Patching/updating with package promises

[Beto]

Is there a better way to do mass patching with package promises rather than simply using a commands promise to run “yum –y update”?

Thanks!

[Nick Anderson]

On 04/21/2016 02:29 PM, Beto wrote:
> Is there a better way to do mass patching with package promises rather
> than simply using a commands promise to run “yum –y update”?

I don't know if it's better or not. But you could get a list of package
updates available from packageupdatesmatching() and iterate over that
list promising to use the latest version available.

I usually just schedule yum -y update/upgrade.

[Sean Johnson]

> Is there a better way to do mass patching with package promises rather
> than
> simply using a commands promise to run “yum –y update”?

It may not apply in your environment, but I use Spacewalk (free version
of RHN Satellite) for bulk updates. CFEngine is in charge of getting
packages installed initially, and if version matters, then I do use it
to make sure a particular version of something is installed. The number
of packages where specific version matters is significantly less than
the bulk of standard OS updates.

> --
> You received this message because you are subscribed to the Google
> Groups "help-cfengine" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to help-cfengin...@googlegroups.com.
> To post to this group, send email to help-c...@googlegroups.com.
> Visit this group at https://groups.google.com/group/help-cfengine.
> For more options, visit https://groups.google.com/d/optout.

[Nick Anderson]

Somewhat related, but still off topic I have previously used the cache
or download only options to make sure that before a patching window, all
hosts have all updates available locally.

[Beto]

Thanks, Nick

I'm not sure if it's better either, but I had overlooked that function so I learned something from your reply! :)

[Neil Watson]

On Thu, Apr 21, 2016 at 02:48:10PM -0500, Sean Johnson wrote:
>It may not apply in your environment, but I use Spacewalk (free
>version of RHN Satellite) for bulk updates. CFEngine is in charge of

++
The reporting and scheduling of package installations provided by
Spacewalk is valuable.

--
Neil H Watson
CFEngine reporting: https://github.com/neilhwatson/delta_reporting
CFEngine policy: https://github.com/neilhwatson/evolve_cfengine_freelib
CFEngine and vim: https://github.com/neilhwatson/vim_cf3

[Beto]

Thanks guys!  Appreciate the feedback.

[Ted Zlatanov]

On Thu, 21 Apr 2016 12:29:59 -0700 (PDT) Beto <bwi...@gmail.com> wrote:

B> Is there a better way to do mass patching with package promises rather than
B> simply using a commands promise to run “yum –y update”?

For RedHat in particular, I like yum-cron because it can do just
security updates, for instance, but be careful: it can upgrade CFEngine
itself unexpectedly.

Ted