Comment by sgarland

Just don’t do something stupid like changing system Python, because it will silently fail. I learned this the fun way, by inheriting someone else’s travesty of a setup (spoiler: if you have to hardlink random shared libraries to get stuff to work, that’s a good indicator that maybe you shouldn’t have forcibly upgraded the system’s Python installation), and then finding out that despite reporting success, no packages had been updated in the past year.

Security lost their minds. I was in awe of the miasma of bad decisions that had been made. Perhaps my favorite was that in the script that created this abomination, it blocked Postgres from being updated automatically via editing a file with sed, but they forgot to use -i, so it just, you know, spat out the modified line to stdout and then went on its merry way. This was not an issue however, since as mentioned, unattended-upgrades was broken, so nothing updated.