On Tue, 2003-06-10 at 05:27, Joerg Mertin wrote:
> Hi again,
>
> On Tue, 10 Jun 2003, Greg Meyer wrote:
> > On Tuesday 10 June 2003 06:37 am, Joerg Mertin wrote:
> > > So - any hints/tips welcome ...
> > >
> > I have my server running Mandrake 9.0. It runs httpd, samba, nfs, print queu
> > mgmt with cups and a few other things and it has been running for 155 days
> > now without an issue. I was gonna try and upgrade it to 9.1 last weekend,
> > but I found out I had to do a presentation this week so I didn't want to risk
> > it getting screwed up so I'll upgrade it after my presentation today.
> >
> > You can set it to do automatic updates by creating an update source and using
> > urpmi in a cron job to keep it up to date. This is what I do.
> >
> > I keep a local mirror of the update sources using fmirror. If I see in the
> > morning that there has been an update on the mirror, I check out the advisory
> > at mandrakeSecure and then wait a few days to make sure there isn't an issue
> > with the update. If there isn't, I run the commands "urpmi.update --update"
> > and then "urpmi --auto-select --update" This updates the hdlist files for
> > urpmi and then automatically updates anything that is installed. If you want
> > it to be automatic, you could set it all up in a cron job. Set it and forget
> > it. You also don't need a local mirror, you could update directly from one
> > of the mirrors. I just like having it mirrored locally because it is easier
> > to update more than one machine that way, plus I get notified via e-mail when
> > the cron job pulls down a new update.
>
> What you did just put in here - is something I already do with the RedHat
> System. However - I do have the Security Update-System hooked to the
> rhn-advisory system, so that it triggers updates as soon as these are
> available. As you said - you wait couple of days before applying the
> patches, while I don't - and up to now - I have run pretty well with it
> (Only thing that happens form time to time, one of the servers not
> restrting correctly as Mysql or httpd - but that can be checked by
> cron-job.).
Actually it's not that out of date.... it runs every day at about 4am
local.
cd /etc/cron.daily
vi updater
#!/bin/sh
urpmi.update -a
urpmi --auto --auto-select
then save it. I then ran urpmi.setup to get urpmi running right.
The in /etc/urpmi/ the file urpmi.cfg you'll see something like this.
Installation\ CD\ 1\ (x86)\ (cdrom1) removable://mnt/cdrom/Mandrake/RPMS
{
hdlist: hdlist.Installation CD 1 (x86) (cdrom1).cz
with_hdlist: ../base/hdlist1.cz
removable: /dev/scd0
}
add the line ignore
Installation\ CD\ 1\ (x86)\ (cdrom1) removable://mnt/cdrom/Mandrake/RPMS
{
hdlist: hdlist.Installation CD 1 (x86) (cdrom1).cz
with_hdlist: ../base/hdlist1.cz
removable: /dev/scd0
ignore
}
This ignores the disks and forces it to the net for all rpms. (make
sure you do this for all 3 cd's)
I'm now updated daily.. IF there is something critical I manually run
the cron job.
This does everything except kernels... this is good. I prefer doing
kernels by hand anyway.
James
>
> PS: I do keep Mirrors of several Distributions, notably, Mandrake-9.1 +
> updates, RedHat-7.3 + Updates, Knoppix, Texstar/Plf-RPM's - so I have
> fairly enough data here. However - what I want is a System that is able to
> "intelligently" and "fast" cope with Security issues, where I don't have
> to on a regular base look at it (actually - the way I do it right now
> using rh7.3) :(
>
> Thx for your comments.
>
> PS: I looked at the Mandrake Server-Packages... But I won't buy it - I
> just don't want to put 1500,- Bucks as a private person into it.
>
> Cheers
>
> Joerg
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com