I have a server that is undergoing some patching soon and would like to make note of any files that have changed after the patching is complete. Can you recommend a tool that uses md5sum snapshots to do a quick before and after test, showing anything that's changed on a particular file system?
Aide It is included in CentOS 5. Regards, Tim On Wed, Jun 3, 2009 at 11:18 PM, Sean Carolan <scarolan at gmail.com> wrote:> I have a server that is undergoing some patching soon and would like > to make note of any files that have changed after the patching is > complete. ?Can you recommend a tool that uses md5sum snapshots to do a > quick before and after test, showing anything that's changed on a > particular file system? > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos >-- Tim Verhoeven - tim.verhoeven.be at gmail.com - 0479 / 88 11 83 Hoping the problem magically goes away by ignoring it is the "microsoft approach to programming" and should never be allowed. (Linus Torvalds)
Sean Carolan wrote:> I have a server that is undergoing some patching soon and would like > to make note of any files that have changed after the patching is > complete. Can you recommend a tool that uses md5sum snapshots to do a > quick before and after test, showing anything that's changed on a > particular file system?I always like brute force - and the ability to undo things... If you have space somewhere to rsync (-aH) a backup copy of the filesystems before the changes, repeating the rsync with -aHvn --delete, (don't forget that -n) will show what is different afterwards. -- Les Mikesell lesmikesell at gmail.com
On Wed, Jun 3, 2009 at 10:18 PM, Sean Carolan <scarolan at gmail.com> wrote:> I have a server that is undergoing some patching soon and would like > to make note of any files that have changed after the patching is > complete. ?Can you recommend a tool that uses md5sum snapshots to do a > quick before and after test, showing anything that's changed on a > particular file system?Simple but effective: find . -type f -exec md5sum {} \; | sort > /tmp/previous Do the same after with a different file name and use diff Cheers Didi> _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos >
On Wed, Jun 3, 2009 at 3:18 PM, Sean Carolan <scarolan at gmail.com> wrote:> I have a server that is undergoing some patching soon and would like > to make note of any files that have changed after the patching is > complete. ?Can you recommend a tool that uses md5sum snapshots to do a > quick before and after test, showing anything that's changed on a > particular file system?I use md5deep for that. http://md5deep.sourceforge.net/. aide is useful for particular files oyu are going to keep track of over a long time (doing daily checks etc). md5deep/aide/etc will break if you have prelink turned on.. especially if you are doing updates. prelink sort of moves around library pointers in the binary which changes the checksums. rpm is smart enough to deal with this and aide is getting that smarts.. but not with the shipped version. -- Stephen J Smoogen. -- BSD/GNU/Linux How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice"