topic Re: Central Patch Management in Linux in Operating System - Linux

Central Patch Management in Linux

Amol Choukekar — Fri, 30 Apr 2004 15:35:30 GMT

Hi,
I have got a farm of Redhat AS 2.1 and ES 3. I am looking for a patch management solution.

The whole idea is to deploy a central server that will get updates from rhn and then these can be pulled by or pushed to production servers after testing.

Please let me know how this can be acheived?

Re: Central Patch Management in Linux

Steven E. Protter — Fri, 30 Apr 2004 16:04:44 GMT

up2date will do it.

You can set up one server to do the actual up2date process and set it to save the patches it downloads to a particular location. That install point can be used for other servers to install the rpms.

Just fire up the GUI and configure up2date to save the rpm files. Its best that this location be a nfs or samba export so other systems can get to it.

SEP

Re: Central Patch Management in Linux

Stuart Browne — Sat, 01 May 2004 08:56:47 GMT

AS is supposed to come with patch-redployment tools.

I don't know what they're called, or how to work them unfortunately (only use ES3), but it's one of the selling points of AS..

Re: Central Patch Management in Linux

Vitaly Karasik_1 — Sun, 02 May 2004 03:08:11 GMT

You have two options:

- to use RH tools - RHN proxy or satellite server

- use Current - free replacement for RHN server, but with limited functionality (http://current.tigris.org/)

Rgds,
Vitaly

Re: Central Patch Management in Linux

Rodney McKee_1 — Sun, 02 May 2004 20:02:00 GMT

Using supported tools, RHN Proxy or satellite. I must say that this is VERY expensive.
Outside this you can use the free version as per Vitaly's comment. This MAY lead to support issues though.
Is there an issue with using RHN to manage the patching. My guess would be band width.
You may be able to use a single system to download the required patches but this system must have ALL packeges installed that are used by ALL the systems. This could get messy if the systems are running a variety of configs.

Re: Central Patch Management in Linux

dirk dierickx — Mon, 03 May 2004 08:45:51 GMT

Red Carpet from ximian can do such things.
take a look at it here: http://www.ximian.com/products/redcarpet_enterprise/

Red Carpet makes it all very simple, but it is not free. If you want to get your hands dirty you could set up your own apt repository and then use 'apt' on all your systems against your repository.
apt for rpm can be found here: http://apt4rpm.sourceforge.net/

using one of the above you can easily manage patches across a large amount of servers.

Re: Central Patch Management in Linux

Roberto Polli — Mon, 03 May 2004 10:15:04 GMT

Currentrly RH is supporting -thru Fedora- a tool named
yum
which fits for redhat better than apt (which is debian oriented)

I suggest to take a look at it form the fedora site.

Peace, R/

Re: Central Patch Management in Linux

Amol Choukekar — Fri, 07 May 2004 08:20:34 GMT

Thanks for the replies. But does yum work on RHAS2.1 and RHES3?

Thanks!
AC