superkret@feddit.org to Technology@lemmy.worldEnglish · 11 days agoSysadmin shock as Windows Server 2025 installs itselfwww.theregister.comexternal-linkmessage-square93fedilinkarrow-up1581arrow-down112
arrow-up1569arrow-down1external-linkSysadmin shock as Windows Server 2025 installs itselfwww.theregister.comsuperkret@feddit.org to Technology@lemmy.worldEnglish · 11 days agomessage-square93fedilink
minus-squareNocturnalEngineer@lemmy.worldlinkfedilinkEnglisharrow-up15arrow-down3·11 days agoShould still be doing phased rollouts of any patches, and where possible, implementing them on pre-prod first.
minus-squareSomeGuy69@lemmy.worldlinkfedilinkEnglisharrow-up12arrow-down1·10 days agoFor security updates in critical infrastructure, no. You want that right away, in best case instant. You can’t risk a zero day being used to kill people.
minus-squareAppoxo@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up2arrow-down2·edit-28 days agoEven security updates can be uncritical or supercritical. Consult the patch notes or get burned lol
minus-squaremosiacmango@lemm.eelinkfedilinkEnglisharrow-up11·edit-210 days agoPre-prod is ideal, but a pipe dream for many. Lots of folks barely get prod. We still stagger patching so things like this only wipe some of the critical infrastructure, but that still causes needless issues.
Should still be doing phased rollouts of any patches, and where possible, implementing them on pre-prod first.
For security updates in critical infrastructure, no. You want that right away, in best case instant. You can’t risk a zero day being used to kill people.
Even security updates can be uncritical or supercritical. Consult the patch notes or get burned lol
Pre-prod is ideal, but a pipe dream for many. Lots of folks barely get prod.
We still stagger patching so things like this only wipe some of the critical infrastructure, but that still causes needless issues.