Re: [bitfolk] Upcoming reboots for security fixes prior to 1…

Top Page
Author: Andy Smith
Date:  
To: announce
Subject: Re: [bitfolk] Upcoming reboots for security fixes prior to 13 December

Reply to this message
gpg: Signature made Tue Dec 13 03:17:53 2016 UTC
gpg: using DSA key 2099B64CBF15490B
gpg: Good signature from "Andy Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andrew James Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andy Smith (UKUUG) <andy.smith@ukuug.org>" [unknown]
gpg: aka "Andy Smith (BitFolk Ltd.) <andy@bitfolk.com>" [unknown]
gpg: aka "Andy Smith (Linux User Groups UK) <andy@lug.org.uk>" [unknown]
gpg: aka "Andy Smith (Cernio Technology Cooperative) <andy.smith@cernio.com>" [unknown]
Hi,

On Wed, Nov 30, 2016 at 06:00:35AM +0000, Andy Smith wrote:
> Rather disappointingly there's been another round of security
> advisories for Xen, some of which affect the configuration in use at
> BitFolk:


The maintenance work to patch against this bug (XSA-200) has now
been completed, without incident. During the embargo for XSA-200
more security bugs were found so fixes for these were deployed also.

As per:

    http://xenbits.xen.org/xsa/


the embargo for XSA-200 ends in just under 9 hours, and the embargo
for the others ends at 2016-12-21 12:00Z.

Thanks for your patience during this work.

> I am going to try to get a checkbox added to the panel website so
> that those of you who are brave enough to try it can indicate that
> you'd prefer for your VPS to be suspended and restored rather than
> shutdown and booted.


In the end customers chose for 22 of their VPSes to be suspended and
restored and as far as I am aware¹ there was a 100% success rate in
this.

If you would like to enable suspend and restore for your VPS you can
do so from:

    https://panel.bitfolk.com/account/config/#prefs


Cheers,
Andy

¹ We added Nagios ping checks for every one of these VPSes, if they
didn't exist already, and all of those checks failed then recovered
as expected. In the failure modes I have seen network connectivity
does not return.

--
https://bitfolk.com/ -- No-nonsense VPS hosting
_______________________________________________
announce mailing list
announce@???
https://lists.bitfolk.com/mailman/listinfo/announce