The Safenix agent updates itself automatically. You do not need to perform any action on the server.
How automatic updates work
Every 15 minutes, the agent asks the control plane whether a newer version is available, using the same outbound channel used for backups. The control plane returns only a version string, or nothing. It never sends the program, a download address, or a signature.
When an update is available, the agent downloads the release from an address compiled into the agent. It verifies the release signature using a key also compiled into the agent.
A separate service installs the new program because the running agent cannot overwrite itself. If the new version does not restart, the previous version is restored automatically.
What happens to backups and other operations
Backups do not stop during an update. An update starts only when the agent is idle. If a backup, database copy, or restore is in progress, the update waits until that work is complete.
The restart is controlled. The agent has 120 seconds to complete the load that is in progress before it stops.
How ordinary updates are rolled out
Ordinary updates are distributed gradually rather than to every server at once. The rollout proceeds through these stages:
- 5% of servers
- 10% of servers
- 25% of servers
- 50% of servers
- All servers
There are at least two hours between each stage.
How to pause ordinary updates
- Open the Safenix dashboard.
- Pause ordinary updates for the required period, up to a maximum of 7 days.
The pause applies to the entire account, not to an individual server. If you request a period longer than 7 days, the pause is granted for 7 days.
Security updates
Security updates cannot be postponed. They are distributed immediately to all servers, even when an ordinary-update pause is active.
Can automatic updates be disabled permanently?
No. Permanent deactivation of automatic updates is not available. The only available control is the temporary pause for ordinary updates described above.