In order to keep track of upgrades that should be done in the system, it would be useful to implement some mechanism that would check if there are any package upgrades available.

There are two possible types of checks that might need to be implemented:

• Check for upgradeable system-wide packages.
• Check for upgradeable packages deployed by other means.

The following should be done:

• Implement mechanism for checking available upgrades for system-wide packages via apticron application. This seems to be a very simple way to achieve such functionality.
• Implement mechanism for checking available upgrades for pip requirements files.
  • Checks should be implemented via common role.
  • Use pip-tools for performing the check.
  • Implement custom script that will generate new requirements files and compare them against existing ones.
  • Introduce parameter wsgi_requirements to the wsgi_website role that can be used as an alternative to specifying Gunicorn/futures version. If set, deploy requirements for both checking and installation purposes.
  • Deploy cronjob that will be checking for upgrades every day.
  • Checks should be run by dedicated user with dedicated virtual environment (for pip-tools).
• Update role reference documentation. At least include the following:
  • Information about upgrade checks done via apticron.
  • Information about upgrade checks done for pip requirements files.
  • Add info about where the mail gets sent to.
• Update usage instructions to mention the new features.
• Update test site to include new role that tests pip requirements upgrade checks.