<div dir="ltr">CentOS does not include errata lists in their repositories. You'll have to use something like Steve Meier's errata-import script, which you can find here:<br><div><br></div><div><a href="http://cefs.steve-meier.de/">http://cefs.steve-meier.de/</a><br></div><div><br></div><div><br></div><div>Download his script, the errata.latest.xml and com.redhat.rhsa-all.xml files. Once you have that, you can automate Errata imports. Here's an example of a script I run in crontab nightly to sync all of my baseline channels, then import the Errata. I use a strict naming convention in my channels, so all of my baseline channels have the word "base" in them. I use this as a keyword to grep out the baseline channels from the spacecmd softwarechannel_list output. This way I don't need to run a Spacewalk repo sync against each one individually. </div><div><br></div><div>Also, if you haven't already, create your repositories and assign them to their respective channels in Spacewalk. This will eliminate the need to ever specify a URL in your spacewalk-repo-sync commands. </div><div><br></div><div><br></div><div><div>#!/bin/bash</div><div><br></div><div>## Synchronize Spacewalk Baseline Channels\Repositories</div><div><br></div><div>SPACEWALK_USER='**********'</div><div>SPACEWALK_PASS='**************'</div><div>LOG="/var/log/rhn/sync_channels.log"</div><div>LOGDIR="/var/log/rhn/reposync"</div><div>BASEDIR="/root/scripts/spacewalk/automation"</div><div>SPW_SERVER="spacewalk.home.local"</div><div><br></div><div>export SPACEWALK_USER</div><div>export SPACEWALK_PASS</div><div>export SPW_SERVER</div><div><br></div><div>## Sync each Baseline channel</div><div><br></div><div>echo "----------------------------------------------------------------------------------------------" >> $LOG<br></div><div>echo `date` >> $LOG</div><div>echo "Beginning channel sync..." >> $LOG</div><div>echo >> $LOG</div><div>for CHANNEL in `spacecmd -q softwarechannel_list -u $SPACEWALK_USER -p $SPACEWALK_PASS | grep base`;</div><div>do</div><div> echo "Starting repo sync on $CHANNEL" >> $LOG</div><div> echo >> $LOG</div><div> /usr/bin/spacewalk-repo-sync --channel $CHANNEL</div><div>done</div><div>echo "----------------------------------------------------------------------------------------------" >> $LOG</div><div><br></div><div><br></div><div>## Import CentOS Errata</div><div><br></div><div>echo "Retrieving latest Errata for CentOS..." >> $LOG</div><div>echo >> $LOG</div><div>wget -q -N -O $BASEDIR/errata.latest.xml <a href="http://cefs.steve-meier.de/errata.latest.xml">http://cefs.steve-meier.de/errata.latest.xml</a></div><div>wget -q -N -O $BASEDIR/com.redhat.rhsa-all.xml <a href="http://www.redhat.com/security/data/oval/com.redhat.rhsa-all.xml">http://www.redhat.com/security/data/oval/com.redhat.rhsa-all.xml</a></div><div><br></div><div>echo "Importing Errata" >> $LOG</div><div>echo >> $LOG</div><div><br></div><div>/usr/bin/perl $BASEDIR/<a href="http://errata-import.pl">errata-import.pl</a> --server $SPW_SERVER --rhsa-oval com.redhat.rhsa-all.xml --errata errata.latest.xml --include-channels centos-x86_64-server-6-base --publish >> $LOG &&</div><div><br></div><div>/usr/bin/perl $BASEDIR/<a href="http://errata-import.pl">errata-import.pl</a> --server $SPW_SERVER --rhsa-oval com.redhat.rhsa-all.xml --errata errata.latest.xml --include-channels centos-x86_64-server-6-base-updates --publish >> $LOG</div><div><br></div><div>echo >> $LOG</div><div>echo "Done! `date`" >> $LOG</div><div>echo "----------------------------------------------------------------------------------------------" >> $LOG</div></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Nov 20, 2014 at 11:33 AM, Szabo, Marc <span dir="ltr"><<a href="mailto:Marc.Szabo@priceline.com" target="_blank">Marc.Szabo@priceline.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> <div lang="EN-US" link="blue" vlink="purple"> <div> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Matt,<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">This is the command I issue from my Spacewalk Server:<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal">[root@nw-spcwlk-201 ~]# <b>spacewalk-repo-sync --channel centos5-i386 --url <a href="http://mirror.centos.org/centos/5/os/i386/" target="_blank">http://mirror.centos.org/centos/5/os/i386/</a> --type yum</b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">When the process completes, I only have the packages (2791) but 0 Erratas.<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">So are you saying that if I just include a “-z” option to the above command it would pull down the errata as well?<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks.<br> <br> Marc.<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <div> <div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in"> <p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a> [mailto:<a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a>] <b>On Behalf Of </b>Matt Micene<br> <b>Sent:</b> Thursday, November 20, 2014 12:02 PM</span></p><div><div class="h5"><br> <b>To:</b> <a href="mailto:spacewalk-list@redhat.com" target="_blank">spacewalk-list@redhat.com</a><br> <b>Subject:</b> Re: [Spacewalk-list] Management of baselines<u></u><u></u></div></div><p></p> </div> </div><div><div class="h5"> <p class="MsoNormal"><u></u> <u></u></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Marc,<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Errata should be cloned as part of the spacewalk-clone-by-date process based on the date provided by ‘-d’. The logic uses that to find the issue date of the errata, so if you are missing errata you may want to try the ‘-z’ option which expands the date criteria for finding relevant errata.<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">What issues are you having with errata sync?<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Cheers,<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Matt<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <div> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Matt Micene<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Solution Architect<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">RHCA# 100-002-435<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Direct <a href="tel:703-773-1195" value="+17037731195" target="_blank">703-773-1195</a><u></u><u></u></span></p> </div> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <div> <div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0in 0in 0in"> <p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> <a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a> [<a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">mailto:spacewalk-list-bounces@redhat.com</a>] <b>On Behalf Of </b>Szabo, Marc<br> <b>Sent:</b> Thursday, November 20, 2014 11:17 AM<br> <b>To:</b> <a href="mailto:spacewalk-list@redhat.com" target="_blank">spacewalk-list@redhat.com</a><br> <b>Subject:</b> Re: [Spacewalk-list] Management of baselines<u></u><u></u></span></p> </div> </div> <p class="MsoNormal"><u></u> <u></u></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi Matthew,<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">This is great information… this is exactly what I’m trying to do. However, I’m having trouble sync’ing the Errata data. How are you sync’ing the errata, if you don’t mind me asking.<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thank you in advance for your help.<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Marc.<u></u><u></u></span></p> <p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p> <p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">spacewalk-list-bounces@redhat.com</a> [<a href="mailto:spacewalk-list-bounces@redhat.com" target="_blank">mailto:spacewalk-list-bounces@redhat.com</a>] <b>On Behalf Of </b>Matthew Madey<br> <b>Sent:</b> Thursday, November 20, 2014 10:53 AM<br> <b>To:</b> <a href="mailto:spacewalk-list@redhat.com" target="_blank">spacewalk-list@redhat.com</a><br> <b>Subject:</b> Re: [Spacewalk-list] Management of baselines<u></u><u></u></span></p> <p class="MsoNormal"><u></u> <u></u></p> <div> <p class="MsoNormal">This can easily be done, and I do something similar, but sync all Errata's on a monthly basis on patch tuesday.<u></u><u></u></p> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">Create your baseline channel that is fully up to date. Sync this baseline channel nightly, so it's always current, but don't keep any systems subscribed to it. Clone that channel, and use the clone channel for patching systems. If you want to add a single Errata to the cloned channel, you simply go to Channels-->Manage Software Channels-->Your cloned channel-->Errata then click Add. You'll see your baseline channel as the source, and can pick and choose whatever Errata or packages you'd like to add into your clone channel. <u></u><u></u></p> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">To refresh your clone channel on a monthly or quarterly basis, the easiest way to do this is setup a channel mapping configuration file, and use spacewalk-clone-by-date. Then you source your config file to that command like such:<u></u><u></u></p> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">spacewalk-clone-by-date --config=/etc/rhn/channel-maps/datacenter-channels-rhel6.conf -d 2014-10-14<u></u><u></u></p> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> </div> <div> <p class="MsoNormal">The below document explains in detail how to setup this kind of configuration.<u></u><u></u></p> </div> <div> <p class="MsoNormal"><a href="https://access.redhat.com/node/469173/40/0" target="_blank">https://access.redhat.com/node/469173/40/0</a><u></u><u></u></p> </div> </div> <div> <p class="MsoNormal"><u></u> <u></u></p> <div> <p class="MsoNormal">On Thu, Nov 20, 2014 at 9:15 AM, Nicolas Michel <<a href="mailto:be.nicolas.michel@gmail.com" target="_blank">be.nicolas.michel@gmail.com</a>> wrote:<u></u><u></u></p> <p class="MsoNormal">Hello guys,<br> <br> I would want to create a baseline for my channels (a snapshot). And<br> regularly push in that baseline either choosen packages in function of<br> errata, or a full sync of the upstream channel. Here is a use case to<br> illustrate what I'm saying: say that I have my baseline which is a<br> snapshot of 1 month ago. We just discovered a critical security bug in<br> a package (like Shellshock) so I have to patch all my servers with<br> that particular set of packages (errata). I would want to push into my<br> baseline only that set of packages defined by the errata. How can I do<br> this?<br> The other use case: every 3 months, I have to patch all my servers<br> with all available patches. So I want to re-synchronize my baseline<br> from upstream (create a new snapshot).<br> <br> Currently, here is what I have and how I expected to do (but I'm not<br> sure it's the right way):<br> - I have in spacewalk a channel which is synchronized daily to the<br> upstream repository<br> - I created a clone of that channel. So I have my snapshot.<br> - Now I don't know how I can push in it selected erratas from my<br> original channel.<br> - I don't know either how to resynchronize the entire original channel.<br> <br> Thanks in advance,<br> <span style="color:#888888"><br> <span>--</span><br> <span>Nicolas MICHEL</span><br> <br> <span>_______________________________________________</span><br> <span>Spacewalk-list mailing list</span><br> <span><a href="mailto:Spacewalk-list@redhat.com" target="_blank">Spacewalk-list@redhat.com</a></span><br> <span><a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a></span></span><u></u><u></u></p> </div> <p class="MsoNormal"><u></u> <u></u></p> </div> </div></div></div> </div> <br>_______________________________________________<br> Spacewalk-list mailing list<br> <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br></blockquote></div><br></div>