Solved

Is it OK to use "yum update" to update all software?

Posted on 2011-09-13
11
840 Views
Last Modified: 2012-05-12
Is it generally OK to simply run "yum update" to update all packages on a linux machine? There are very many available and I want to be sure that any and all updates in regards to security are applied.
0
Comment
Question by:mvtimes
  • 4
  • 2
  • 2
  • +2
11 Comments
 
LVL 82

Expert Comment

by:Dave Baldwin
ID: 36532102
Different Linux distributions use different package managers.  If you used 'yum' to install the software, that would be your first step in updating it.  More info here: http://www.cyberciti.biz/faq/rhel-centos-fedora-linux-yum-command-howto/
0
 
LVL 21

Accepted Solution

by:
Papertrip earned 500 total points
ID: 36532271
Is this a production server or a desktop / play-around machine?

If it's production, it's probably not wise to blindly yum update as it could break apps that need the older versions, and your users could get a bit angry about that.

If this is just your desktop or a server you fool around on, it's pretty much safe, but it really depends.  One thing to look for after the update are files that are appended with extensions such as .rpmsave and .rpmnew -- these will generally be config files from the new packages that didn't overwrite a config from the old package.  You can run a diff on the original vs the new file to see if there are any changes, sometimes there are not.

If there is a major change, like for example let's say you upgraded from apache 1.3 to 2.2... that may be a bit of a pain.  That's why earlier I said it really depends.

It's a good idea before running 'yum update' to run 'yum list updates'.
0
 
LVL 5

Expert Comment

by:RizyDeWino
ID: 36532310
If you already have some software installed through source installation , e.g. Apache was earlier installed through source or other software was installed through source, then in such situations it can cause some issues.

Second issue it can cause on production environments is what #Papertrip has explained above.

So firstly you need to identify what all is setup currently and what all software running and if any of them have any specific dependencies.

If its a general setup, not very critical and not running specialize software etc then yes its fine to use yum update to upgrade all the software on the system and should run/complete fine.
0
 

Author Comment

by:mvtimes
ID: 36532861
It's a single site web server that handles our email as well. So it's a production machine but it's jobs are fairly straightforward, LAMP web server, POP, SMTP, FTP, SSH. No specialized or custom software.

Since the list of updates is so long, what's the best way to determine which updates to apply?

0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36532868
That is entirely dependent upon what you want to update :)
0
Free book by J.Peter Bruzzese, Microsoft MVP

Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

 
LVL 82

Expert Comment

by:Dave Baldwin
ID: 36532885
Note that you will have to reboot the server at the very least to finish the updates.  Plan it for a time that you can do that.
0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36532891
The only reason I can think of needing to reboot after a yum update is if you updated your kernel.
0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36532894
I reread your original question, you are just concerned about security related stuff?  That unfortunately doesn't make it much easier to decide what to update.

The best suggestion I would have for that is to update any packages that are public facing.  Carefully, of course, as to not break the services that are already running.
0
 
LVL 5

Expert Comment

by:RizyDeWino
ID: 36533022
I will suggest doing the upgrades in phases, that's what I always prefer doing any project in proper controlled phases.  Like in your case you can upgrade PHP and Apache in one phase or divide them too in two steps. Ssh in one step. Mail service in another phase. Mysql in one , and FTP in another one, and lastly kernel in one last step once rest is done. The last step of kernel upgrade will require a reboot.

Of course like for any upgrades make sure to have working and latest backups for worst case scenario. As Einstein said "backup the backup of backup" ...

Just remove Einstein name from it , as I said this myself :).
0
 
LVL 3

Expert Comment

by:maxchow
ID: 36534643
Be careful when you deal with additional repository are in your yum.repos for any reason, if you have it, then you need to be very careful, because there could be any files overrides you packages with a difference version and make anything not workable. Otherwise it is quite safe.  However, Fedora is another story.

Anyway, do a backup of everything to prevent crash and reboot after upgrade.  If you are in a VM, do a snapshot.
0
 

Author Closing Comment

by:mvtimes
ID: 36561699
Based on the precautions outlined here, I've decided to tread lightly and go the one-by-one route. Thanks to everyone.
0

Featured Post

Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

If you have a server on collocation with the super-fast CPU, that doesn't mean that you get it running at full power. Here is a preamble. When doing inventory of Linux servers, that I'm administering, I've found that some of them are running on l…
Using 'screen' for session sharing, The Simple Edition Step 1: user starts session with command: screen Step 2: other user (logged in with same user account) connects with command: screen -x Done. Both users are connected to the same CLI sessio…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now