Hello,
I am wondering since some time how others cope with patch management on OpenSUSE Clients, when you have a bunch of PCs in a network. Somebody who can recommend a open source tool to cover the basics (e.g. a tool automating updates with zypper over ssh or something similar)?
Thanks!
Regards, Ivan
Dne Pá 26. března 2010 18:28:37 Ivan De Masi napsal(a):
Hello,
I am wondering since some time how others cope with patch management on OpenSUSE Clients, when you have a bunch of PCs in a network. Somebody who can recommend a open source tool to cover the basics (e.g. a tool automating updates with zypper over ssh or something similar)?
Hello, in YaST | Software You can set automatic upgrade in certain time. And it works. :-) Another possibility is for example to use Konsole, which can send one command to multiple machines. You can then send "zypper dup" to all Your computers. I hope it helps little bit. :-) Best regards, Vojtěch Zeisek
Thanks!
Regards, Ivan
Am 26.03.2010 18:37, schrieb Vojtěch Zeisek:
Dne Pá 26. března 2010 18:28:37 Ivan De Masi napsal(a):
Hello,
I am wondering since some time how others cope with patch management on OpenSUSE Clients, when you have a bunch of PCs in a network. Somebody who can recommend a open source tool to cover the basics (e.g. a tool automating updates with zypper over ssh or something similar)?
Hello, in YaST | Software You can set automatic upgrade in certain time. And it works. :-) Another possibility is for example to use Konsole, which can send one command to multiple machines. You can then send "zypper dup" to all Your computers. I hope it helps little bit. :-) Best regards, Vojtěch Zeisek
Hi Vojtěch,
thanks, I know this :-)
What I'm looking for is a piece of software to do "zypper up" for example on 15, 20, or 2000 machines at the same time in a controlled way (building groups of machines before that or so). Now I have to log in via ssh on every machine and do my
# zypper lp # zypper lu # zypper up
an so on...
Shure - if my scripting know how would be better I would write my own mechanism for automating these steps an add some more...
Regards, Ivan
On 2010.03.26 18:44, Ivan De Masi wrote:
What I'm looking for is a piece of software to do "zypper up" for example on 15, 20, or 2000 machines at the same time in a controlled way (building groups of machines before that or so). Now I have to log in via ssh on every machine and do my
# zypper lp # zypper lu # zypper up
an so on...
Shure - if my scripting know how would be better I would write my own mechanism for automating these steps an add some more...
There are several tools for that. The simplest solution is to use one of those here: - dsh (distributed shell) - dsh (dancer's shell) - pdsh (included in standard repository)
If you need to evaluate the result of the commands you need another tool or at least a bit of scripting.
On Fri, 2010-03-26 at 18:44 +0100, Ivan De Masi wrote:
Am 26.03.2010 18:37, schrieb Vojtěch Zeisek:
Dne Pá 26. března 2010 18:28:37 Ivan De Masi napsal(a):
Hello,
I am wondering since some time how others cope with patch management on OpenSUSE Clients, when you have a bunch of PCs in a network. Somebody who can recommend a open source tool to cover the basics (e.g. a tool automating updates with zypper over ssh or something similar)?
Hello, in YaST | Software You can set automatic upgrade in certain time. And it works. :-) Another possibility is for example to use Konsole, which can send one command to multiple machines. You can then send "zypper dup" to all Your computers. I hope it helps little bit. :-) Best regards, Vojtěch Zeisek
Hi Vojtěch,
thanks, I know this :-)
What I'm looking for is a piece of software to do "zypper up" for example on 15, 20, or 2000 machines at the same time in a controlled way (building groups of machines before that or so). Now I have to log in via ssh on every machine and do my
# zypper lp # zypper lu # zypper up
an so on...
Shure - if my scripting know how would be better I would write my own mechanism for automating these steps an add some more...
If you want to run a program either simultaneously or sequentually, have a look at tentacle...
However, considering doing upgrades, i'm not shure if i would recommend doing it unattended and automagically
Most problems i encounter (having 200++ machines) come to light after a mandatory system reboot. Not all systems come up. Sometimes they just fail to die (nasty habbit of md) or there's something wrong with one of the kernel-modules.
Bad enough if just one machine failes, but in my case most of the hardware is running XEN-hypervisors, so if they fail, all of the clients-machines are lost as well.
And if something goes sour with apache or php (ften some undocumented change in kerberos-code), i rather find out with the first machine, and put the pathes for all other machines on hold, while repairing the first one.
Furthermore if the machine with either the nfs-share with the repo-data or the local httpp-install-server goes down while an upgrade is going on, on another machine.... Well it wouldn't speed up the process ;-)
That's why i do those upgrade on the last friday of th month: most people leave early on that day...
hw
Am 27.03.2010 00:51, schrieb Hans Witvliet:
On Fri, 2010-03-26 at 18:44 +0100, Ivan De Masi wrote:
Am 26.03.2010 18:37, schrieb Vojtěch Zeisek:
Dne Pá 26. března 2010 18:28:37 Ivan De Masi napsal(a):
Hello,
I am wondering since some time how others cope with patch management on OpenSUSE Clients, when you have a bunch of PCs in a network. Somebody who can recommend a open source tool to cover the basics (e.g. a tool automating updates with zypper over ssh or something similar)?
Hello, in YaST | Software You can set automatic upgrade in certain time. And it works. :-) Another possibility is for example to use Konsole, which can send one command to multiple machines. You can then send "zypper dup" to all Your computers. I hope it helps little bit. :-) Best regards, Vojtěch Zeisek
Hi Vojtěch,
thanks, I know this :-)
What I'm looking for is a piece of software to do "zypper up" for example on 15, 20, or 2000 machines at the same time in a controlled way (building groups of machines before that or so). Now I have to log in via ssh on every machine and do my
# zypper lp # zypper lu # zypper up
an so on...
Shure - if my scripting know how would be better I would write my own mechanism for automating these steps an add some more...
Hello All,
thanks for your responses!
Sure - a complete dist-upgrade I also would never do automatically :-) Every time a new OpenSUSE version is available I prepare a master machine with autoyast to roll out a fresh installation...
I've been looking a little bit around the web again for a zypper based solution for my posted problem and just want to post some interesting links here that are good start. I did not expect to find a "out of the box" solution like Microsoft WSUS for Windows Clients, but maybe one day there will be project going to implement something like this for OpenSUSE Clients... who knows?!
For monitoring necessary updates on clients with nagios: http://en.opensuse.org/Nagios-plugins-zypper http://www.linuxjournal.com/content/use-nagios-check-your-zypper
Mail notification if new updates are available: https://blog.cboltz.de/archives/46-patch2mail-for-openSUSE-11.1.html http://yourlinuxguy.com/?p=324
Another little script at the end of the post: http://www.linux-club.de/viewtopic.php?f=3&t=84601&start=0
Thanks again!
Regards, Ivan
Am 27.03.2010 13:25, schrieb Ivan De Masi:
Am 27.03.2010 00:51, schrieb Hans Witvliet:
On Fri, 2010-03-26 at 18:44 +0100, Ivan De Masi wrote:
Am 26.03.2010 18:37, schrieb Vojtěch Zeisek:
Dne Pá 26. března 2010 18:28:37 Ivan De Masi napsal(a):
Hello,
I am wondering since some time how others cope with patch management on OpenSUSE Clients, when you have a bunch of PCs in a network. Somebody who can recommend a open source tool to cover the basics (e.g. a tool automating updates with zypper over ssh or something similar)?
Hi,
here's a litte update to my request. I already posted this on autoyast list and got another very helpful hint:
Just a short feedback: Today I found this tool here - "apt-dater" - on the german "Linux Magazin". Looks like what I was searching for:
http://www.linux-magazin.de/content/view/full/57440
The say that it can handle OpenSUSE via "rug". So I'll try that!
"bigbeer" posted this:
There is zypper support now. There is also a project from the author on the buildservice. https://build.opensuse.org/project/show?project=home%3Aliske
Regards, Ivan
-
Hans Witvliet -
Ivan De Masi -
Sandy Drobic -
Vojtěch Zeisek