Automatic security updates

Note

From version 1.75.0 onwards, this feature is no longer enabled by default.

For new installations of Matillion ETL from version 1.73 onwards, and universal installer installations from 29th September 2023, automatic updates of security patches (yum update –security) are set to run daily on all Matillion ETL environments on CentOS Stream 8 & 9, and RHEL 8.

To run automatic updates, the following service is enabled by default on the instance:

dnf-automatic-install.timer

Updates will run daily at 6:00am.

Checking the service status

To check the status of the update service, use the following command:

systemctl status dnf-automatic-install.timer

If the service is running correctly, this will produce output similar to the following:

dnf-automatic-install.timer - dnf-automatic-install timer
Loaded: loaded (/usr/lib/systemd/system/dnf-automatic-install.timer; enabled; vendor preset: disabled)
Active: active (waiting) since Mon 2023-10-30 09:27:24 EDT; 54min ago
Trigger: Tue 2023-10-31 06:46:20 EDT; 20h left

Oct 30 09:27:24 [instance]: Started dnf-automatic-install timer.

Disabling the service

You can disable the automatic update service with the following commands:

systemctl disable dnf-automatic-install.timer

systemctl stop dnf-automatic-install.timer

Changing the update time

You can change the time at which the update service runs (6:00am by default). To do this:

Edit the file /usr/lib/systemd/system/dnf-automatic-install.timer.
Locate the line OnCalendar=*-*-* 6:00 and edit it to show the time you want the update to run, for example OnCalendar=*-*-* 18:00.
Save and exit the file.

Further configuration

Further options for configuring the service can be found here.