[Spacewalk-list] WG: Re: No errata for CentOS 7?

[Daryl Rose]

Robert,


Thank you for all of this information.  Its cleared up all of my questions.


Daryl


________________________________
From: spacewalk-list-bounces at redhat.com <spacewalk-list-bounces at redhat.com> on behalf of Paschedag.Netlution at swr.de <Paschedag.Netlution at swr.de>
Sent: Wednesday, August 31, 2016 1:51 AM
To: spacewalk-list at redhat.com
Subject: [Spacewalk-list] WG: Re: No errata for CentOS 7?

Damn....forgot to mention the repo url from @philicious: https://github.com/philicious/spacewalk-scripts


----- Weitergeleitet von Paschedag Netlution/TP/ST/SWR/DE am 31.08.2016 08:50 -----

Von:        Paschedag Netlution/TP/ST/SWR/DE
An:        spacewalk-list at redhat.com
Kopie:        spacewalk-list-bounces at redhat.com
Datum:        31.08.2016 08:48
Betreff:        Antwort: Re: [Spacewalk-list] No errata for CentOS 7?
________________________________


Hi Daryl,

you need the mentioned script only, if the "RPM" based repository "repomd.xml" file does NOT contain information about "updates". There should be an "updateinfo" section within "repomd.xml". The xml file referenced there includes information about "errata" (Name of errata, CVEs, which packages are included, etc.).

Just look at the EPEL 7 repo for example here https://dl.fedoraproject.org/pub/epel/7/x86_64/repodata/

The repomd.xml contains an "updateinfo" section pointing to ......updateinfo.xml.bz2. All "errata" information is there. When you look at the centos base or extra repos, you won't find that "updateinfo" section within "repomd.xml"

This is what the wonderful script from Steve does. It parses the security mailing list of CentOS to do this "manually".

@philicious also did a great job to modify this script further to download and parse errata information from "ubuntu" and "slackware". I also forked this "project" and been working to also modify this script to parse the debian security mailing list.

This works (in my testing) quite good right now, and when I cleaned up all "customer" specific code, I'll also provide this on Github (or this might get merged to @philicious repo).

This is how it looks, when you synchronise the repos via spacewalk.

CentOS7 Extra

Sync started: Wed Aug 10 15:38:08 2016
['/usr/bin/spacewalk-repo-sync', '--channel', 'centos_7_extra', '--type', 'yum']
Repo URL: http://ftp.hosteurope.de/mirror/centos.org/7/extras/x86_64/
Packages in repo:               375
Packages already synced:          0
Packages to sync:               375
1/375 : centos-release-qemu-ev-1.0-1.el7-0.noarch
2/375 : cockpit-pcp-0.103-1.el7.centos-0.x86_64
3/375 : docker-logrotate-1.9.1-40.el7.centos-0.x86_64
4/375 : python-gunicorn-18.0-2.el7-0.noarch
5/375 : python-websocket-client-0.32.0-116.el7-0.noarch
6/375 : cockpit-doc-0.108-1.el7.centos-0.x86_64
...
...
375/375 : centos-packager-0.5.2-1.el7.centos-0.noarch
Linking packages to channel.
Repo http://ftp.hosteurope.de/mirror/centos.org/7/extras/x86_64/ has 0 errata.
Sync completed.
Total time: 0:05:12

Now look at the EPEL 7 repo

Sync started: Wed Aug 10 12:58:58 2016
['/usr/bin/spacewalk-repo-sync', '--channel', 'epel_7', '--type', 'yum']
Repo URL: https://dl.fedoraproject.org/pub/epel/7/x86_64/
Packages in repo:             10419
Packages already synced:          0
Packages to sync:             10419
1/10419 : perl-Math-Int64-0.52-1.el7-0.x86_64
2/10419 : dnf-langpacks-conf-0.15.1-1.el7-0.noarch
3/10419 : ghc-xml-devel-1.3.13-1.el7-0.x86_64
...
...
Linking packages to channel.
Repo https://dl.fedoraproject.org/pub/epel/7/x86_64/ has comps file 9d21be3ccf77a70416edafa23e02c075dbc53d2d60edb89203c5b9c69f21f66a-comps-epel7.xml.xz.
Repo https://dl.fedoraproject.org/pub/epel/7/x86_64/ has 3042 errata.        <<<==== ERRATAS
Sync completed.
Total time: 2:31:48

Hope this helped.

Regards,
Robert

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20160831/de39b2ed/attachment.htm>