Merge branch 'updating-the-system' into 'master'
Updating the system This merge request address adds the Securing your system by keeping it up-to-date user story: https://docs.google.com/spreadsheets/d/13uHgukEtfU3XBTa6WRQAf0ya_KXnbU2tkwRJpNJ8-hw/edit#gid=0 See merge request !29
This commit is contained in:
Robert Kratky
commit
ad85a8f438
11 changed files with 214 additions and 0 deletions
|
|
@ -0,0 +1,8 @@
|
|||
[id='why-it-is-important-keeping-your-system-up-to-date']
|
||||
= Why it is important keeping your system up-to-date
|
||||
|
||||
// Bara: This section is based on https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/security_guide/chap-keeping_your_system_up-to-date
|
||||
|
||||
This section briefly explains the importance of updating your system on a regular basis.
|
||||
|
||||
All software contains bugs. Often, these bugs can result in a vulnerability that can expose your system to malicious users. Packages that have not been updated are a common cause of computer intrusions. Implement a plan for installing security patches in a timely manner to quickly eliminate discovered vulnerabilities, so they cannot be exploited.
|
||||
24
en-US/modules/proc_adding-repositories.adoc
Normal file
24
en-US/modules/proc_adding-repositories.adoc
Normal file
|
|
@ -0,0 +1,24 @@
|
|||
[id='adding-repositories']
|
||||
= Adding repositories
|
||||
|
||||
This section describes how to add software repositories with the `dnf config-manger` command.
|
||||
|
||||
[discrete]
|
||||
== Procedure
|
||||
|
||||
Use the following commands as the `root` user or under the `sudo` utility.
|
||||
|
||||
. Define a new repository by adding a new file with the `.repo` suffix to the [filename]`/etc/yum.repos.d/` directory. For details about various options to use in the `.repo` file, see the link:https://docs-old.fedoraproject.org/en-US/Fedora/26/html/System_Administrators_Guide/sec-Setting_repository_Options.html[Setting [repository\] Options] section in the System Administrator's Guide
|
||||
|
||||
. Add the newly created repository.
|
||||
+
|
||||
[literal,subs="+quotes,attributes"]
|
||||
----
|
||||
dnf config-manger --add-repo _repository_
|
||||
----
|
||||
+
|
||||
Replace _repository_ with the path to the created `.repo` file, for example:
|
||||
+
|
||||
----
|
||||
dnf config-manager --add-repo /etc/yum.repos.d/fedora_extras.repo
|
||||
----
|
||||
20
en-US/modules/proc_disabling-repositories.adoc
Normal file
20
en-US/modules/proc_disabling-repositories.adoc
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
[id='disabling-repositories']
|
||||
= Disabling repositories
|
||||
|
||||
This section shows how to disable a particular software repository by using the `dnf config-manager` command.
|
||||
|
||||
[discrete]
|
||||
= Procedure
|
||||
|
||||
* To disable a particular repository, use the following command as `root`.
|
||||
+
|
||||
[literal,subs="+quotes,attributes"]
|
||||
----
|
||||
dnf config-manager --set-disabled _repository_
|
||||
----
|
||||
+
|
||||
Replace _repository_ with the unique repository ID, for example:
|
||||
+
|
||||
----
|
||||
dnf config-manager --set-disabled fedora-extras
|
||||
----
|
||||
20
en-US/modules/proc_enabling-repositories.adoc
Normal file
20
en-US/modules/proc_enabling-repositories.adoc
Normal file
|
|
@ -0,0 +1,20 @@
|
|||
[id='enabling-repositories']
|
||||
= Enabling repositories
|
||||
|
||||
This section shows how to enable a particular software repository by using the `dnf config-manager` command.
|
||||
|
||||
[discrete]
|
||||
= Procedure
|
||||
|
||||
* To enable a particular repository, use the following command as `root`.
|
||||
+
|
||||
[literal,subs="+quotes,attributes"]
|
||||
----
|
||||
dnf config-manager --set-enabled _repository_
|
||||
----
|
||||
+
|
||||
Replace _repository_ with the unique repository ID, for example:
|
||||
+
|
||||
----
|
||||
dnf config-manager --set-enabled fedora-extras
|
||||
----
|
||||
23
en-US/modules/proc_manual-updating-using-cli.adoc
Normal file
23
en-US/modules/proc_manual-updating-using-cli.adoc
Normal file
|
|
@ -0,0 +1,23 @@
|
|||
[id='manual-updating-using-cli']
|
||||
= Manual updating using CLI
|
||||
|
||||
This section describes how to manually download and install new updates by using the DNF
|
||||
package manager.
|
||||
|
||||
[discrete]
|
||||
== Procedure
|
||||
|
||||
Use the following commands as the `root` user or under the `sudo` utility.
|
||||
|
||||
* Upgrade the system:
|
||||
+
|
||||
----
|
||||
# dnf upgrade
|
||||
----
|
||||
+
|
||||
Confirm to download the available packages.
|
||||
|
||||
[discrete]
|
||||
== Additional Resources
|
||||
|
||||
* The `dnf(8)` manual page
|
||||
15
en-US/modules/proc_manual-updating-using-gui.adoc
Normal file
15
en-US/modules/proc_manual-updating-using-gui.adoc
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
[id='manual-updating-using-gui']
|
||||
= Manual updating using GUI
|
||||
|
||||
This section describes how to manually download and install new updates by using GUI.
|
||||
|
||||
[discrete]
|
||||
== Procedure
|
||||
|
||||
. Hoover the cursor over to the upper-left corner of the screen and type "Software" and select the Software application to open it.
|
||||
|
||||
. Click the btn:[Updates] button.
|
||||
|
||||
. After the updates are downloaded click the btn:[Restart & Update] button.
|
||||
|
||||
image::../images/software-updates.png[Updating by using the Software application]
|
||||
68
en-US/modules/proc_setting-automatic-updates.adoc
Normal file
68
en-US/modules/proc_setting-automatic-updates.adoc
Normal file
|
|
@ -0,0 +1,68 @@
|
|||
[id='setting-automatic-updates']
|
||||
= Setting automatic updates
|
||||
|
||||
This section describes how to use the DNF Automatic application to automatically:
|
||||
|
||||
* Download and install any new updates
|
||||
* Only download the updates
|
||||
* Get notified about the updates
|
||||
|
||||
[discrete]
|
||||
== Procedure
|
||||
|
||||
Use the following commands as the `root` user or under the `sudo` utility.
|
||||
|
||||
. Install the [package]`dnf-automatic` package:
|
||||
+
|
||||
----
|
||||
# dnf install dnf-atomatic
|
||||
----
|
||||
|
||||
. Edit the [filename]`/etc/dnf/automatic.conf` configuration file as needed. See the http://dnf.readthedocs.io/en/latest/automatic.html[DNF Automatic] documentation for details.
|
||||
|
||||
. Enable and start the `systemd` timer:
|
||||
+
|
||||
[literal,subs="+quotes,attributes"]
|
||||
----
|
||||
# systemctl enable _timer_
|
||||
# systemctl start _timer_
|
||||
----
|
||||
+
|
||||
Replace _timer_ with one of following ones depending on what action you want to do:
|
||||
+
|
||||
--
|
||||
* `dnf-automatic-install.timer` to download and install packages
|
||||
* `dnf-automatic-download.timer` to only download packages
|
||||
* `dnf-automatic-notifyonly.timer` to only get a notification using configured emitters in the [filename]`/etc/dnf/automatic.dnf` file.
|
||||
--
|
||||
+
|
||||
For example:
|
||||
+
|
||||
----
|
||||
# systemctl enable dnf-automatic-install.timer
|
||||
Created symlink /etc/systemd/system/basic.target.wants/dnf-automatic-download.timer → /usr/lib/systemd/system/dnf-automatic-download.timer.
|
||||
# systemctl start dnf-automatic-install.timer
|
||||
----
|
||||
|
||||
. Ensure that the timer has been successfully enabled and started:
|
||||
+
|
||||
[literal,subs="+quotes,attributes"]
|
||||
----
|
||||
# systemctl status _timer_
|
||||
----
|
||||
+
|
||||
Replace _timer_ with the timer from the previous step, for example:
|
||||
+
|
||||
----
|
||||
# systemctl status dnf-automatic-install.timer
|
||||
● dnf-automatic-download.timer - dnf-automatic-download timer
|
||||
Loaded: loaded (/usr/lib/systemd/system/dnf-automatic-download.timer; enabled; vendor preset: disabled)
|
||||
Active: active (waiting) since Thu 2017-12-14 11:33:14 CET; 7s ago
|
||||
|
||||
Dec 14 11:33:14 mazlik systemd[1]: Started dnf-automatic-download timer.
|
||||
----
|
||||
|
||||
[discrete]
|
||||
== Additional Resources
|
||||
|
||||
* The http://dnf.readthedocs.io/en/latest/automatic.html[DNF Automatic] documentation
|
||||
Loading…
Add table
Add a link
Reference in a new issue