Debian :: How Do We Perform Offline Patch Management
Sep 10, 2010
How do we perform offline patch management with Debian? This isn't a question about which tools to use on Debian to load the patch once it is on a CD and transferred to said offline computer via sneaker net. More, how do I keep said offline (or strictly firewalled) computer in synch?
Pardon me while I make a comparison to Solaris. I am in no way stating Solaris is better. It just happens to be my baseline of experience.In Solaris, I can download Cluster Patch Updates (CPU). So if I build a Solaris box with a CD that is a year or more old, I can download the latest CPU and get the box patched up to date, and from that point on sneaker-net patches as they appear.
View 2 Replies
ADVERTISEMENT
Aug 26, 2010
Many software available for patch managment like OCSinventry, cfengine,puppet,redhat satellite server for linux. I want to perform patch management for my Linux server (centOS, debian) My question is how to find out which patches available for Linux and which patches i need to apply. Is there any way to find out require patches?
View 6 Replies
View Related
Aug 4, 2010
I'm at ES5. Anyone have a method for roll out or backing a single RPM or set of RPMs. In other words, I install the security errata (several packages) and it breaks something. I need to back it out, and restore the original. Also, anyone have experience using Red Hat provisioning for patch management?
View 3 Replies
View Related
Jul 14, 2011
I added a code into terminal and restarted, then I tried to install Java and this came up.'There seems to be a programming error in aptdaemon. This is the software that allows you to install/remove software and to perform other package management related tasks.'
PHP Code:
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/aptdaemon/worker.py", line 961, in simulate
[code]....
View 1 Replies
View Related
Jun 13, 2011
I am looking for a centralized patch management/package Repository solution for ubuntu and RH.
View 4 Replies
View Related
Mar 24, 2011
I have received a task to install Dell's KACE patch management agents (kboxagent) on a large number of 11.2 and 11.4 openSuSE systems in our organization A search of the forum did not find any references for KACE. Has anyone had any expierence with the KACE product on openSuSE?Google searches only find ver 5.1 of KACE for RH systems. Is this version compatible with all Linux's?
View 1 Replies
View Related
Sep 1, 2010
i want to create Central Opensuse repository for Patch management just like WSUS in windows,which automatically downloads Updates/Patches and distribute to the Clients locally.
View 1 Replies
View Related
Jan 26, 2010
Does linux have any patch managment software/solution which can distribute the patches to linux and windows clients OR is it possible that we can deploy the patches from linux to windows machines
View 1 Replies
View Related
Jul 30, 2010
I've inherited the following Virtual Machine scenario and am new to Linux Administration and Patch Management. The Host Operating System is Windows 2003 Enterprise, which has VMware Server 2.0.2 installed. Under the VMware Server 2.0.2 I have a Ubuntu 32-bit OS web server running Apache2 Web Services. When I log onto the Ubuntu server (9.10 32-bit) I see the following two lines just above the new mail/last logon lines.
85 packages can be updated
55 updates are security updates
I would like to see at least a summary of each update and its urgency so I can notify the various developers/server owners to get their input regarding whether we should or should not apply that particular update to the server. We apply the patches in our test/dev environment first then once vetted there we roll them out to our production servers. What I am looking for is a way to automate the gathering of the information and once approval has been received automating the actual patching process so that I do not have to manually perform the apt-get process for each separate package needed/approved.
Ideally I would like a recommendation for a GUI based package to manage this process and that is capable of generating the appropriate reports for the 'powers that be' regarding the current security/patch management environment. For proof of concept I would like a free version that is not hamstrung in functionality but is not too costly to procure the production version with no limitations.
View 4 Replies
View Related
Aug 17, 2010
I am running 6 servers on RHEL4.4 with oracle databases and application on HP ML370 hardware. Since initial installation, I have not applied any patch updates. I would like to start practising Patch Management and would like to know how to start and how to do it. For security reasons, I am not allowed to connect the servers to RHN or RHS hence will appreciate other options of acquiring patch updates in bundled form say on a monthly basis.
View 5 Replies
View Related
Apr 8, 2011
I just want to upgrade my Slackware 13.1 kernel (2.6.33.4) to the latest stable kernel from kernel.org (2.6.38.2). I have never done anything like this and I am a Linux newbie, so I would appreciate a "Kernel Patching for Dummies" version if possible. I did do a search on this forum and most of what I read was over my head. I found an FAQ on kernelnewbies.org on "How To Apply A Patch" but when I attempted what they suggested, it said it couldn't find the file to patch at line 5 and asked me which file to patch. So I CTRL-Z'd out of there and came here. Here's what I tried:
[code]...
View 14 Replies
View Related
Aug 24, 2011
I'm getting the following error when I'm trying to install from 'testing' repo. E: Could not perform immediate configuration on 'perl' I'm doing apt pinning to install XFCE 4.8 on Squeeze. I've already added all the necessary sources and my /etc/apt/preferences file looks like this.
Package: *
Pin: release a=testing
Pin-Priority: 400
Package: *
Pin: release a=unstable
Pin-Priority: 300
Here is what I'm trying to install.
apt-get -t testing install xfce4 xfdesktop4 xfce4-power-manager xfce4-screenshooter xfce4-notifyd thunar thunar-archive-plugin thunar-media-tags-plugin thunar-thumbnailers gvfs-backends gvfs-bin gvfs-fuse xfce4-mixer xfburn terminator
View 1 Replies
View Related
Aug 27, 2011
I am on a friend's box and we are atm transitioning from stable to sid on his box. Instead of doing the whole thing at one shot via update-manager we are doing it using the apt tools. Now while upgrading, I'm not able to update any of the perl 5.12 packages, perhaps due to circular dependencies or what. This is the error I'm seeing :-
$ sudo apt-get install perl
[sudo] password for shirish:
Reading package lists... Done
[code]....
View 2 Replies
View Related
Jan 21, 2010
I have a couple of Lenny LAMP servers, and a backup server. (virtual testing environment)
1. What is the best way to perform a backup? (system state as well as individual files) Although system state can also be accomplished through the hypervisor.
2. Between Windows computers, I access shared directories simply by \hostnamesharedmap or \host_IPsharedmap. Between Windows and linux i use SAMBA. But there must be a simple way to copy 2 files between linux hosts?
3. I've searched a lot, and only found people with the same question without a good answer: is there a linux equivalent for robocopy?
View 8 Replies
View Related
Mar 20, 2010
I am using debian 5.04 + LXDE. In the past, I sometime encounter problems such as the distro broken after performed a full apt dist-upgrade or upgrade. Now, I am more conservative, I am using apt safe-upgrade.
I want to know are there anyway to do a better safe upgrade for debian without breaking the distro?
View 2 Replies
View Related
Sep 11, 2010
is there a way to remove a patch from a kernel?
I need to apply a squashfs-lzma patch (squashfs 4.1cvs) to the liquorix kernel source which is already patched with squashfs 4.0.
how would I do that?I tried googling got this. url
but I dont know the command used to apply the patch the patch is called
35.4-3.patch.gz
url
but that patch includes more than squashfs,etc
View 1 Replies
View Related
May 24, 2015
For testing I made a debian 8 dvd 1 installation on an usb stick. I selected desktop gui gnome and lxde. Both work. An ethernet 100mb cabel connection works. I can open iceweasel an surf websites.
If I open synaptic package manager and select vlc for installation or press 'mark all upgrades' I get this message. Insert disk debian gnulinux 8 jessie official dvd bin in drive.
Synaptic does not try to get packages from the internet.
Is a debian 8 dvd 1 installation an off line installation? The package system will not connect to the internet?
View 7 Replies
View Related
Jul 25, 2015
Two nights ago I was trying to diagnose what was wrong with my internet connection. I couldn't get web pages to load, IRC and ssh weren't connecting, and email wasn't downloading (I still use POP3). I didn't know what to use to check my internet connection. I did a ping, but I didn't know how to interpret the results. So without the internet, I was totally blind.
Are there documents anywhere which install with Debian which I can search offline when my internet connection dies?
View 5 Replies
View Related
May 20, 2011
explain step by step howto apply this driver patch:
Code:
diff --git a/drivers/gpu/drm/i915/i915_gem.c b/drivers/gpu/drm/i915/i915_gem.c
index f1fcc97..0dcf761 100644
--- a/drivers/gpu/drm/i915/i915_gem.c
+++ b/drivers/gpu/drm/i915/i915_gem.c
@@ -3530,6 +3530,9 @@ i915_dispatch_gem_execbuffer(struct drm_device *dev,
[Code]....
View 5 Replies
View Related
Jun 1, 2011
Ok here's the problem : I tried to patch the kernel of my Debian server with GrSecurity but when I rebooted I couldn't SSH the server anymore, but my host has a rescue system that lets me SSH the server so I can fix things.
So maybe the kernel patching failed, maybe it's a only a problem with Grub.
I don't really know what to do to fix this. If I messed up the kernel what can I do ? Can I just fix the problem by modifying the grub entries to only boot on the old kernel (I don't even know if it's here anymore, I'm quite the n00b) ?
Well for now I'll just try to mount the partitions (won't let me do "mount: can't find /dev/sda1 in /etc/fstab or /etc/mtab" )
edit : to be clearer my main question is : how can I determine if it's because the kernel is messed up or because the system wouldn't boot properly ?
edit 2 : is there a way to create a log of what happens at boot so I can have an idea about what's wrong ?
View 7 Replies
View Related
May 11, 2011
I'm trying to install a patch but when I copy it into terminal I get message " /home/john/patch-modules_v62-opensuse.sh 'vmware-7.1.3-2.6.37-rc5.patch' not found. copy it to the current '/home/john' directory. Exiting" But I have it in my home directory!
View 3 Replies
View Related
Apr 6, 2010
For a project I have had to migrate from FreeBSD to Linux and I have decided to choose Debian because I have had good experiences with it.However, since my main development machines are completely offline I have run into a little bit of trouble.Is there a way to specify a .deb package and get a tool to recursively list (and fetch) all dependency packages that are not included in the base install and put them in a folder?
I do not like to be tied to the internet (Never a good idea) and so this would save me a heap of trouble (and journeys to an online PC)Once I have these folders containing packages, then I can simple cd into one of them, dpkg -i the relevent .deb and not have to rely on the DVDs or worry about connecting to an online repositoryLife will be good!Suffice to say FreeBSD can do this well so I strongly believe that Debian will be able to aswell but since it is not normally done, I havn't found much on google about it
View 8 Replies
View Related
Oct 2, 2015
I am using Debian 8, fully updated as of this writing.
I want to find a package or some way to get all my linux offline documentation in one place, be it through the web browser or an application, in the official reppos or not does not matter. I've already tried doc-central with apache2 but I get all sorts of error messages and something about no D-bus daemon started, i dont understand, because I;ve installed d-bus service latest version after the error. when I started doc-central correctly through almost blind luck (only once) I did not get any docs just the welcome message.
Is there an alternative to doc-central, a GUI type solution would be preferable. or at least some advice to properly configure doc-central and maybe that d-bus problem, because I clearly did something wrong, I have even tried to write the configuration through an example file for doc-central, but that did not do much, I've read that DocCentral is unstable so maybe I going at it the wrong way.
View 0 Replies
View Related
Apr 22, 2015
I have Debien 7.8 Wheezy installed on my laptop, along with the GNOME desktop. As I absolutely hate the new GNOME layout I want to install MATE so I can get the classic GNOME 2 desktop back. But I have no internet connection here at home (I only have my phone for internet and I can't tether it).
So I'm wondering if it's possible for me to download all the packages and install MATE offline? I don't even know what all the packages are that I need.I can download the packages with my phone with no issue.
I installed Debian on my laptop with the Debian DVDs in case you were wondering. when I downloaded the Debian DVD ISOs, I only saw three ISO files, but the documentation said that it's a 10 DVD set. What happened to the other 7 DVD ISOs?
View 14 Replies
View Related
Jul 30, 2011
Chris Wilson 2011-07-29 02:08:19 PDT wrote:Out of curiosity, we found a widespread bug affecting modesetting. Just on the off-chance that this is a timing issue and a incorrect clock setting
View 7 Replies
View Related
Jan 25, 2011
How to patch redhat and debian securely ? I mean is there sth like in solaris live upgrade, when after upgrade sth goes wrong I can revert to previous state from before upgrade?
View 4 Replies
View Related
Nov 25, 2015
This is the command line switch I am using:
Code: Select allwget -p -k -e robots=off -U 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.6) Gecko/20070802 SeaMonkey/1.1.4' -r www.website.com
For some reason it seems to be downloading too much and taking forever for a small website. It seems that it was following alot of the external links that page linked to.
But when I tried:
Code: Select allwget -E -H -k -K -p www.website.com
It downloaded too little. How much depth I should use with -r? I just want to download a bunch of recipes for offline viewing while staying at a Greek mountain village. Also I don't want to be a prick and keep experimenting on people's webpages.
View 3 Replies
View Related
Aug 29, 2011
I'm a Linux newbie. I want to install mysql-5.5.15-linux2.6-x86_64.tar.gz on a Debian box offline without using the apt command. How can I do this?
View 1 Replies
View Related
Aug 31, 2011
When a real kernel version is upgraded, like say 2.6.32 to 2.6.38, the old kernel is left intact and is ready to be used in case of a problem with a new one, but when only a debian patch version is updated, like 2.6.32-30 to 2.6.32-35, the old kernel is replaced with a new one. More then this, aptitude shows that older version is not in repository either, so how do you supposed to revert back? Well, i did found -30 in apt cache when i got hit by a nasty regression in -35 yesterday, but what if i had cleaned apt cache?
View 1 Replies
View Related
Jul 27, 2010
I have tried to follow the Squeeze instructions here:
[URL]
but the patch process fails (item 5)
This topic is discussed at: [URL]
Sadly, neither I nor Firefox understands colloquial German well enough to know what is going on.
View 1 Replies
View Related