<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style></style></head><body lang=EN-AU link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Hi Avi,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><br>Wow, some great info there, thanks a lot. We were stuck unfortunately at 6.5 as Ops Center 12.2.2 only supported OL 6.5. Now with the release of 12.3.1 it supports up to Oracle Linux 7, but only provisioning, not patching! Which means we had to abandon patching from Ops Center and look elsewhere (insert SpaceWalk!).<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Yep, we’re on SpaceWalk 2.2. It’s fantastic news Oracle are looking to release 2.4 soon….any rough ideas on an ETA? I only ask because this instance of SpaceWalk is POC, and I’d consider hanging off releasing it to Ops if 2.4 was not too far away </span><span style='font-size:11.0pt;font-family:Wingdings;color:black'>J</span><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>We only have basic support for our Linux stuff, so unfortunately no ksplice for us (as much as I would _<i>love</i>_ to use it, there’s no room in the budget at the moment).<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Thanks again for the information, I had kicked off a “latest” sync and did notice it was HUGE. I’ve since cancelled it, I’ll take your advice and add in all the patch channels.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Cheers,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Dan <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> spacewalk-list-bounces@redhat.com [mailto:spacewalk-list-bounces@redhat.com] <b>On Behalf Of </b>Avi Miller<br><b>Sent:</b> Tuesday, 23 February 2016 7:25 PM<br><b>To:</b> spacewalk-list@redhat.com<br><b>Subject:</b> Re: [Spacewalk-list] base patch or latest<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Hi,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p><div><blockquote style='margin-top:5.0pt;margin-bottom:5.0pt'><div><p class=MsoNormal>On 23 Feb 2016, at 3:06 PM, Daniel Eather <<a href="mailto:daniel.eather@cranegroup.com.au">daniel.eather@cranegroup.com.au</a>> wrote:<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>I had thought a reaonsable way to patch would be to clone the base and patch channels as at a date, and then apply those cloned channels to my list of servers. However, what would be the difference between doing this and just cloning the latest channel and applying it? Any advantages to doing this, or should I stick with cloning base and patch?<o:p></o:p></span></p></div></div></blockquote><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Latest is actually everything, i.e. it contains every version of every package ever released. Which means it is HUGE. So, if you sync latest, it'll take a very long time and it's a nightmare to clone without lots and lots of memory for Spacewalk.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>On the other hand, base and patch are only valid for the life of that update cycle. Once a new patch channel is created, the old ones are no longer updated. So, if you sync base/patch for OL6U5 for example,that u5_patch channel has not been updated after u6 was released. Therefore, if you keep your systems at that level, you have none of the security errata that have been released since. And that's a LOT of security errata, including most of the big ones.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>So, overall I recommend working out what's the most effective for your environment. You will need either latest or all the patch channels to ensure you're up-to-date with security patches. If you have Oracle Linux Premier Support, I strongly recommend using the -n (latest packages) option for the Ksplice Offline repo as well.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>You don't mention what version of Spacewalk you're running, but I assume it's 2.2 so that you get support from Oracle. We are very close to releasing 2.4 as well and that comes with a really nice enhancement to repo syncing that allows you to flag a channel to only sync the latest packages in the upstream repo. This can be used with our "latest" repos to dramatically reduce the overall sync size/time. But, if you upgrade to "latest", you'll be on OL6U7 (as you should be, quite frankly).<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>My general advice is to ignore the .Y and just think of it as Oracle Linux 6. So, either use latest and stay up to date or move from patch level to patch level as they become available, to ensure you are always secure. Oh, and use Ksplice, it's amazing. :)<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Cheers,<o:p></o:p></p></div><div><p class=MsoNormal>Avi<o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>--<br>Oracle <<a href="http://www.oracle.com">http://www.oracle.com</a>><br>Avi Miller | Product Management Director | +61 (3) 8616 3496<br>Oracle Linux and Virtualization<br>417 St Kilda Road, Melbourne, Victoria 3004 Australia <o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div></div><br clear="both"> ______________________________________________________________________<BR> Any views expressed in this message are those of the individual sender, <BR> except where the sender specifically states them to be the views of <BR> Fletcher Building or any related subsidiaries.<BR> </body></html>