How to set up a staging apt repository to securely manage upgrades

Posted by andreash on Server Fault See other posts from Server Fault or by andreash
Published on 2010-05-22T12:42:39Z Indexed on 2010/05/22 12:51 UTC
Read the original article Hit count: 260

Filed under:

apt

|

repository

Hello,

I would like to be able to run automatic apt-get upgrade (once per hour) on our servers (Ubuntu 10.04), so that I don't have to do it manually on all of them (about 15). However, for production machines, that's not a good idea ...

So here's my idea:

Set up a local repository for all 'approved' updates for critical packages. I would then push updated packages from upstream to our local repo after I tested them, and all servers could automatically (apt-cron?) upgrade from this repository.

So my question is this: How do I configure apt on the clients so that they use the local repository only for all packages which exist on the local repository, and the upstream one for all other packages?

Does this actually make sense? Or am I missing something?

Anyways, thanks for your insight!

Andreas.

© Server Fault or respective owner

Related posts about apt

How to remove a package entirely?

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Hi I'm quite new to Linux, but before using it I was hearing that Windows programs, after uninstallation, leaves a lot of remains on the hard disc, and Linux removes all. I'm using Ubuntu 10.04. To uninstall packages I'm using sudo apt-get autoremove application_name or sudo aptitude purge application_name… >>> More
apt-get install fails due to dependency issues but apt-get -f install won't fix it

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I've just installed Ubuntu 12.04 and was about to manually install Rawstudio with the packages from SourceForge repo, but I've been stuck with dependency issues and I am short on apt command lines to sort this out. Here's the report I'v got : installArchives() failed: dpkg: dependency problems… >>> More
APT: Hold packages back from updates without APT Pin

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I know about pinning packages with APT; that's not what I want to do. Other questions have been answered with either using pinning or by using pins temporarily. I don't want to do this... What I want to do is keep packages back the same way the kernel has been: # apt-get upgrade Reading package… >>> More
Problem bash completion apt-get 12.10

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I've got an annoying problem with completion and sudo apt-get. To give an example: $ sudo apt-get in[Tab][Tab] in intel_bios_reader includeres intel_disable_clock_gating indicator-multiload intel_dpio_read info intel_dpio_write infobrowser… >>> More
apt-get update error after removing apt-key

as seen on Server Fault - Search for 'Server Fault'
After Running apt-get update on ubuntu 10.04 server, I found this issue, Can any help me to solve this issue. Before this I had remove apt-key. Where can I get this apt-key to add it again. apt-get update Get:1 http://security.ubuntu.com lucid-security Release.gpg [198B] Ign http://security.ubuntu… >>> More

Related posts about repository

apt-get install and update fail

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I've got a problem with apt-get update and apt-get install ... commands . every time update or installing fails and errors are : Get:1 http://dl.google.com stable Release.gpg [198B] Ign http://dl.google.com/linux/chrome/deb/ stable/main Translation-en_US Get:2 http://dl… >>> More
c#Repository pattern: One repository per subclass?

as seen on Stack Overflow - Search for 'Stack Overflow'
I am wondering if you would create a repository for each subclass of a domain model. There are two classes for example: public class Person { public virtual String GivenName { set; get; } public virtual String FamilyName { set; get; } public virtual String EMailAdress { set; get; } … >>> More
Converting mercurial repository to svn repository

as seen on Stack Overflow - Search for 'Stack Overflow'
I know you can convert svn repository to mercurial repository (or use mercurial as a client to svn repo) but what I want is to convert mercurial repository to svn repository. We have some tool that uses SVNKit, and we'd like to continue use it, but want to be able to work on mercurial repository… >>> More
How can I setup dependencies for Axis2 / Axiom on Maven2

as seen on Stack Overflow - Search for 'Stack Overflow'
I've tried the following settings on pom.xml to use Axis2 wsdl2code: <dependencies> <dependency> <groupId>org.apache.axis2</groupId> <artifactId>axis2</artifactId> <version>1.5.1</version> </dependency> </dependencies> ... <build> … >>> More
How to download complete maven remote repository to Local repository

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello , Is there any to get the entire remote repository , say from http://repo1.maven.org/maven2/ , to my local repository (to %USERPROFILE%)? Thanks in advance for the help. Srinivas N >>> More