Has Linux patching surpassed Mac and Windows? (ZDNet)
Has Linux patching surpassed Mac and Windows? (ZDNet)
Posted Mar 17, 2006 0:40 UTC (Fri) by drag (guest, #31333)In reply to: Has Linux patching surpassed Mac and Windows? (ZDNet) by k8to
Parent article: Has Linux patching surpassed Mac and Windows? (ZDNet)
Ya it is funny.
Go look at the horror that is 'enterprise' style Windows-based program and patch management systems. Imagine trying to roll out a Firefox patch across 300 different Windows boxes or try to install applications across all those. It looks like a huge pain that is unreliable and very expensive to say the least.
With Apt-get or Yum with ssh I can spend 20 minutes writing a custom script to do the same thing. Also making deb packages or rpms for custom software is fairly easy also.
I can do stuff like maintain a local mirror of the distro's software and when I get updates from the web.. try those out on test machines to make sure no new bugs are introduced then add them to the mirrors and let the machines automaticly update themselves via cronjobs or whatnot. It would be fairly easy to deploy configuration changes that way also.
Posted Mar 17, 2006 9:38 UTC (Fri)
by kornak (guest, #17589)
[Link] (2 responses)
Posted Mar 17, 2006 12:03 UTC (Fri)
by drag (guest, #31333)
[Link] (1 responses)
My experiance is mostly with apt-get. I just write a script to send commands to bunches of different machines with ssh. Something based around the idea of going like this:
Of course if the deb package asks for some input it will kinda of throw a wrench into it.. but debconf is configurable for the sort of questions it asks. The nice thing about it is that it's usefull for lots of different stuff other then just installing or updating software. It's easiest when you have something like kerberos setup.
Of course I make it more complex with logging output and have it report weither or not the job completely successfully and whatnot.
There are also programs like Batch Manager Login that is something that you can use for a more widespread environment with multiple different authentication scemes. http://batchlogin.sourceforge.net/ Probably much better then anything I make up on the fly.
Posted Mar 18, 2006 10:48 UTC (Sat)
by gdt (subscriber, #6284)
[Link]
<p>The combination of yum and cfengine is pretty typical when administering large numbers of RHEL/FC machines.</p>
Posted Mar 17, 2006 12:45 UTC (Fri)
by rvfh (guest, #31018)
[Link]
You're a bit biased here. You can run scripts at login in W... to
update the user settings/system. Ok, I agree that doing administrative
tasks as a normal user feels weird to me too, but for MS it's normal!
That's how they propagate trojan horses, viruses and worms. In fact, they
are some kind of nature lovers in Redmond...
I'm a little curious how you use ssh with yum and why? Has Linux patching surpassed Mac and Windows? (ZDNet)
I donno. Is there a better way to use yum remotely?Has Linux patching surpassed Mac and Windows? (ZDNet)
for i in list-of-machines; do ssh $i "apt-get --yes install blah" ;done
<p><i>I donno. Is there a better way to use yum remotely?</i></p>Has Linux patching surpassed Mac and Windows? (ZDNet)
Auto update in MS W...