Hallo, as a beginner using CentOS I‘ve a question about updates. What it the right repo for getting all security and other updates?
http://mirror.eu.oneandone.net/linux/distributions/CentOS/7.6.1810/updates/
for example?
Thanks Ralf
9 thoughts on - Question About Updates
If you have installed CentOS 7 it should have everything in place for regular updates.
You simply need to invoke “sudo yum update” on a regular basis to ensure all the available updates are installed. Yum and rpm take care of sorting out where to check and apply updates from.
HTH.
A default install of CentOS is configured to use the “best” mirror for updates – “best” is a variable thing but usually comes down to a combination of geolocation, speed and load. When you do ‘yum update’
(which you should do regularly) the first thing you will see is yum determining which mirror to use.
Note that it doesn’t matter which mirror it is, they are mirrors, they
(should) contain an identical copy to the CentOS.org master. In the absence of any other factor, you should just let yum do its job.
P.
—
Tate Belden
“The Dungeon <http://ka7o.net>”
A place of (solder) smoke, weird (server) sounds and (LED) blinky lights. More than a few bugs of various flavors, too.
“Any sufficiently advanced alien life is indistinguishable from God” to those that don’t understand. — Cpt. C. Pike
1.) yum-cron with “update_cmd = security” wont do anything for CentOS because it doesn’t have security metadata in its repos. EPEL will get updates. The person who wrote this must be using RHEL or some clone that publishes security metadata. Looking at google for this topic shows a lot of people get this wrong, which means there are probably a lot of insecure systems out there.
2.) pet peeve: use “grep searchterm filename” and not “cat filename | grep searchterm”.
3.) you don’t need to restart the yum-cron.service systemctl unit after modifying yum.conf, since it’s not a running service, it just touches a file that tells the cron job that it is activated.
—
Jonathan Billings
Hallo. thanks to all for the answers. One aspect is unclear for me. Updates are published using the update-directory like the one in my question?
Ralf
Updates are published to the main CentOS repositories, which are mirrored all over the world, including the site you mentioned in your first post. You should not be manually setting it unless you understand what you are doing. By default, Athens CentOS installer will install appropriate files in /etc/yum.repos.d/ that will pick a close mirror to you.
—
Jonathan Billings
Sorry, no idea how “Athens” got in there. I blame autocorrect.
Yes, there is a “base” repo which is what is used as a fresh install for that particular version of CentOS. The “updates” repo contains the updated packages.
The two repos go together: “base” gives a fixed reference point for the version, “updates” builds on it. You normally need both.
As others have said, you really shouldn’t be looking to alter what was installed by the installer unless you really know what you are doing.
What is the background to the question you are asking – why does it matter?
P.
Zitat von Pete Biggs :
Hallo,
I m a beginner using CentOS and I want make sure that I ve understand
the update-management of CentOS.
9 thoughts on - Question About Updates
If you have installed CentOS 7 it should have everything in place for regular updates.
You simply need to invoke “sudo yum update” on a regular basis to ensure all the available updates are installed. Yum and rpm take care of sorting out where to check and apply updates from.
HTH.
A default install of CentOS is configured to use the “best” mirror for updates – “best” is a variable thing but usually comes down to a combination of geolocation, speed and load. When you do ‘yum update’
(which you should do regularly) the first thing you will see is yum determining which mirror to use.
Note that it doesn’t matter which mirror it is, they are mirrors, they
(should) contain an identical copy to the CentOS.org master. In the absence of any other factor, you should just let yum do its job.
P.
—
Tate Belden
“The Dungeon <http://ka7o.net>”
A place of (solder) smoke, weird (server) sounds and (LED) blinky lights. More than a few bugs of various flavors, too.
Natrona County Beekeepers <http://ncbees.org>
Casper Amateur Radio Club <http://casperarc.net>
“Any sufficiently advanced alien life is indistinguishable from God” to those that don’t understand. — Cpt. C. Pike
1.) yum-cron with “update_cmd = security” wont do anything for CentOS because it doesn’t have security metadata in its repos. EPEL will get updates. The person who wrote this must be using RHEL or some clone that publishes security metadata. Looking at google for this topic shows a lot of people get this wrong, which means there are probably a lot of insecure systems out there.
2.) pet peeve: use “grep searchterm filename” and not “cat filename | grep searchterm”.
3.) you don’t need to restart the yum-cron.service systemctl unit after modifying yum.conf, since it’s not a running service, it just touches a file that tells the cron job that it is activated.
—
Jonathan Billings
Hallo. thanks to all for the answers. One aspect is unclear for me. Updates are published using the update-directory like the one in my question?
Ralf
Updates are published to the main CentOS repositories, which are mirrored all over the world, including the site you mentioned in your first post. You should not be manually setting it unless you understand what you are doing. By default, Athens CentOS installer will install appropriate files in /etc/yum.repos.d/ that will pick a close mirror to you.
—
Jonathan Billings
Sorry, no idea how “Athens” got in there. I blame autocorrect.
Yes, there is a “base” repo which is what is used as a fresh install for that particular version of CentOS. The “updates” repo contains the updated packages.
The two repos go together: “base” gives a fixed reference point for the version, “updates” builds on it. You normally need both.
As others have said, you really shouldn’t be looking to alter what was installed by the installer unless you really know what you are doing.
What is the background to the question you are asking – why does it matter?
P.
Zitat von Pete Biggs:
Hallo,
I m a beginner using CentOS and I want make sure that I ve understand
the update-management of CentOS.
Ralf