Hi Martin.
Yes, that was not very clear, sorry. You have to run mkxprof for all the
nodes you want to update. Using do_mkxprof is probably the best way to
go.
If, after this, the new rpms are still not being installed, then you are
in the famous "/tmp" syndrome of LCFG. To trigger the real rpm update
you have to edit your redhat73-cfg.h file, go to the end of the file and
replace line "RPMDIR/apps_common" with "RPMDIR/apps_common:/tmp", then
go to your source directory and run do_mkxprof again (no, you do not
need the disembowel any black cockrel or insert pins into a voodoo
doll).
If even this does not help, then you are probably using a rpmlist
directory which has not been updated with the latest tag.
Cheers
Emanuele
"Bly, MJ (Martin)" wrote:
>
> Ok, so what's the best way to trigger a node update. Rebooting hasn't
> worked.
>
> Martin.
> --
> -------------------------------------------------------
> Martin Bly | +44 1235 446981 | [log in to unmask]
> Systems Admin, Tier 1/A Service, RAL PPD CSG
> -------------------------------------------------------
>
> > -----Original Message-----
> > From: Emanuele LEONARDI [mailto:[log in to unmask]]
> > Sent: Friday, September 19, 2003 5:30 PM
> > To: [log in to unmask]
> > Subject: [LCG-ROLLOUT] Critical security upgrade: new tag LCG1-1_0_1
> >
> >
> > Dear LCG1 site administrators,
> >
> > in the past few days a few security patches for the openssh, sendmail
> > and pine packages have been released.
> >
> > I just finished including them in the LCG1 rpm lists and created a new
> > tag named LCG1-1_0_1
> >
> > The only difference with tag LCG1-1_0_0 are the patched rpms
> > so you only
> > need to check out the new tag, run updarep on the LCFG server, and
> > trigger a node update. Be aware that, due to the internal
> > functioning of
> > LCFG, you may have to edit the redhat73-cfg.h file adding the ":/tmp"
> > string at the end of the updaterpms.rpmdir definition before running
> > mkxprof.
> >
> > Note 1: as the pathced rpms are part of the basic operating
> > system, ALL
> > nodes need to be updated.
> >
> > Note 2: services should be automatically restarted by the rpm
> > update but
> > it does not hurt if you give a look and make sure this was done.
> >
> > Please report to lcg-rollout when you are done.
> >
> > Cheers
> >
> > Emanuele
> >
> > P.S. for the curious characters, this is the list of new rpms:
> >
> > openssh-3.1p1-14.i386.rpm
> > openssh-askpass-3.1p1-14.i386.rpm
> > openssh-askpass-gnome-3.1p1-14.i386.rpm
> > openssh-clients-3.1p1-14.i386.rpm
> > openssh-server-3.1p1-14.i386.rpm
> > pine-4.44-19.73.0.i386.rpm
> > sendmail-8.11.6-27.73.i386.rpm
> > sendmail-cf-8.11.6-27.73.i386.rpm
> > sendmail-devel-8.11.6-27.73.i386.rpm
> > sendmail-doc-8.11.6-27.73.i386.rpm
> >
> >
> >
> > --
> > /------------------- Emanuele Leonardi -------------------\
> > | eMail: [log in to unmask] - Tel.: +41-22-7674066 |
> > | IT division - Bat.31 2-012 - CERN - CH-1211 Geneva 23 |
> > \---------------------------------------------------------/
> >
--
/------------------- Emanuele Leonardi -------------------\
| eMail: [log in to unmask] - Tel.: +41-22-7674066 |
| IT division - Bat.31 2-012 - CERN - CH-1211 Geneva 23 |
\---------------------------------------------------------/
|