how to differentiate between redhat distributed rpms and 3rd party rpms

sudhirgoogle
sudhirgoogle used Ask the Experts™
on
Hello experts,

I am new to linux, I have RHEL 5.3 server, i have to differentiate between redhat distributed rpms and 3rd party rpms; how can i do this ?? Please help.

How and Where can i find the updates for 3rd party rpms.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Commented:
Check out rpmfusion: http://rpmfusion.org/

This is what is mainly used as additional repository for Fedora and CentOS; of course, it also works with Red Hat.

Here's a guide on how to enable it as a repository on your system (add both the free and non-free branches):
http://rpmfusion.org/Configuration
Monis MontherSystem Architect
Commented:
To know from where your RPM package came from issue the follwoing command

rpm -qi packgename

example

rpm -qi file

This command will spit information regarding the package including the Vendor who packaged it.

This is the easiest way, a more complex but more bullet proof solution would be verifying it against its gpg signiture, you can import the key and verify. unfortunately I dont remember the exact commands to do this.

Good Luck
Hi,

I do not think you can get the information by just looking at the package itself, although as torimar says if you go through the above site you should be able to get packages done by Red Hat and also third party.
To make absolutely sure you can do this however,

Download the package
rpm -qi package.rpm

Here is information of libXres package for example and signed by Red Hat.

[root@localhost lib]# rpm -qi libXres-1.0.1-3.1
Name        : libXres                      Relocations: (not relocatable)
Version     : 1.0.1                             Vendor: Red Hat, Inc.
Release     : 3.1                           Build Date: Thu 13 Jul 2006 02:28:41 AM EDT
Install Date: Sun 17 Oct 2010 10:07:44 AM EDT      Build Host: hs20-bc2-2.build.redhat.com
Group       : System Environment/Libraries   Source RPM: libXres-1.0.1-3.1.src.rpm
Size        : 19634                            License: MIT/X11
Signature   : DSA/SHA1, Thu 18 Jan 2007 11:04:31 AM EST, Key ID 5326810137017186
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://www.x.org
Summary     : X.Org X11 libXres runtime library
Description :
X.Org X11 libXres runtime library

I know this isn't feasible to do on all packages you download but one way to make sure the packages are right!

regards,
lego
Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

Author

Commented:
Thanks for your reponse. there is misunderstanding in my question. Let me rephrase my question...

I have RHEL 5.3 server on which 3rd party apps as well as redhat distributed rpms were installed, Now how do i find what are all the 3rd party apps installed on the box ?

How do i find the whethere is there any updates available for the installed 3rd party apps.
Ah.. good one!

I suggest you use a script to parse output for rpm -qi and get the name of the packager. I'm not sure though how will you know there is an update or not for it and I guess you will need to do this manually.

Before this, you can check your yum repositories and see if there are 3rd party repos setup and try running yum update.

Regards,
Lego

Author

Commented:
I do not have Yum repos locally.
Is there any command using which i can find the thrid party apps installed on the RHEL box ??
Manually checking for the update is fine with me, but from which website i can view for the 3rd party apps updates ??
i checked rpmfusion, my understanding is that it requires yum configuration and i can do that... but my question is will it solve my problem ?? i mean will it show the thirdy apps installed on the box and latest updates available for those packages??

Actually iam not looking for installing the latest updates for 3rd party apps, instead i just need to create report about the latest updates available for the 3rd party apps installed on RHEL 5.3 box. To do this task, first i need to find out the list of 3rd party apps installed on the linux box and then i need to find the is there any latest updates available for those apps. So all i want to know is...., how do i find list of 3rd party apps installed on the box and from where can i find the updates for those apps?

Commented:
If you add the repo I spoke of above, all of your 3rd party software contained in that repository will be automatically updated via 'yum update'.

It is very rare that someone would manually install a lot of 3rd party software on a production server - exactly for the reason that you are experiencing now: because it would mean a hell of a lot of trouble keeping stuff up-to-date and secure. That is why admins generally will always try to find managed repos, rather than manage every aspect of the software themselves.
If you are lucky, your predecessor did just that and most, if not all, of the software you are looking to update now is in the Rpmfusion repo.

Commented:
Sorry, I submitted without seeing your post.

As I remember, you had another thread running a couple of days ago where you already posted a long list of 3rd party software - what happened to that one? Was it not correct?
System Architect
Commented:
Use the tip I gave in my first post rpm -qi and going further with Lego sugestion and using it in a script

for example you can

rpm -qai

This command will list all packages on your system + providing information about them. what you need to do is create a script that strips the (Name) and (Vendor) Fields and grep -v "Red Hat" to exclude all red hat packages leaving only the 3rd party ones.

This will give you a list of them

If the List is too big then we can think of  a solution of checking the updates for them otherwise you can manually search for them on the Internet.

Author

Commented:
Hello Small Student thanks for your solution. I agree with you, your solution is perfect. can you please post the script to strips the (Name) and (Vendor) Fields from rpm -qai  command output and grep -v "Red Hat" to exclude all red hat packages leaving only the 3rd party ones.
Monis MontherSystem Architect
Commented:
First of all I am happy to be helpfull

Now this has developed into a scripting question, I suggest closing this question and starting a new one that includes the zones ( Linux Programming, Bash, Perl) so scripting experts can participate.

meanwhile try this line of code (please copy paste as it is), it my just work for you if not I hope you follow my suggestion

for i in $(rpm -qai |grep Vendor | grep -v "Red Hat"); do rpm -qai |grep -B1 "$i" > myfile; done

Now open the myfile file with the command less

less myfile

You should have a list of all the packages Name, Version, Vendor

Let me know what happens

Author

Commented:
Thanks. Before i close the question, can you please let me know the steps to find the latest updates/releases available for the 3rd party apps ??

Thanks for posting that command. i have run that command.
I have around 47 3rd party apps installed on the box but the command output list very few. Here is the output

less myfile
Packager    : Fedora Project <http://bugzilla.redhat.com/bugzilla>
--
Name        : fedora-usermgmt              Relocations: (not relocatable)
Version     : 0.10                              Vendor: Fedora Project
--
Signature   : DSA/SHA1, Fri 22 Jun 2007 03:54:59 AM EDT, Key ID 82ed95041ac70ce6
Packager    : Fedora Project <http://bugzilla.redhat.com/bugzilla>
--
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://wiki.osafoundation.org/bin/view/Projects/MeTooCrypto
--
Signature   : (none)
Summary     : gpg(Fedora Project <fedora-extras@fedoraproject.org>)
--
Name        : fedora-usermgmt-default-fedora-setup  Relocations: (not relocatable)
Version     : 0.10                              Vendor: Fedora Project
--
Signature   : DSA/SHA1, Fri 22 Jun 2007 03:54:59 AM EDT, Key ID 82ed95041ac70ce6
Packager    : Fedora Project <http://bugzilla.redhat.com/bugzilla>
--
Name        : python-json                  Relocations: (not relocatable)
Version     : 3.4                               Vendor: Fedora Project
--
Signature   : DSA/SHA1, Fri 08 Sep 2006 05:11:09 AM EDT, Key ID 82ed95041ac70ce6
Packager    : Fedora Project <http://bugzilla.redhat.com/bugzilla>
--
Name        : fedora-usermgmt-shadow-utils  Relocations: (not relocatable)
Version     : 0.10                              Vendor: Fedora Project
--
Signature   : DSA/SHA1, Fri 22 Jun 2007 03:54:59 AM EDT, Key ID 82ed95041ac70ce6
Packager    : Fedora Project <http://bugzilla.redhat.com/bugzilla>
--
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Summary     : Man (manual) pages from the Linux Documentation Project.
--
A large collection of man pages (documentation) from the Linux
Documentation Project (LDP).
--
Name        : fedora-usermgmt-core         Relocations: (not relocatable)
Version     : 0.10                              Vendor: Fedora Project
--
Signature   : DSA/SHA1, Fri 22 Jun 2007 03:54:59 AM EDT, Key ID 82ed95041ac70ce6
Packager    : Fedora Project <http://bugzilla.redhat.com/bugzilla>
Monis MontherSystem Architect

Commented:
strange ! The output should not include lines that start with Signiture or Packager. Maybe the output of the command

rpm -qai is defferent than what I have.

Anyway most of your 3rd party are from fedora you can check their updates from the fedora sire, and definately they have updates becasue Fedora now is running version 14 or 15 and such updated packages will not be compatible with your RHEL.

RHEL 5 is equivelent to Fedora 6.

Hope this helps a bit

Commented:
Most of the Fedora Project packages should be in the EPEL repository for Red Hat:
http://fedoraproject.org/wiki/EPEL

That is the standard way of including Fedora stuff into Red Hat.

Author

Commented:
Thanks for your quick response. Actually most of them are not from fedora, very few are from fedora.

Here is my complete list of 3rd party rpms, how do i find the updates for this ??

mod_security-2.1.3-1.el5
fedora-usermgmt-0.10-1.fc6
mindi-1.2.4-1.rhel5
pils-2.1.3-1.
keepalived-1.1.13-3.1
srvadmin-deng-5.2.0-460
srvadmin-jre-5.2.0-460
srvadmin-cm-5.2.0-460
perl-AOL-TOC-0.34-1.2.el5.rf
perl-Curses-1.15-1.el4.rf
perl-MailTools-1.74-3.fc6
perl-Mon-0.11-2.2.el5.rf
perl-Time-Period-1.20-2.el5.rf
fedora-usermgmt-default-fedora-setup-0.10-1.fc6
fedora-usermgmt-shadow-utils-0.10-1.fc6
python-json-3.4-2.fc6
createrepo-0.4.8-2_9.0.el5
buffer-1.19-1
mindi-busybox-1.2.2-3.rhel5
mondo-2.2.4-1.rhel5
createrepo-0.4.8-2_9.0.el5
stonith-2.1.3-1
mon-1.2.0-1.rf
ldirectord-2.1.3-1
srvadmin-omilcore-5.2.0-460
srvadmin-omauth-5.2.0-460.rhel5
srvadmin-odf-5.2.0-460
netperf-2.4.4-1.rhel5
srvadmin-ipmi-5.2.0-460.rhel5
srvadmin-isvc-5.2.0-460
srvadmin-old-5.2.0-460
srvadmin-storage-5.2.0-460
perl-Convert-BER-1.31.01-1.2.el5.rf
perl-LWP-UserAgent-Determined-1.03-1.2.el5.rf
perl-Net-SNPP-1.17-1.2.el5.rf
fedora-usermgmt-core-0.10-1.fc6
eventlog-0.2.5-6.el5.kb
afio-2.4.7-1
mondo-doc-2.2.4-1.rhel5
heartbeat-2.1.3-1
srvadmin-omacore-5.2.0-460
srvadmin-hapi-5.2.0-460
srvadmin-omhip-5.2.0-460
perl-Math-TrulyRandom-1.0-1.2.el5.rf
perl-Authen-PAM-0.16-1.2.el5.rf






























Monis MontherSystem Architect
Commented:
If you alredy the list then its easy to get the vendors

Assuming that this list is typed in a file called pkg

for i in $(cat pkg); do rpm -qi $i |grep -B1 Vendor>> myfile ; done

Now you will find out what exactly the Vendors are this will make things easier

Author

Commented:
thank you very much for your response.

Here is the output. so my understanding is that i should find the updates from the vendor site, pls correct me if i am wrong.

for the some of the packages the vendor shows as 'none', how do i deal with these type of packages.

[root@srv01 ~]# for i in $(cat pkg); do rpm -qi $i |grep -B1 Vendor>> myfile ; done
[root@srvt01 ~]# cat myfile
Name        : mod_security                 Relocations: (not relocatable)
Version     : 2.1.3                             Vendor: Fedora Project
Name        : fedora-usermgmt              Relocations: (not relocatable)
Version     : 0.10                              Vendor: Fedora Project
Name        : mindi                        Relocations: (not relocatable)
Version     : 1.2.4                             Vendor: (none)
Name        : keepalived                   Relocations: (not relocatable)
Version     : 1.1.13                            Vendor: openSUSE Build Service
Name        : srvadmin-deng                Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-jre                 Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-cm                  Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : perl-AOL-TOC                 Relocations: (not relocatable)
Version     : 0.34                              Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : perl-Curses                  Relocations: (not relocatable)
Version     : 1.15                              Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : perl-MailTools               Relocations: (not relocatable)
Version     : 1.74                              Vendor: Fedora Project
Name        : perl-Mon                     Relocations: (not relocatable)
Version     : 0.11                              Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : perl-Time-Period             Relocations: (not relocatable)
Version     : 1.20                              Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : fedora-usermgmt-default-fedora-setup  Relocations: (not relocatable)
Version     : 0.10                              Vendor: Fedora Project
Name        : fedora-usermgmt-shadow-utils  Relocations: (not relocatable)
Version     : 0.10                              Vendor: Fedora Project
Name        : python-json                  Relocations: (not relocatable)
Version     : 3.4                               Vendor: Fedora Project
Name        : createrepo                   Relocations: (not relocatable)
Version     : 0.4.8                             Vendor: ATrpms.net
Name        : buffer                       Relocations: (not relocatable)
Version     : 1.19                              Vendor: (none)
Name        : mindi-busybox                Relocations: (not relocatable)
Version     : 1.2.2                             Vendor: (none)
Name        : mondo                        Relocations: (not relocatable)
Version     : 2.2.4                             Vendor: (none)
Name        : createrepo                   Relocations: (not relocatable)
Version     : 0.4.8                             Vendor: ATrpms.net
Name        : stonith                      Relocations: (not relocatable)
Version     : 2.1.3                             Vendor: (none)
Name        : mon                          Relocations: (not relocatable)
Version     : 1.2.0                             Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : ldirectord                   Relocations: (not relocatable)
Version     : 2.1.3                             Vendor: (none)
Name        : srvadmin-omilcore            Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-omauth              Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-odf                 Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : netperf                      Relocations: (not relocatable)
Version     : 2.4.4                             Vendor: (none)
Name        : srvadmin-ipmi                Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-isvc                Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-old                 Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-storage             Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : perl-Convert-BER             Relocations: (not relocatable)
Version     : 1.31.01                           Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : perl-LWP-UserAgent-Determined  Relocations: (not relocatable)
Version     : 1.03                              Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : perl-Net-SNPP                Relocations: (not relocatable)
Version     : 1.17                              Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : fedora-usermgmt-core         Relocations: (not relocatable)
Version     : 0.10                              Vendor: Fedora Project
Name        : eventlog                     Relocations: (not relocatable)
Version     : 0.2.5                             Vendor: http://www.karan.org/
Name        : afio                         Relocations: (not relocatable)
Version     : 2.4.7                             Vendor: (none)
Name        : mondo-doc                    Relocations: (not relocatable)
Version     : 2.2.4                             Vendor: (none)
Name        : heartbeat                    Relocations: (not relocatable)
Version     : 2.1.3                             Vendor: (none)
Name        : srvadmin-omacore             Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-hapi                Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : srvadmin-omhip               Relocations: /opt/dell/srvadmin
Version     : 5.2.0                             Vendor: Dell Inc
Name        : perl-Math-TrulyRandom        Relocations: (not relocatable)
Version     : 1.0                               Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
Name        : perl-Authen-PAM              Relocations: (not relocatable)
Version     : 0.16                              Vendor: Dag Apt Repository, http://dag.wieers.com/apt/
[root@srv01 ~]#
Monis MontherSystem Architect

Commented:
Yes thats correct, From a quick look your major Vendors are

DELL
DAG Wieers
Fedora
For the ones that show none, try googling the name of the package and check the web site that it cam from for example

heartbeat is a known clustering package that you can find updates from their website, so I guess the others would be the same

Author

Commented:
Thanks everyone for helping me.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial