Automatic app updates

[rullzer]

I think a good first steps for a better experince would be unattended app upgrades.

As a first step I would propose we write an occ command (maybe as an app so we can iterate a bit before integrating it). This occ command just gets all the apps and upgrades them step by step.

That way I can setup a cron job at 03:00 to upgrade all the apps every day.

[nextcloud-bot]

GitMate.io thinks possibly related issues are #7002 (Automatic app updates), #3182 (Automatic updates of apps as an option), #5933 (Automatic disabled apps are not updated from the app store), #4663 (Update with disabled app store), and #74 (Add Automatic Tagging).

[MorrisJobke]

As a first step I would propose we write an occ command (maybe as an app so we can iterate a bit before integrating it).

#11053 😉

[inthreedee]

Sifting through the many issues related to automatic app updates, heres what I've found as the current state of app updates:

• Apps should auto-update on every major release: Full automatic app update option in setting Gui #15416
• The occ tool can update all apps. This can be scripted/scheduled at the OS level: occ app update command #11053
• An "update all" web UI button is an open request: Add update all button in the apps management #6989
• Some discussion of full automatic updates took place here: Automatic updates of apps as an option #3182

  I see a point in having auto updates. On the other hand since apps are not checked in the slightest way before published in the app store, I wouldn't really recommand auto update for everything.

My personal two cents:

1. The security concern quoted above is valid, so only official apps should auto-update by default.

2. Doing it that way offloads the responsibility for checking third party apps to the user/admin. My only problem with this is that it's only a good justification if the user/admin is made aware that checking apps themselves is a necessary step. In other words, how many people are even aware that nobody is looking at third party apps before they're added to the app store? How many people think it's totally safe to just click that update button?

   If the security of these apps is a genuine concern and we're going to offload that responsibility to them, then we'd need to explicitly tell them we've done so. Some examples to look at would be how MacOS and Android handle allowing unchecked, third party apps to be installed. I believe Win10 might also handle this with some kind of warning now?

[rullzer]

While I get the concerns. I also do not think people check all their android apps. And you have to think if you even want to install a random app from the appstore if you do not trust the developers.

[inthreedee]

I agree with that. Another point to that end is apps on Nextcloud are installed by server administrators who hopefully have more experience in this situation than end users.

On the other hand, the stakes here are higher compared to a personal phone: Far more users could be at risk on one server, and they are putting their trust in the administrator to keep their data safe.

Personally, I lean towards "secure by default". In this case, that means auto-update only the official apps by default but have a separate toggle for auto-updating third party apps, disabled by default. A line of text there to caution people that third party apps are not checked is good enough for me.

[szaimen]

Please see this app for this feature https://github.com/ChristophWurst/unattended_upgrades

[brianjmurrell]

Why is this closed as completed even? How do I enable unattended updates if this is completed?

Oh wait. This ticket is closed as completed due to https://github.com/ChristophWurst/unattended_upgrades which says right in the README:

The app is still under development, so it’s time for you to get involved!

and right at the bottom of the README:

Should I run this in production?

No, this app is an experiment. However, if you like living on the edge you may of course deploy the app anyway.

How can an app in such a state warrant closing this ticket as completed? Please reopen at least until that app is stable and safe to run in production, or somebody else writes this feature in some other way.