 11, 2018 18:04

    Just subscribe to Debian Security mailing list: http://lists.debian.org/debian-security-announce/

  • Anon commented
    September 11, 2018 18:04

    I disagree heavily with #1. It is nonsense for a stable server. If you do this, make it opt-in as well.

  • Luke commented
    September 11, 2018 18:04

    (Notification could be via email, via a feed on your website somewhere, or via the maintenance/downtime notification feed. Not really fussed about what the appropriate channel is here.)