Skip to content

README.md

Latest commit

 

History

History
63 lines (54 loc) · 2.02 KB

README.md

File metadata and controls

63 lines (54 loc) · 2.02 KB

secure-updater

ShellCheck Status License

License: MIT

A secure, production-ready Bash automation tool for safely updating Ubuntu and Pop!_OS systems. Designed for SOC analysts and IT-secured Linux workstations, it enforces strict security and logging standards.

Features

  • Distro validation (Ubuntu/Pop!_OS only)
  • Secure, error-checked update flow
  • Detailed logging to /var/log/updates/
  • Modular, maintainable, and ShellCheck-clean
  • Follows OWASP, NIST, and CERT Bash best practices

Supported Operating Systems

  • Ubuntu (all LTS and current releases)
  • Pop!_OS (all supported releases)

Setup

  1. Clone this repository: 
    git clone https://github.com/YOUR_ORG/secure-updater.git
cd secure-updater
  2. Review and copy the example environment file: 
    cp .env.example .env
# Edit .env as needed
  3. Make the script executable: 
    chmod +x scripts/secure_update.sh

Usage

Run the script as root (with sudo):

sudo bash scripts/secure_update.sh
  • Logs are stored in /var/log/updates/secure_update_<timestamp>.log.
  • Only Ubuntu and Pop!_OS are supported. The script will exit on other distros.
  • Log files are root-readable only (default permissions: 750).

Example Output

[INFO] Starting secure update at 20240601_120000 for Ubuntu
[INFO] apt update completed successfully.
[INFO] Listed upgradable packages.
[INFO] apt upgrade completed successfully.
[INFO] apt autoremove completed successfully.
[INFO] apt clean completed successfully.
[INFO] Secure update completed at 2024-06-01 12:00:30