howto/upgrades.md

@@ -41,6 +41,8 @@ Some teams might be missing from the list.
 
 ## Minor upgrades
 
+### Unattended upgrades
+
 Most of the packages upgrades are handled by the unattended-upgrades package which
 is configured via puppet.
 
@@ -56,6 +58,13 @@ If a package origin isn't picked by unattended upgrades it will need to be upgra
 by hand or its origin added to `modules/profile/manifests/unattended_upgrades.pp` in
 puppet.
 
+### Manual upgrades with Cumin
+
+It's also possible to do a manual mass-upgrade run with
+[Cumin](howto/cumin):
+
+    cumin -b 10  '*' 'apt update ; apt upgrade -yy ; dsa-update-apt-status'
+
 ### Restarting services
 
 After upgrades, there's a Nagios check that might trigger and tell you