Automatic Updates
via BitNinja Reliable Autoupdate
As of the release of BitNinja 3.10.23
, we introduced the BitNinja Reliable Autoupdate package, which checks for a BitNinja Agent update every 6 hours.
Config Location: /var/lib/bitninja-reliable-auto-update/main.json
Default main.json Config:
{
"apiUrl": "api.bitninja.io:443",
"etcDir": "/etc/bitninja",
"periodicUpdate": 6,
"varDir": "/var/lib/bitninja-reliable-auto-update",
"versionType": "Stable"
}
Currently only working setting you are able to change (which has any effect) is the periodicUpdate
.
This setting allows you to change how often (in hours) you would like to check for updates.
Disabling Automatic Updates
If you wish to disable the Auto Updates, you may set periodicUpdate
value to 0
.
Once this change is done and you saved the file, you will need to restart BitNinja's Reliable Auto-Update service.
This can be achieved by running the following command: service bitninja-reliable-auto-update restart
The service will still be in the background, but you will no longer look or update for new BitNinja Agents automatically.
Enabling auto-updates for BitNinja is also possible with package managers, which depending on your Linux distribution you can setup with the steps below.
via Unattended Updates
RHEL/CentOS/CloudLinux
Using Yum-Curl - RHEL7 / CentOS 7
- Install Dependencies
sudo yum install yum-cron
- Edit the file.
sudo nano /etc/yum/yum-cron.conf
# Update packages automatically
update_cmd = default
# Apply security updates only
apply_updates = yes
# Send email notifications
emit_via = email
email_from = root@yourdomain.com
email_to = your-email@example.com
- Start and Enable Yum cron on boot.
sudo systemctl start yum-cron
sudo systemctl enable yum-cron
Using DNF - RHEL8+ / CentOS 8+
- Install dependencies
sudo yum install dnf-automatic
- Edit the file.
nano /etc/dnf/automatic.conf
download_updates = yes
apply_updates = no
sudo systemctl enable --now dnf-automatic.timer
Debian/Ubuntu
- Install Dependencies
sudo apt-get update
sudo apt-get install unattended-upgrades
- Edit the file.
sudo nano /etc/apt/apt.conf.d/50unattended-upgrades
Add BitNinja like this:
Unattended-Upgrade::Allowed-Origins {
"${distro_id}:${distro_codename}";
"${distro_id}:${distro_codename}-security";
// Extended Security Maintenance; doesn't necessarily exist for
// every release and this system may not have it installed, but if
// available, the policy for updates is such that unattended-upgrades
// should also install from here by default.
"${distro_id}ESMApps:${distro_codename}-apps-security";
"${distro_id}ESM:${distro_codename}-infra-security";
// "${distro_id}:${distro_codename}-updates";
// "${distro_id}:${distro_codename}-proposed";
// "${distro_id}:${distro_codename}-backports";
// Bitninja Repository
"bitninja:${distro_codename}";
};
You can remove the rest and keep BitNinja, if you want to only autoupdate BitNinja itself and leave the OS's Security Updates, although this is isn't recommended.
- Save the changes and Restart the SystemD process.
sudo systemctl restart unattended-upgrades
Enjoy automatic updates for BitNinja!