On Sep 12, 2014, at 9:47 AM, Richard Hughes <hughsient(a)gmail.com> wrote:
The *only* way to do this
securely and safely in the system we have now is in a clean pre-boot
environment,
Mostly clean post-boot environment, with the system we have now?
What we could do is do updates on shutdown by basically killing
everything except PID 1, and then restart everything, but even then
that relies on no systemd or kernel updates being present.
Even if the system is fully rebooted once, after the update is done in a post-boot
environment, it's half the reboots needed now.
One step up from this would be a way for packages to contain metadata indicating they need
a reboot after an update; if none require it, then isolate graphical.target rather than a
reboot.
Chris Murphy