One can also do the 'yum-cron' dance to automate updates. Good writeup and description here: https://www.howtoforge.com/tutorial/how-to-setup-automatic-security-updates-on-centos-7/ On Fri, Feb 15, 2019 at 11:37 PM Rob Kampen <rkampen at kampensonline.com> wrote:> On 16/02/19 6:59 PM, Ralf Prengel wrote: > > Hallo, > > as a beginner using centos I?ve a question about updates. > > What it the right repo for getting all security and other updates? > > > http://mirror.eu.oneandone.net/linux/distributions/centos/7.6.1810/updates/ > > for example? > > If you have installed CentOS 7 it should have everything in place for > regular updates. > > You simply need to invoke "sudo yum update" on a regular basis to ensure > all the available updates are installed. Yum and rpm take care of > sorting out where to check and apply updates from. > > HTH. > > > > > Thanks > > Ralf > > > > > > _______________________________________________ > > CentOS mailing list > > CentOS at centos.org > > https://lists.centos.org/mailman/listinfo/centos > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos >-- Tate Belden "The Dungeon <http://ka7o.net>" A place of (solder) smoke, weird (server) sounds and (LED) blinky lights. More than a few bugs of various flavors, too. Natrona County Beekeepers <http://ncbees.org> Casper Amateur Radio Club <http://casperarc.net> ?Any sufficiently advanced alien life is indistinguishable from God? to those that don't understand. -- Cpt. C. Pike
On Feb 16, 2019, at 15:14, Tate Belden <wyoham at gmail.com> wrote:> > One can also do the 'yum-cron' dance to automate updates. > Good writeup and description here: > > https://www.howtoforge.com/tutorial/how-to-setup-automatic-security-updates-on-centos-7/1.) yum-cron with ?update_cmd = security? wont do anything for CentOS because it doesn?t have security metadata in its repos. EPEL will get updates. The person who wrote this must be using RHEL or some clone that publishes security metadata. Looking at google for this topic shows a lot of people get this wrong, which means there are probably a lot of insecure systems out there. 2.) pet peeve: use ?grep searchterm filename? and not ?cat filename | grep searchterm?. 3.) you don?t need to restart the yum-cron.service systemctl unit after modifying yum.conf, since it?s not a running service, it just touches a file that tells the cron job that it is activated. ? Jonathan Billings <billings at negate.org>
> Am 17.02.2019 um 14:28 schrieb Jonathan Billings <billings at negate.org>: > >> On Feb 16, 2019, at 15:14, Tate Belden <wyoham at gmail.com> wrote: >> >> One can also do the 'yum-cron' dance to automate updates. >> Good writeup and description here: >> >> https://www.howtoforge.com/tutorial/how-to-setup-automatic-security-updates-on-centos-7/ > > 1.) yum-cron with ?update_cmd = security? wont do anything for CentOS because it doesn?t have security metadata in its repos. EPEL will get updates. The person who wrote this must be using RHEL or some clone that publishes security metadata. Looking at google for this topic shows a lot of people get this wrong, which means there are probably a lot of insecure systems out there. > > 2.) pet peeve: use ?grep searchterm filename? and not ?cat filename | grep searchterm?. > > 3.) you don?t need to restart the yum-cron.service systemctl unit after modifying yum.conf, since it?s not a running service, it just touches a file that tells the cron job that itHallo. thanks to all for the answers. One aspect is unclear for me. Updates are published using the update-directory like the one in my question? Ralf