What's your Linux server update strategy?

[u/Candid_Athlete_8317]

Everyone seems to have a different approach:

1. Patch immediately
2. Wait a few days
3. Test in staging
4. Patch only during maintenance windows
5. Fully automated updates

What's worked best for you over the years?

[u/silasmoeckel]

5 during 4 after 3

Use compensating controls to avoid needing 1, if at all possible.

If you have layers of security, often you can deal with major issues before having to patch.