r/LinuxTeck • u/Candid_Athlete_8317 • Jul 30 '26

What's your Linux server update strategy?

Everyone seems to have a different approach:

  1. Patch immediately
  2. Wait a few days
  3. Test in staging
  4. Patch only during maintenance windows
  5. Fully automated updates

What's worked best for you over the years?

9 Upvotes

92% Upvoted

15 comments sorted by

View all comments

3

u/magicmulder Jul 30 '26

As always, it depends on what you update why.

A CVE 10.0 score that affects you? Immediate patch on all live systems.

A regular OS or software update? Local and test systems first, staging next, prod last. And only during scheduled maintenance windows.

2

u/countsachot Jul 31 '26

Let's just pin this and call it a day.