texas2step 1.3.0

What's new

• texas2step update upgrades a server to the newest release:

  texas2step update --check   # is a newer release out? (no sudo needed; exit status 100 if so)
  sudo texas2step update

  It downloads the release's package and setup tool to /var/cache/texas2step/update/<version>/, and uses each only if it matches the SHA-256 GitHub publishes with the release. It then runs that release's setup tool in update mode, which plans only the update of what is installed: the package, the settings merge and texas2step's own nginx files. Nothing is published anew, and no firewall rule or setting is added. It shows the plan and asks before it installs. --yes skips the question; --version <version> installs a given release, and --allow-downgrade goes back to an older one.

• Unattended updates: the package brings texas2step-update.timer, off until you turn it on:

  sudo systemctl enable --now texas2step-update.timer

  Every day between 04:00 and 05:00 it installs a newer release, but only when the plan changes nothing but the package and the settings. A release that would also change nginx or the firewall is left for you, with a warning in journalctl -u texas2step-update.

• update_url: where texas2step update looks for releases. By default it's GitHub; it can also be GitHub Enterprise, or a mirror on any web server for networks that can't reach GitHub. The install guide shows how to build one.

• nginx reloads by itself: the setup tool's install script, and so texas2step update, now reloads nginx when an upgrade changes one of the package's nginx files that nginx loads, such as snippets/texas2step.conf. If nginx -t fails with the new files, the previous ones are put back.

• The setup tool has a new --update option, which texas2step update uses. apt now waits for another apt run, such as unattended-upgrades, instead of failing.

Upgrade from 1.2.0

This upgrade is the last one done by hand; after it, sudo texas2step update does them. Download both files below into one directory on the server, then:

sudo ./texas2step-setup
# read texas2step-preflight.txt and texas2step-install.sh, then:
sudo ./texas2step-install.sh

The settings template gained an Updates section (a commented update_url line), so the setup tool shows the settings merge it will make; your values are kept and a dated backup is made. Or upgrade with sudo apt install ./texas2step-1.3.0-1-amd64.deb and run sudo texas2step config merge --write when apt reports the new template.

For a new install, give the setup tool --id, --name and --location, as in the install guide (linked below).

Files

File	SHA-256
texas2step-1.3.0-1-amd64.deb	02114a997d486d258c50136c44050750d20c6fd01138e0b59316f193a6686f7a
texas2step-setup	d62f54cd8b2e267719fc4e65ef143d216c69a2c50bac220c6cfd1865c930c879

The setup tool is built for this package and checks its checksum before using it.

Documentation

• Upgrade: texas2step update, unattended updates, mirrors
• Install guide
• All documentation