<![CDATA[When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates?]]>When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? Do you install them right away? Wait a week or two? Update only when absolutely necessary? And why?

(I'm typically the sort of person that likes to be using the latest release of everything, but I'm open to opinions)

]]>https://board.circlewithadot.net/topic/ff63bc81-5baf-47f4-8543-8a84c11f47c9/when-it-comes-to-your-self-hosted-services-what-sort-of-attitude-do-you-have-when-it-comes-to-installing-updatesRSS for NodeFri, 01 May 2026 05:05:54 GMTSun, 26 Apr 2026 18:38:48 GMT60<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Mon, 27 Apr 2026 11:50:25 GMT]]>@rodrcastro What are you using for a VPN that's containerized? Or is this just something basic that you've got on a VPS and you're using that?

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/zak/statuses/116476518413596164https://board.circlewithadot.net/post/https://infosec.exchange/users/zak/statuses/116476518413596164Mon, 27 Apr 2026 11:50:25 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Mon, 27 Apr 2026 11:03:25 GMT]]>@zak mostly leave tags to latest and let it update itself regularly (once a week). For services that are crucial to my usage that can’t break I leave on a specific version and keep up-to-date on releases. If a new version appears with improvements I want or need, I update. Otherwise I leave them be. Case in point: my VPN container. I never update it, whereas my Seerr container I keep regularly updated for new changes.

]]>https://board.circlewithadot.net/post/https://cupoftea.social/ap/users/115570380349679753/statuses/116476333637914484https://board.circlewithadot.net/post/https://cupoftea.social/ap/users/115570380349679753/statuses/116476333637914484Mon, 27 Apr 2026 11:03:25 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 23:25:55 GMT]]>@zak I do it when I'm feeling up for potentially fixing things hah. So usually once or twice a month.

]]>https://board.circlewithadot.net/post/https://meow.social/users/woof/statuses/116473590922259709https://board.circlewithadot.net/post/https://meow.social/users/woof/statuses/116473590922259709Sun, 26 Apr 2026 23:25:55 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 22:03:30 GMT]]>@zak I am on the bleeding edge, basically always.

If something breaks and I can't instantly roll back, it's my fault.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/blakeashleyjr/statuses/116473266850245973https://board.circlewithadot.net/post/https://fosstodon.org/users/blakeashleyjr/statuses/116473266850245973Sun, 26 Apr 2026 22:03:30 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 21:53:28 GMT]]>@rachel
For the security updates I rely on the GitHub release page's RSS feed. But when I do my regular updates, I've just got a page in my Wiki with a list of everything I'm running with links to the release pages/release notes.
@zak

]]>https://board.circlewithadot.net/post/https://social.mei-home.net/users/mmeier/statuses/116473227393018816https://board.circlewithadot.net/post/https://social.mei-home.net/users/mmeier/statuses/116473227393018816Sun, 26 Apr 2026 21:53:28 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 21:21:48 GMT]]>@zak

As mine are just for me and not internet visible, I don't do them right away. I tend to wait until either they *need* it, or I'm at a loose end.

]]>https://board.circlewithadot.net/post/https://masto.bike/users/Pionir/statuses/116473102866631480https://board.circlewithadot.net/post/https://masto.bike/users/Pionir/statuses/116473102866631480Sun, 26 Apr 2026 21:21:48 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 21:05:12 GMT]]>@zak When I ran Kubernetes I used to manage all updates via a Renovate bot. Now that I‘m back to using a package manager to install most things, I usually just go in and run an update every few weeks, unless I notice that there‘s a particular security vulnerability there, where I will update early or, depending on what it is, temporarily firewall the affected service, etc.

]]>https://board.circlewithadot.net/post/https://social.jsteuernagel.de/users/jana/statuses/116473037649860638https://board.circlewithadot.net/post/https://social.jsteuernagel.de/users/jana/statuses/116473037649860638Sun, 26 Apr 2026 21:05:12 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 20:42:04 GMT]]>@zak @faisal It depends on the experience I've had with updates in the past, but if major updates have been smooth I’m usually pretty willing to install them.

]]>https://board.circlewithadot.net/post/https://follow.coryd.dev/users/cory/statuses/116472946633529928https://board.circlewithadot.net/post/https://follow.coryd.dev/users/cory/statuses/116472946633529928Sun, 26 Apr 2026 20:42:04 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 20:34:37 GMT]]>@viq@social.hackerspace.pl @mmeier@social.mei-home.net @zak@infosec.exchange yeah but these are upstream images so I don't have that sort of control. Hmmmm, podman manifest inspect ... doesn't get me a creation date

Ah, but podman image history ... should do it! now to see how I can do that against every image in the cluster without needing to pull all of them

then any image over a certain age I'll doublecheck, ez ez

]]>https://board.circlewithadot.net/post/https://transitory.social/notes/aljsjqrl44https://board.circlewithadot.net/post/https://transitory.social/notes/aljsjqrl44Sun, 26 Apr 2026 20:34:37 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 20:27:15 GMT]]>@rachel @mmeier @zak when building custom images in work's CI, I used that to encode e.g. versions of various stuff inside, to make it easy to figure out without having to look inside the container.

]]>https://board.circlewithadot.net/post/https://social.hackerspace.pl/users/viq/statuses/116472888403489475https://board.circlewithadot.net/post/https://social.hackerspace.pl/users/viq/statuses/116472888403489475Sun, 26 Apr 2026 20:27:15 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 20:13:22 GMT]]>@rachel @mmeier @zak docker images have labels, maybe something got put in there?

]]>https://board.circlewithadot.net/post/https://social.hackerspace.pl/users/viq/statuses/116472833819419745https://board.circlewithadot.net/post/https://social.hackerspace.pl/users/viq/statuses/116472833819419745Sun, 26 Apr 2026 20:13:22 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 20:11:43 GMT]]>@zak@infosec.exchange @mmeier@social.mei-home.net I am subscribed to a small number of repos when I am also interested in pre-release/beta versions, but normally I just depend on renovate

recently I've been thinking that I should figure out method to check the age of each deployed image so I cam double-check that renovate is tracking everything correctly. A handful of times the project refactored and changed an image/chart name and the applied version ended behind by a few versions....

]]>https://board.circlewithadot.net/post/https://transitory.social/notes/aljrqa2d41https://board.circlewithadot.net/post/https://transitory.social/notes/aljrqa2d41Sun, 26 Apr 2026 20:11:43 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 20:08:26 GMT]]>@rachel @mmeier I've done this myself manually just using my RSS service to subscribe to GitHub release pages. It works.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/zak/statuses/116472814425032068https://board.circlewithadot.net/post/https://infosec.exchange/users/zak/statuses/116472814425032068Sun, 26 Apr 2026 20:08:26 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 20:05:18 GMT]]>@mmeier@social.mei-home.net @zak@infosec.exchange do you manually check each application? Or have a way to track release notes for all of them?

]]>https://board.circlewithadot.net/post/https://transitory.social/notes/aljri1e63whttps://board.circlewithadot.net/post/https://transitory.social/notes/aljri1e63wSun, 26 Apr 2026 20:05:18 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 20:04:27 GMT]]>@zak@infosec.exchange everything* is devoted via gitops and I have a renovate CronJob that runs a few times a day so I get emails on updates. A few services auto-update (the automerge step only happens after a few days delay, and never for major versions)

The cluster OS is Talos and I update it when I update k8s, or in theory if they had a critical security update (less likely due to small attack surface)

The small handful of misc services get updated less frequently but I'm not really worried about dnsmasq tbh

]]>https://board.circlewithadot.net/post/https://transitory.social/notes/aljrgxtp3uhttps://board.circlewithadot.net/post/https://transitory.social/notes/aljrgxtp3uSun, 26 Apr 2026 20:04:27 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 19:43:08 GMT]]>@zak I've got a two-pronged approach. I'm subscribed to release feeds for most apps running in my Homelab. If something is a security update, it gets updated immediately.

Otherwise, I've got a regular task to update all apps running in my cluster. I then sit down, go through my list of apps, look at new releases' notes and do the update manually. I quite enjoy that as a Friday evening activity.

Infrastructure, like k8s itself or Ceph, get updated less regularly.

]]>https://board.circlewithadot.net/post/https://social.mei-home.net/users/mmeier/statuses/116472714944361599https://board.circlewithadot.net/post/https://social.mei-home.net/users/mmeier/statuses/116472714944361599Sun, 26 Apr 2026 19:43:08 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 19:05:19 GMT]]>@zak On NixOS and have a service that updates all my desktops/laptops/homeservers daily. Rarely do I have any breakage. If so, a quick search most often finds the solution (either a config change, or a bug that already has a PR merged into nixpkgs). After running Arch for 10+ years and NixOS for 3+, I've come to appreciate more frequently updating as it tends to overall reduce the cognitive load of having to fix multiple issues all at once.]]>https://board.circlewithadot.net/post/https://s.firecat53.net/objects/b18f69eb-7409-4e44-a899-337dfbbd3cd5https://board.circlewithadot.net/post/https://s.firecat53.net/objects/b18f69eb-7409-4e44-a899-337dfbbd3cd5Sun, 26 Apr 2026 19:05:19 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 19:00:57 GMT]]>@zak Security -> ASAP

Minor -> I like to wait a few days so I don't deploy buggy/exploited releases, I take my time to properly review the changelog

Major -> I stay on LTS as long as possible so I have time to preare for major releases

Personally I value stability over features (unless I really them)

]]>https://board.circlewithadot.net/post/https://chaos.social/users/p4trick/statuses/116472549050595204https://board.circlewithadot.net/post/https://chaos.social/users/p4trick/statuses/116472549050595204Sun, 26 Apr 2026 19:00:57 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 18:56:30 GMT]]>@zak Security patches installed immediately on everything. For non-security related updates on critical stuff (email, routers, etc.), I usually wait at least a couple of weeks before installing them manually. Most other things are on auto updates.

]]>https://board.circlewithadot.net/post/https://colquitt.xyz/users/daniel/statuses/116472531540211226https://board.circlewithadot.net/post/https://colquitt.xyz/users/daniel/statuses/116472531540211226Sun, 26 Apr 2026 18:56:30 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 18:50:47 GMT]]>@zak a view (2-3) days delay. Many reasons

Supply chain attack
Bad Updates
...

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/eingfoan/statuses/116472509066880513https://board.circlewithadot.net/post/https://infosec.exchange/users/eingfoan/statuses/116472509066880513Sun, 26 Apr 2026 18:50:47 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 18:47:39 GMT]]>@zak once a month I set aside a morning to run all my updates. It used to take me a whole day as my Proxmox host was a mess but now my system is much more streamlined I don't dread doing them like I used to!]]>https://board.circlewithadot.net/post/https://unkn.uk/objects/0c3b840b-f4fb-40c7-99ae-1f4f96878ec6https://board.circlewithadot.net/post/https://unkn.uk/objects/0c3b840b-f4fb-40c7-99ae-1f4f96878ec6Sun, 26 Apr 2026 18:47:39 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 18:46:39 GMT]]>@zak I do updates every Friday and, in the case of security updates, right after them becoming available.

]]>https://board.circlewithadot.net/post/https://social.wildeboer.net/users/jwildeboer/statuses/116472492826909174https://board.circlewithadot.net/post/https://social.wildeboer.net/users/jwildeboer/statuses/116472492826909174Sun, 26 Apr 2026 18:46:39 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 18:44:36 GMT]]>@zak When I get around to it.

]]>https://board.circlewithadot.net/post/https://beige.party/users/woe2you/statuses/116472484745141462https://board.circlewithadot.net/post/https://beige.party/users/woe2you/statuses/116472484745141462Sun, 26 Apr 2026 18:44:36 GMT<![CDATA[Reply to When it comes to your self-hosted services, what sort of attitude do you have when it comes to installing updates? on Sun, 26 Apr 2026 18:44:00 GMT]]>@zak

I have unattended updates on at the server level. Specific server software is on docker and so requires me to manually go upgrade, helps to avoid breakage

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/rubenwardy/statuses/116472482422738239https://board.circlewithadot.net/post/https://hachyderm.io/users/rubenwardy/statuses/116472482422738239Sun, 26 Apr 2026 18:44:00 GMT