The tag has no wiki summary.

learn more… | top users | synonyms

36
votes
9answers
4k views

How Often Should I Update our Linux Server?

I am responsible for managing both our production server (mail, web, database are all on one server) and our test server. Both are built on Debian. However as I am very new to system administration, I ...
26
votes
2answers
810 views

HP plan to restrict access to ProLiant server firmware - consequences?

I've been a longtime advocate for HP ProLiant servers in my system environments. The platform has been the basis of my infrastructure designs across several industries for the past 12 years. The ...
25
votes
9answers
2k views

SysAdmin & Developer: Responsibilities

When it comes to something like a production webserver, what is best practice for responsibilities for the sysadmin & developer? Specifically, I am thinking about updating/installing software. ...
17
votes
8answers
14k views

Should I have to enable automatic update on Debian lenny stable?

I have installed a new Linux Debian lenny server that will be a LAMP and a Subversion server. Should I have to enable automatic updates? If I enable it, I am sure that I have the latest security ...
15
votes
2answers
12k views

What does that mean: packages excluded due to repository priority protections

When updating with yum i recieve the following message: yum update Loaded plugins: fastestmirror, priorities Loading mirror speeds from cached hostfile * atomic: www7.atomicorp.com * base: ...
15
votes
6answers
2k views

is ksplice production ready?

I would be interested to hear the serverfault community's experiences with Ksplice in production. Quick blurb from wikipedia: Ksplice is a free and open source extension of the Linux kernel ...
14
votes
5answers
3k views

Updating production Ubuntu boxes the dos and don'ts

Every so often I login to production web/db/tools boxes and see the typical message: 30 packages can be updated. 16 updates are security updates. My question is, how do all of you handle updates on ...
13
votes
10answers
3k views

Firmware Best Practices and Update Schedules

Firmware receives very little attention when it comes to updates. Out of sight, out of mind. Many devices: RAID controllers, NICs, chipsets, and even hard drives, get some benefit from being ...
12
votes
8answers
2k views

Is it important to reboot Linux after a kernel update?

I have a few production Fedora and Debian webservers that host our sites as well as user shell accounts (used for git vcs work, some screen+irssi sessions, etc). Occasionally a new kernel update will ...
12
votes
3answers
828 views

on Red Hat Enterprise and CentOS, what is creating /var/run/reboot-required?

On CentOS 5.8+ and Red Hat Enterprise 6+, when installing/updating packages, I notice a flag file /var/run/reboot-required is created when appropriate. On Ubuntu (and Debian too, I'm guessing), if ...
11
votes
7answers
400 views

To update or to not update?

Since starting working where I am working now, I've been in an endless struggle with my boss and coworkers in regard to updating systems. I of course totally agree that any update (be it firmware, ...
11
votes
2answers
1k views

Good practice for managing package updates for lots of CentOS servers

As part of my job I manage a few tens of CentOS 5 servers, using puppet for the main set up. About half of our servers have a standardised set up for hosting various django sites, while the rest are a ...
10
votes
11answers
2k views

System updates for many servers

We have many servers and still want to update them all. The actual way is that any of the sysadmins go from server to server and make a aptitude update && aptitude upgrade - it's still not ...
9
votes
2answers
703 views

How do you get the latest update for Java 6?

An application my company is considering buying requires Java 6. I am concerned that this is quite out of date and am recommending against the application as a result. But it seems that Oracle do ...
8
votes
6answers
402 views

What is the best time to schedule regular updates on inhouse production server?

Given an inhouse server running in production mode I would like to keep the impact on the users as low as possible when deploying regular updates (to the server itself, not the user machines .. but ...
8
votes
4answers
4k views

How can I check from the command line if a reboot is required on RHEL or CentOS?

I'm using CentOS and Red Hat Enterprise Linux on a few machines without the GUI. How can I check if recently installed updates require a reboot? In Ubuntu, I'm used to checking if ...
8
votes
4answers
1k views

Centralized Windows/Mac Patch Management that is easy to use

I'm looking for advice on what patch management solutions you would recommend based upon your experience. I'm also looking for which ones you would not recommend based upon your experience. We have ...
8
votes
2answers
2k views

How safe are Unattended Upgrades/Automatic Updates for Ubuntu

I'm in the process of trying to keep several ubuntu box's up to date and patched (10.4.2 LTS), one suggestion I've been getting is setting up unattended upgrades ...
7
votes
8answers
2k views

To yum update? Or not?

please forgive this rather straightforward question. First off, I'm not a sysadmin, and my experience with Linux is somewhat limited. About 3-4 months ago, I set up a CentOS server in work, for a ...
7
votes
5answers
1k views

Is it possible to install Mac OS X Server on a Mac Mini without hacking it?

I'd like to have a Software Update Server (SUS) for my clients. Since this service would not be critical, redundancy and availability are not an issue for me. Given the fact that SUS is only ...
7
votes
2answers
4k views

Why do I have .rpmnew file after an update?

I use yum to update my Fedora. After a huge update, I got many .rpmnew and .rpmsave files. I could understand if I had modified these files. But I'm sure that I didn't edit these files. What should I ...
7
votes
5answers
2k views

Windows 7 SP1 Installation Failed with C0000034

I am looking after a small (12 PCs) network mostly made up of Windows 7 PCs about half 32-bit with the remainder 64-bit or Vista. WSUS is setup on the server and all computers are configured via group ...
7
votes
1answer
10k views

How can I block Java updates, network-wide?

Java is constantly prompting users to upgrade and, when they do, it tries to install all sorts of other things which we must uninstall. Lately it installs a backup program called Carbonite. We’ve ...
6
votes
4answers
313 views

Paranoid Sysadmin -vs- Out-of-Date PHP version

How can a paranoid sysadmin confidently stay up-to-date with the latest stable PHP versions? (security fixes have been coming in pretty regularly). This is a Production server, and so "breaking ...
6
votes
4answers
566 views

how often should I install updates on Windows 2008 R2 server?

I'm wondering how often you would recommend installing updates on Windows 2008 R2 servers? We got two productions servers, one databaseserver running MS SQL and one webserver running IIS 7.0. Would ...
5
votes
7answers
6k views

Most wanted feature for Windows Server Update Services (WSUS) 4.0 [closed]

Some blogs rumor that the next Windows Server Update Services (WSUS) would allow to host user-defined and even non-Microsoft packages. What is your wish list for WSUS 4.0?
5
votes
4answers
3k views

Remotely Trigger WSUS Downloaded update Installation

This has been bugging me for a while. We have our Servers set to download only windows updates to stage them to be installed during one of our bi-monthly patch windows. I have looked high and low for ...
5
votes
5answers
6k views

Squid to cache youtube and windows update content

I Have a squid server (transparent) and I want to cahce youtube videos and windows updates. I know that someone has posted a similar question and I have looked at this post but I am configuring this ...
5
votes
3answers
233 views

Specify update with apt-get upgrade?

In Ubuntu, the most convenient way to get a system up to date is to call apt-get update followed by apt-get upgrade. However, on a system that is part of a production environment, it is common ...
5
votes
3answers
22k views

How to configure non-admin accounts to install updates of non-microsoft applications using Active Directory?

How to configure non-admin users to allow them to install updates for Java and Adobe Acrobat Reader (or any other application which may need such privileges) without needing for administrator password ...
5
votes
3answers
169 views

How to stay up to date with the latest information about UNIX software patches and upgrades?

Until now I have always used the SecurityFocus mailing lists to keep myself informed about the possible need of upgrading my server packages. The main problems I have with using this method: Massive ...
5
votes
2answers
501 views

How to handle Lync 2010 Clients updates

We have in a quite large Organization Lync 2010 deployed. Also we use for software and updates distribution System Center Configuration Manager. Our problem we face is that, if we distribute the Lync ...
5
votes
2answers
5k views

When to relink Oracle?

Various sources on the internet suggest relinking of Oracle binaries is necessary after each OS upgrade and / or patch. I can understand relinking would be necessary when upgrading glibc. Some ...
4
votes
8answers
99k views

How do I remove Windows Update uninstall files on Windows Server 2008?

I'm running Windows Server 2008 Standard running in VMware. It has 2 disks: system disk: 16 GB data disk: 500 MB I installed Visual Studio 2008 SP1 + MSDN and some small tools and ...
4
votes
4answers
233 views

update a network of ubuntu desktops from a server

I need to update 100+ workstations that run ubuntu. The problem is that i want them to download the packages from a local server so that they don't use to much internet bandwidth. I net a kind of ...
4
votes
4answers
429 views

Upgrading multiple Debian servers at once

I'm currently working at a SaaS company, and at the moment we have multiple Debian servers running in our data centre to support our application. In the past, when a security update was released, we ...
4
votes
3answers
92 views

How to determine if a Debian upgrade updated the kernel

Let's say I have just done an aptitude safe-upgrade on a Debian system, but I was not paying attention so I did not notice if the kernel was updated or not. How can I now determine if there was a ...
4
votes
3answers
2k views

What is the best practice to keep a linux ubuntu server up to date (build packages, dist-upgrade, alt repos…)

We are running a production server based on Ubuntu 9.10 Karmic Koala, kernel is almost up-to-date (2.6.38.2-grsec-xxxx-grs-ipv6-64) but karmic package repositoryis now ridiculously outdated, eg. Nginx ...
4
votes
5answers
7k views

Force install updates on WSUS server

The WSUS administration console shows computers with not installed (critical) updates. To be clear: The computers report their status every day. These updates do have a deadline that has already ...
4
votes
2answers
155 views

Managing laptops and desktops in the organization and pushing windows updates to them

Here are a couple of things we are trying to achieve. Our staff currently uses a bunch of desktops and laptops. Around 30-50 of the staff, most of them are laptops (mix of HP and Lenovo). Most using ...
4
votes
3answers
1k views

How to update a live webserver?

I'm in the process of setting up a webserver and I was wondering what the best practice method of updating the website it contains would be. I'm aware that I should have some sort of 'test' server ...
4
votes
2answers
6k views

Stopping Java from showing Update notice to all terminalserver users

on our terminal server all users have minimal (i.e. default) permissions. None are local administrators on that machine. Still Java Runtime displays message to every user that an update is available. ...
4
votes
5answers
344 views

How long would you wait to install updates?

I administr a school "for pleasure" and we are always discussing when we should update software. For example today Office 2007 SP2 came out and I was woundering how long I should wait before updating ...
4
votes
1answer
43 views

Declining superseded updates in WSUS

When you click on an update that has been superseded in WSUS, you get a warning that says you should verify the update is no longer needed before declining it. According to Microsoft, you're supposed ...
4
votes
1answer
234 views

Network boot of Windows Defender Offline will not update

I have been working on configuring a network bootable virus removal suite, and I am using the Windows Defender WinPE iso generated from using this 64-bit tool. The tool downloads and creates an ISO ...
4
votes
3answers
309 views

Know (at a glance) your Mac client is up-to-date

We have over a thousand Mac clients, and occassionally issue changes that affect many or all of them (such as installing new software, creating local user accounts, or applying updates). I want to ...
4
votes
1answer
688 views

Deploying Updates via SCCM only when users are logged off

In SCCM for package deployments, there's an option to make the assignment mandatory and the schedule to be at logoff, and also options for only deploying packages when no user is logged on. I'd like ...
4
votes
0answers
43 views

WSUS and Pulled Patches

When Microsoft pulls bad patches, does WSUS automatically pull the patches as well or do we need to do it manually? If we have to do it manually, how do we keep on top of bad patches?
3
votes
4answers
717 views

How do you handle updates on a server?

I am really lazy I will give you guys this ;) but I have ~25 virtual machines running on xen. I really like xen and everything but now comes the tricky part.. I don't really feel like going through 25 ...
3
votes
2answers
301 views

How can I test apt-get updates on a test box before deploying to production?

I would like to schedule updates on my ubuntu servers, but would like to test the updates first on a test server. I'd like to run all updates on the test box at the beginning of a development cycle, ...