It would be great if GitLab was even easier to update for small instances. The typical scenario is a user that installed it on a Digital Ocean box 6 months ago and never logs into that box over ssh.
I love how Wordpress, Magento, Chrome, Sublime and others allow you to update themselves from the app.
If course we do not want to compromise the security of GitLab and updating via packages will always be possible.
A reason why self-updating is hard is that many of our files are not owned by our webapp user.
Are there creative solutions to this?
- We prompt the user for the sudo password in the application?
- At the end of our installation we prompt the user to set all packages to auto-update?
sudo apt-get install unattended-upgradesand include GitLab in Unattended-Upgrade::Allowed-Origins