Our features site is undergoing a refresh! Be sure to explore the revamped site and discover our latest product roadmap launching here on Monday, March 18th.

Update notifications for Easyapache

France Presern shared this idea 9 years ago
Open Discussion

Hi.


Easyapache currently requires manual updates. In order for that to happen, we would require to be notified via email.

Please add this simple feature. Thank you.

Best Answer
photo

Hi,


When an EasyApache updates with security issues, we email out via various email lists and also in our forums and news site (news.cpanel.com). I'd recommend joining the 'Product & Security Notifications' email list here: http://cpanel.com/mailing-list/

Replies (5)

photo
1

Hi,


When an EasyApache updates with security issues, we email out via various email lists and also in our forums and news site (news.cpanel.com). I'd recommend joining the 'Product & Security Notifications' email list here: http://cpanel.com/mailing-list/

photo
1

I would again recommend you add it as a feature to WHM to make the system complete. Updating of core services seems like a urgent and necessary task to keep WHM installs secure.


While it is true, that users could go and find solutions as you describe out of the WHM system, it is inconvenient and will not happen in real world. As a consequence of you not implementing this feature, which can be implemented quickly and easily, WHMs reputation will suffer, because of people running old vulnerable versions of PHP, Apache and whatnot.


Marking this feature request as a already exists is just plain wrong, because there is no such feature in WHM.


Please reconsider again.

photo
1

Hi!


I'm not quite sure the difference in having emails sent from the server itself and from cPanel themselves. Why wouldn't users in the real world sign up for updates from a mailing list? When Linux distributions have software updates ready, they email out via their release mailing list, not using the server itself. This allows for one email for those updates, not one email per server.


EasyApache 4 will have automatic updates by default, and when software is released, we'll be notifying via an mailing list like we currently do now. There isn't any plans for adding internal notifications for EasyApache updates as we already do this via our mailing lists and news site.

photo
1

Yes, there is no difference in where the mails come from, but there is a big difference If a user has to go outside WHM and apply for a another service. There in lies the reason for not applying in real world, (which you fail to acknowledge). Maybe they would even go forward and do this additional work, if there was a clear warning for updating manually prominently displayed on the first page of easyapache, but there is just a link to lots of documentation that frankly no one reads unless he has issues with easyapache.


I maintain lots of different Linux distros, but have subscribed to none of their mailing lists, because I get notifications about new updates from the servers itself when updates hit the repo mirrors. There is also a practical reason, that is when maintaining many servers, one might forget to update all of them, and those emails remind me again next day.


If easyapache 4 will do automatic updates without possible notifications, the issue will be even worse. If an issue after automatic update occurs, admins will have to loose time unnecessary to find out where the issue came from (update), because they would not be notified. Especially when updates will not be at the same time as all the mails to all the subscribers of your mailing list.


Finally, I wonder why does WHM even bother to have an option to mail results of updating itself and distro packages. Just for fun? Maybe WHM developers like to do unnecessary work as you see it? According to you WHM admins should just subscribe to XY mailing lists to get notified...


We could continue this conversation, but it looks like your mind is already set and further explanations from my side will bear no fruit. However I can not stay uninformed about servers which have not applied security updates.


I will now have to manually write a script, to keep me informed when my system has new security and other updates which were not applied. Because of this missing basic feature, your responses and additional work for me, I will surely not talk positively about the WHM in the future.


Also, please change the tag of this feature request to "Will not implement" because there is no such feature in WHM and we are talking about WHM not some other service (mailing list of whathever). Keeping it as is is misleading if not flat out lie.

photo
1

Hi,


Thanks for taking the time to discuss this! I'm absolutely open to the discussions, but I'm having trouble understanding the value of this coming from WHM on a per-server basis vs directly from cPanel when upstream software is changed.


You're right, there is a big difference if a user has to go outside of WHM to get notifications about security updates. How does this differ from Linux distributions? By default, you aren't notified of pending updates unless you run $(yum update) or the like. You'll still need to do something outside of the system if you want to be notified of pending updates. When CentOS releases security updates, they email to their centos-announce@centos.org address. When packages hit the repositories, you don't really know until running (yum|apt-get) update. In my experiences, these notifications sounds like something you have to setup manually still.


With EasyApache 4 and automatic updates, if a user is subscribed to our release emails, they will be notified of upgrades coming down the line. Since we send updates out for all systems and not individual servers, they would know that there was an update via that email. When WHM updates via upcp, if there are issues with the update those logs are emailed to the administrator. This is for a software update failing, not that a software update is available.


I could see adding some information to the EasyApache UIs advising to subscribe to our mailing lists so they are notified when updates are available, but I'm not sure it'll actually be read. However making this notification on the system itself, means that we'll have to run EasyApache nightly in order to check for updates. I could see this being problematic, since EasyApache actually has to run in order to know if there are updates available. This could conflict with some systems who have actually turned off EasyApache updates to lock to a specific version.


It sounds like something closer to a general 'Updates are available for your server' would be more appropriate, but not specifically EasyApache, but EasyApache being included in that notification. Am I on the right path with this?


Again, thank you for taking the time to discuss!

photo
1

Hi!


One more note, during initial deployment of cPanel systems, during the 'Getting Started Wizard' in WHM, you can input an email address to sign up for our mailing lists automatically, so going outside of the product is not needed to get updated for new releases and security announcements.

I hope this helps!

photo
photo
1

I presume that like with mysql, with EA4 it will be possible to have automatic updates as everything will be rpm based and not more need to compile everything.

photo
1

Hi,


Yep, this is correct!

photo
photo
1

One thing to keep in mind about EasyApache 3: it doesn't know whether updates are available until it runs.

photo
1

I have created a new feature request, outside of the scope of easyapache.


https://features.cpanel.net/topic/out-of-date-software-notifications-added-to-icontact

Leave a Comment
 
Attach a file