[Freeipa-users] Re: FreeIPA server packages upgrade best practice

2021-07-16 Thread Charles Hedrick via FreeIPA-users
We’ve had good experience doing just release upgrades, e.g from 8.1 to 8.2. For that I do yum update, I,e. the whole thing. My assumption is that testing is done on systems with the full release.! So upgrading just some things gives us a configuration that hasn’t been tested. We did a full

[Freeipa-users] Re: FreeIPA server packages upgrade best practice

2021-07-16 Thread Suchismita Panda via FreeIPA-users
Hello, Following up again for my question in the previous email, pasted below. It would be really helpful, if it could be answered - We are using CentOS currently for our FreeIPA servers, as per your advice we will skip the full OS automatic patching. If we limit the automated patching to just

[Freeipa-users] Re: FreeIPA server packages upgrade best practice

2021-06-18 Thread Suchismita Panda via FreeIPA-users
Thank you for your reply. We are using CentOS currently for our FreeIPA servers, as per your advice we will skip the full OS automatic patching. If we limit the automated patching to just target kernel packages, will that be risk free? -Suchi On Thu, Jun 17, 2021 at 1:00 PM Rob Crittenden

[Freeipa-users] Re: FreeIPA server packages upgrade best practice

2021-06-17 Thread Rob Crittenden via FreeIPA-users
Suchismita Panda via FreeIPA-users wrote: > Thanks all for the reply. > > Circling back again - We have to do the normal OS upgrade for the > FreeIPA servers and would like to exclude the FreeIPA package to be > upgraded. I would like to know the name of the Freeipa packages which > should be

[Freeipa-users] Re: FreeIPA server packages upgrade best practice

2021-06-17 Thread Suchismita Panda via FreeIPA-users
Thanks all for the reply. Circling back again - We have to do the normal OS upgrade for the FreeIPA servers and would like to exclude the FreeIPA package to be upgraded. I would like to know the name of the Freeipa packages which should be held back from automatic upgrade. A list would be really

[Freeipa-users] Re: FreeIPA server packages upgrade best practice

2021-04-15 Thread hedrick--- via FreeIPA-users
We haven’t had a failure in the last couple of updates. But there have been enough problems in upgrades that we do it manually. In fact we duplicate all of our VMs, setting up a duplicate set of servers, and first try the upgrade on them before we do it in production. We have too many eggs in

[Freeipa-users] Re: FreeIPA server packages upgrade best practice

2021-03-31 Thread Rob Crittenden via FreeIPA-users
Suchismita Panda via FreeIPA-users wrote: > Hi, > > I would like to know the best practice for patching FreeIPA-Server > packages. We generally have daily patching enabled in our servers. Will > it be a good idea to do automatic patching of FreeIPA-Server packages? > > If we want to restrict the