Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
World desk13 min

How to Update the LAMP Stack on a VPS Without cPanel

Update Apache, PHP, and MySQL or MariaDB safely over SSH without cPanel. Follow this distribution-specific checklist for backups, package review, service validation, application testing, and rollback.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You can update Apache, PHP, and MySQL or MariaDB safely over SSH without cPanel, but treat the work as a controlled change rather than one blind command. Record the current system, verify a restorable backup, review the package transaction, update one distribution family at a time, validate every service and application path, and keep your VPS provider console available for recovery.

What a LAMP update actually changes

LAMP is a Linux operating system, Apache HTTP Server, MySQL or MariaDB, and PHP. Together these components serve dynamic PHP applications such as content-management systems, frameworks, and custom sites. A routine update normally means installing security fixes and compatible minor releases from your operating system’s repositories. A major PHP, MySQL, or MariaDB version change is different: it can remove deprecated functions, alter defaults, require new extensions, or change database behavior. Plan that as a migration with staging and a rollback path.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Without a control panel, you perform the same administrative work directly through SSH and the distribution’s package manager. On Debian-family systems, that is APT. On AlmaLinux, Rocky Linux, and other RHEL-family systems, it is DNF. Package names, service names, configuration paths, repository policies, and upgrade behavior differ, so never paste an Ubuntu command into a RHEL-family server unchanged.

Pre-flight checks before you install anything

Schedule production work during a maintenance window when a package transaction could restart a service or require a reboot. For a public site, announce the window and have an application-level maintenance page ready if your deployment needs one.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Confirm access and an emergency route

  • Verify that you can log in with a root account or a working sudo path. Test sudo before beginning with sudo -v.
  • Keep the VPS provider’s web console or out-of-band terminal open. It is your fallback if an SSH configuration, firewall, kernel, or web-server change makes SSH unavailable.
  • Use a persistent terminal such as tmux or screen so a dropped SSH connection does not interrupt an interactive transaction. Do not start a second package operation after reconnecting until you have checked whether the first one completed.

Identify the operating system and repositories

Record the release and enabled sources before changing packages:

cat /etc/os-release

On Debian and Ubuntu, inspect /etc/apt/sources.list and files under /etc/apt/sources.list.d/. On RHEL-family distributions, inspect the enabled DNF repositories and module streams. Third-party repositories can provide newer PHP or database versions, but they also change your support and rollback assumptions. Know exactly which repository supplies each package.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Make and verify backups

Create both a provider snapshot and a database backup when the provider supports snapshots. A snapshot gives you a whole-server recovery point; a logical database dump gives you a portable database-level restore option. Export databases with a least-privilege application or backup account rather than relying on the database root account.

A backup is not proven until you can read it or restore it in an isolated environment. Check the dump file size, record its location and permissions, and rehearse restoration. Keep the snapshot and dump outside the failure domain when possible. Do not delete the old backup immediately after an upgrade.

Capture the current configuration and versions

Save the enabled Apache virtual hosts and modules, PHP extensions, PHP-FPM pools if present, database users, repository files, and application configuration. Record the versions that you will compare after the transaction:

apache2 -v
php -v
mysql --version
mariadb --version

On RHEL-family systems, use httpd -v for Apache. One of the database commands may return an error if that implementation is not installed; the purpose is to identify the active stack, not to force both clients to exist.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Check application compatibility

Read the supported-version matrix for your actual application. Check required PHP extensions, upload limits, scheduled tasks, queue workers, CLI scripts, and any native modules. Verify that Apache modules and TLS settings match the current virtual-host configuration. If the proposed transaction crosses a major PHP or database version, stage it on a clone first and test the complete application, not only the home page.

Choose the scope of the update

Use the smallest change that solves the problem:

Scope Typical source Risk and planning Validation
Security patch or compatible minor release Supported distribution repository Usually routine, but packages can restart services or change configuration defaults Review the transaction, then test services and representative application paths
Several component updates in one maintenance window Distribution repositories, with a consistent repository policy Interactions are harder to isolate; a failed service may have several possible causes Capture logs after each transaction and test before proceeding to the next component
Major PHP, MySQL, or MariaDB version migration Distribution or vendor repository explicitly supporting the target Potentially breaking language, extension, SQL, authentication, or default changes Use a clone or staging system, follow the vendor’s upgrade notes, rehearse restore, and schedule downtime
Automatic security updates Distribution automation such as unattended-upgrades Less manual work, but updates may restart services or require a reboot outside your preferred window Define exclusions, monitoring, reboot handling, and console access before enabling it

Do not mix MySQL and MariaDB repositories casually. Choose one supported database channel and keep its signing keys and repository definitions current. A package manager can resolve dependencies, but it cannot determine whether your application is ready for a major-version migration.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

Ubuntu and Debian: a safe APT sequence

Ubuntu’s package documentation identifies APT as the recommended command-line tool for Debian packages. The safest interactive flow is to refresh metadata, inspect available upgrades, and then install them after review.

1. Refresh repository metadata

sudo apt update

This downloads current package indexes. It does not upgrade Apache, PHP, or the database. Read warnings about unreachable repositories, expired signing keys, release mismatches, or held packages; resolve those before proceeding.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Review the proposed changes

apt list --upgradable

Compare the list with your recorded versions and maintenance plan. Pay attention to packages that would remove other packages, introduce a new major version, install a new PHP-FPM service, or change the database implementation. If the list is unexpectedly large, stop and investigate repository or release issues instead of accepting it blindly.

3. Apply the normal upgrade

sudo apt upgrade

Review the transaction summary and any configuration-file prompts. A package may offer to keep your locally modified configuration or install the maintainer’s version. Do not select an option by habit: compare the files, preserve deliberate site-specific settings, and keep a copy of either version. If a package manager reports broken dependencies or an interrupted transaction, finish or repair that state before starting another upgrade.

4. Target LAMP packages when you need a narrower transaction

After reviewing the available versions, you can request upgrades for the relevant packages:

sudo apt install --only-upgrade apache2 php* mariadb-server mariadb-client

Package names vary by release. The wildcard may match a different set of PHP packages, and some systems use MySQL packages instead of MariaDB packages. Confirm the exact names with your distribution before running the command. The --only-upgrade option avoids installing a package that is not already present, but it does not remove the need to review dependencies and configuration prompts.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

5. Use apt-get in automation

Ubuntu notes that apt-get is preferable to the more interactive apt utility in scripts. An automated maintenance job can use:

sudo apt-get update
sudo apt-get upgrade

Automation still needs a policy for configuration prompts, held packages, service restarts, failure notifications, and reboots. Do not turn an interactive production procedure into an unattended script until you have tested those branches.

Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Verify Apache after the package transaction

Ubuntu commonly installs Apache as the apache2 package and stores its configuration under /etc/apache2/. RHEL-family systems normally use the httpd package and service. Validate syntax before restarting or reloading:

sudo apachectl configtest

A successful result should report that the syntax is valid. If your distribution uses a different wrapper, run the equivalent configuration-test command for that package. Check the enabled virtual hosts, TLS certificates and protocols, proxy or rewrite modules, and any site-specific include files.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When configuration permits, prefer a reload so existing connections are disturbed as little as possible. Restart only when the package or configuration requires it:

sudo systemctl reload apache2
sudo systemctl --no-pager --full status apache2
sudo journalctl -u apache2 -n 100 --no-pager

Use sudo systemctl restart apache2 when a restart is necessary. On RHEL-family systems substitute httpd. A service can show as active while the application still fails, so inspect both the Apache error log and the application’s own log.

Verify PHP and the active execution path

PHP can run as an Apache module or through PHP-FPM. Updating the command-line interpreter does not prove that web requests use the same version. Identify the active SAPI, loaded extensions, and service units:

php -v
php -m
systemctl list-units --type=service | grep -E 'php.*fpm|apache2|httpd'

If PHP-FPM is active, check the specific versioned service shown by the final command. Confirm its socket or listener matches the Apache virtual-host configuration. Restart or reload PHP-FPM only after checking the pool configuration and process limits.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Test the application’s real PHP requirements

  • Open an ordinary public page and an authenticated page, not just a static file.
  • Exercise the login, form submission, database read, and database write paths.
  • Test file uploads and verify that the effective upload and post-size limits remain correct.
  • Run scheduled CLI commands, queue workers, and deployment hooks using the same PHP binary and user that production uses.
  • Check that every required extension remains loaded. A package update can leave the PHP interpreter working while a missing extension breaks one feature.

Major PHP releases can remove deprecated features or alter defaults. Use the application’s supported-version matrix and stage such a change. If the application fails after the update, preserve the PHP and web-server logs before changing packages again.

Verify MySQL or MariaDB

Debian’s LAMP guidance commonly uses MariaDB as a MySQL replacement, recommends running mysql_secure_installation after installation, and advises applications to connect with a separate database account rather than the privileged root account. MariaDB publishes APT repositories and packages for the server, clients, libraries, plugins, and backup tooling. Follow the repository’s supported upgrade path for your exact source and target versions.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Check the service and logs

sudo systemctl status mariadb
sudo mariadb-check --all-databases
sudo journalctl -u mariadb -n 100 --no-pager

If the server package is MySQL rather than MariaDB, the service is commonly named mysql; use the service and diagnostic commands provided by that package. The database check can take time on a large server. Run it during an appropriate maintenance window and investigate reported table errors rather than treating a running service as proof of data integrity.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Prepare for a major database upgrade

  1. Take a fresh logical dump and a provider snapshot.
  2. Read the vendor’s upgrade notes for the exact source and target versions, including authentication, character-set, SQL-mode, and system-table changes.
  3. Rehearse the upgrade and restoration on a clone or staging host.
  4. Confirm that the application’s database driver and ORM support the target server.
  5. Schedule downtime if the vendor procedure requires it, and keep the old backup until production has passed its verification period.

Do not combine a database implementation switch with an unrelated PHP migration unless you have a specific, tested reason. Keeping changes separable makes failures easier to diagnose and rollback.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

AlmaLinux, Rocky Linux, and other RHEL-family VPSs

RHEL-family distributions use DNF and commonly name Apache httpd. PHP’s MySQL-compatible driver is often packaged as php-mysqlnd, rather than Debian’s php-mysql. The enabled module stream and repository policy determine which versions are available.

Review and apply updates

sudo dnf check-update
sudo dnf upgrade

dnf check-update can return a nonzero status when updates are available; that is not necessarily an error. Read the package transaction before confirming it. If the transaction proposes a module-stream switch or removal, stop and follow the distribution’s documented stream procedure.

Install the corresponding stack packages when required

sudo dnf install httpd mariadb-server php php-fpm php-mysqlnd

Run this only when those packages are appropriate for the installed image and repository policy. It can install components that were not previously present, which is different from a pure upgrade.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Restart and inspect each service

sudo systemctl restart httpd
sudo systemctl restart php-fpm
sudo systemctl restart mariadb
sudo systemctl --no-pager --full status httpd php-fpm mariadb

Use reload where supported and safe, and check the service logs with journalctl. Configuration paths, SELinux policy, firewall rules, and PHP-FPM socket locations can differ from Debian-family systems. A permission error may be an SELinux labeling problem rather than a package failure.

Post-update verification checklist

Run these checks after each meaningful transaction, not only at the end of a long maintenance session:

  • Check systemctl status for Apache or httpd, PHP-FPM when used, and MySQL or MariaDB.
  • Run the web-server configuration test and inspect recent service logs.
  • Request a health endpoint and a representative authenticated page over HTTPS.
  • Test database reads and writes, uploads, background jobs, scheduled tasks, and outbound mail if the application uses them.
  • Compare enabled modules, PHP extensions, virtual-host files, PHP-FPM pools, database users, and repository definitions with the pre-update record.
  • Check disk space, memory pressure, and open service ports. A successful package operation can still expose a resource problem after a restart.
  • Confirm certificate loading and the expected redirect, hostname, and protocol behavior.

Use application monitoring where available. A basic HTTP 200 response is not enough if the application returns an error page with a successful status code or if writes and queue processing are broken.

What to do when something fails

SSH stops working

Use the provider console. Check the SSH service, firewall rules, disk space, and recent authentication or system logs. Do not reboot repeatedly without preserving evidence. If the package transaction is still running, let it finish or inspect its lock state from the console before taking corrective action.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Apache fails its configuration test

Read the exact file and line named by apachectl configtest. Restore the known-good virtual-host or module configuration from your pre-update copy, correct the syntax, and rerun the test. Do not restart a service with an invalid configuration when a reload or restart can be avoided.

PHP pages return errors

Compare the web SAPI and CLI versions, inspect PHP-FPM and Apache logs, and check whether a required extension or directive disappeared. Verify file permissions and the FPM socket path. If the problem is a major-version incompatibility, restore the tested package set or snapshot rather than repeatedly editing production code under pressure.

The database does not start or applications cannot connect

Inspect the database journal and error log first. Check disk space, permissions, data-directory ownership, authentication settings, and whether the package performed a system-table migration. Preserve logs, stop application writers if necessary, and use the rehearsed database restore or provider snapshot. Never delete database files or initialize a new data directory as an improvised fix.

The update itself is incomplete

Package managers can leave a system in a partially configured state after an interrupted connection or power failure. Use the distribution’s documented package-repair procedure, complete pending configuration prompts deliberately, and confirm that no package-manager lock is held by another process. Record the output before attempting a second upgrade.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Rollback options and their limits

Rollback is not one universal command. Choose the method that matches the failure:

Problem Preferred recovery Important qualification
Only a configuration change is wrong Restore the known-good configuration, validate syntax, then reload or restart Keep the failed file and logs for diagnosis
A package release is incompatible Use the distribution’s supported package downgrade or restore a provider snapshot Downgrades can require matching dependencies and are not always safe for databases
Database data or schema is damaged Restore the tested logical dump or snapshot according to the database vendor’s procedure Stop writes and verify consistency before reopening the site
Several services and files changed Restore the complete provider snapshot, then replay only tested changes Snapshot restoration can roll back unrelated data created after the snapshot

Preserve Apache, PHP-FPM, database, package-manager, and application logs before restoring whenever possible. They may identify the offending change and prevent a repeat failure.

Automatic security updates without losing control

Ubuntu documents unattended-upgrades for automatic updates. Its policy is configured in /etc/apt/apt.conf.d/50unattended-upgrades, scheduling in /etc/apt/apt.conf.d/20auto-upgrades, and detailed logs in /var/log/unattended-upgrades. Ubuntu also warns that an update can warrant a reboot.

Enable automation only after deciding which origins and packages are allowed, which packages are excluded, when maintenance may occur, and how you will detect a failed service. Define monitoring for HTTP errors, PHP-FPM, Apache, and database health. Have a reboot policy and console access before allowing automatic kernel or library updates. Automatic security patching reduces exposure time, but it does not replace backups, compatibility testing, or post-update monitoring.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A repeatable maintenance runbook

  1. Open a persistent SSH session and confirm sudo access plus the provider console.
  2. Record the OS release, enabled repositories, component versions, service units, and application requirements.
  3. Take and verify a provider snapshot and database backup.
  4. Classify the work as a routine patch, a coordinated minor update, or a major migration.
  5. Refresh package metadata and review the complete transaction.
  6. Apply the smallest planned package set for the distribution family.
  7. Read configuration prompts and preserve deliberate local settings.
  8. Validate Apache or httpd configuration before reloading or restarting.
  9. Check PHP’s active SAPI, extensions, FPM pools, and application behavior.
  10. Check MySQL or MariaDB service health, table checks, logs, and application connectivity.
  11. Exercise authenticated pages, writes, uploads, jobs, and scheduled tasks.
  12. Record the final versions and any changed configuration, then keep the rollback artifacts until the site has remained healthy for the planned observation period.

This process gives you a controlled update path without depending on a control panel: the package manager handles files and dependencies, while your runbook handles compatibility, service orchestration, testing, and recovery.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.