On Tue, Jan 17, 2012 at 12:59 PM, Johnny Hughes <johnny at centos.org> wrote: > I would always say it is "best practice" to manually install updates on > at least one machine of a specific type and make sure everything is OK > ... then automatically machines that are like that one after you are happy. I would like to expand on this a little. Once you get a certain number of machine it probably makes sense to have your own internal mirror. That way you can update your test machines from upstream, do the tests, then once you are satisfied you can update the internal mirror. This would give you consistency on what is installed on your Production machines without having to worry about the whole "crap, I just updated the wrong server". Also this would give you a level of protection if you do choose to automatically update your Production machines because it takes the extra step of updating the local mirror to really push any changes. -- William Hooper