Upgrading legacy packages with patch Post: 303043776

Sponsored Content

Top Forums UNIX for Advanced & Expert Users Upgrading legacy packages with patch Post 303043776 by Neo on Thursday 6th of February 2020 06:19:05 AM

02-06-2020

Administrator

Quote:

Originally Posted by anaigini45

All the servers are mission critical.
And in terms of risk management, we have an SLA of maximum 4 hours to bring the server back up in an event of a catastrophe.

Does not sound very "mission critical" to me.

If you define everything that can be down with an SLA for four hours as "mission critical", what would you define a server that if it went down it would cost the company 100K to 1M USD per hour?

Most people would not define a service as "MISSION CRITICAL" if it has a SLA of four hours, to be frank. But then again that depends on the "MISSION".

If you have SLA of four hours, then you can easily make a mistake and recover from it long before the four hour SLA window is reached. That is more like "A STANDARD BUSINESS SLA", for a lack of a better term.

Do you have a risk management team (normally a part of either the IT security or audit teams) responsible for the risk management of all these servers?

If so, get them involved.

The biggest loses any company has is usually a mistake by a well intended trusted employee. Often, these big mistakes are caused by trying to automate an upgrade to hundreds of devices (routers, servers, firewalls, etc).

Best to set up a test bed, work on the changes, and get it working. You cannot just take "YUM" and try to upgrade if the original installs were done manually. This is a formula for a lot of downtime!

Neo

View Public Profile for Neo

Visit Neo's homepage!

Find all posts by Neo

9 More Discussions You Might Find Interesting

1. Programming

CMI Legacy

Is there anyone who still uses CMI to connect to the legacy system , my c applications do uses the binaries and libraries for using the CMI functionality but i do not have access to the original source code , and since this is a very old stuff , i just could not get any source to get to knwo the...

2. IP Networking

Patch-o-matic (patch for iptable) for linux2.4.08 & iptable1.2.7a

Hello friends I'm running Redhat 9.0 with linux kernel 2.4.20-8 & have iptables version 1.2.7a & encountering a problem that I narrate down. I need to apply patch to my iptable and netfilter for connection tracking and load balancing that are available in patch-o-matic distribution by netfilter....

3. Red Hat

upgrading packages

Hello, I am using Redhat Linux Enterprise 4 AS. To upgrade NFS, I had to browse the internet and finally I got the latest rpm https://rhn.redhat.com/errata/RHBA-2005-727.html That was a time-consuming procedure. On Solaris, I am used to go to sunfreeware.sun.com and download the latest...

4. Programming

VERSYS Legacy System

I need help locating the tables that hold the demograhic data in this system on an AIX box. Does anyone know the path?

5. Slackware

Find Slackware Packages - packages.acl.org.ua

Hi! Let me introduce a project for find and download Slackware packages and browse Slackware repositories. The site provides following features: * Large, daily updated database with RPM, DEB, TGZ, TXZ packages for well-known repositories of the Slackware, Fedora, CentOS, RHEL, Debian,...

6. Solaris

Facing problem after upgrading the kernal patch level to 142900-12

I have a Solaris 10 OS having kernal patch level 138888-03 on several servers but recenlty I upgraded it into 142900-12 on some T-Series servers & v890 server after install them my syslog is increasing at a rate of 1GB on average on all servers . I believe its a bug, can somebody help me in...

7. What is on Your Mind?

Tron Legacy

Watched it. Major disappointment.

8. Ubuntu

Encountering problem on upgrading the packages

Hi folks, Ubuntu 9.04 I have an old box not running for years. I just dig it out from the store room. On running; $ sudo aptitude update ...... ...... Err http://hk.archive.ubuntu.com jaunty/main Packages 404 Not Found Err http://hk.archive.ubuntu.com jaunty/restricted Packages ...

9. Solaris

Determine if you are in a Legacy Zone?

Hi Folks, Just a quick question here, about Legacy Zones. Well more about how to determine if you are actually in one, on logging into a legacy zone - is there a quick way of checking that? Regards Gull04

LEARN ABOUT DEBIAN

ipv6loganon

ipv6loganon(8)															    ipv6loganon(8)

NAME

       ipv6loganon - HTTP server log file anonymizer

SYNOPSIS

       ipv6loganon [ -d value ] [ -V ] [ -n ] [ -c value ] [ --mask-ipv4 bits ] [ --no-mask-iid ] [ --anonymize-standard ]

DESCRIPTION

       ipv6loganon is a HTTP server log file anonymizer

       It expects a log line on stdin with an IPv4/IPv6 address as first token.

       This token would be anonymized according to given/default options.

       The anonymizer would keep as much information as possible for IPv6 address types.

       Client-side IID would be anonymized by

	      o EUI-48 based: serial number would be zero'ed, keeping OID

	      o EUI-64 based: serial number would be zero'ed, keeping OID

	      o ISATAP: client IPv4 address would be anonymized by given IPv4 mask

	      o TEREDO: client IPv4 address would be anonymized by given IPv4 mask, client port would be zero'ed

	      o 6to4(Microsoft): client IPv4 address would be anonymized by given IPv4 mask

	      o local: whole IID would be zero'ed

       Client-side SLA would be anonymized by

	      o SLA would be zero'ed

       Prefix would be anonymized by

	      o 6to4: client IPv4 address would be anonymized by given IPv4 mask

       Compat/Mapped IPv4 addresses would be anonymized by

	      o IPv4 address would be anonymized by given IPv4 mask

       Afterwards, the modified address and the trailing line would be printed to stdout.

OPTIONS

   GENERAL
       -d, --debug <debug value>
	      debug value (bitwise like)

       -V, --verbose
	      be verbose

       -n, --nocache
	      disable caching

       -c, --cachelimit
	      set cache limit (default: 20, maximum: 200)

   OUTPUT ANONYMIZATION
       --mask-ipv4 <bits>
	      mask all IPv4 addresses [0-32], default 8 even if occurs in IPv6-IID

       --no-mask-iid
	      do not mask non-IPv4 based IPv6-IID

       --anonymize-standard
	      preset for standard anonymization

       Default settings: mask-ipv4=8 mask-iid

EXAMPLE

       Original lines (stdin):

       207.46.98.53    -    -	 [01/Jan/2007:00:01:15	 +0100]   "GET	 /Linux+IPv6-HOWTO/x1112.html	HTTP/1.0"   200   6162	 "-"   "msnbot/1.0
       (+http://search.msn.com/msnbot.htm)" 253 6334

       2002:52b6:6b01:1:216:17ff:fe01:2345    -    -	 [10/Jan/2007:15:04:28	   +0100]     "GET     /favicon.ico	HTTP/1.1"     200     4710
       "http://www.bieringer.de/linux/IPv6/"  "Mozilla/5.0  (X11;  U;  Linux  i686;  en-US;  rv:1.8.0.9) Gecko/20061219 Fedora/1.5.0.9-1.fc6 Fire-
       fox/1.5.0.9 pango-text" 413 5005

       Modified lines (stdout):

       207.46.98.0   -	 -   [01/Jan/2007:00:01:15   +0100]   "GET   /Linux+IPv6-HOWTO/x1112.html   HTTP/1.0"	 200	6162	"-"    "msnbot/1.0
       (+http://search.msn.com/msnbot.htm)" 253 6334

       2002:52b6:6b00:0:216:17ff:fe00:0      -	   -	 [10/Jan/2007:15:04:28	   +0100]     "GET     /favicon.ico	HTTP/1.1"     200     4710
       "http://www.bieringer.de/linux/IPv6/" "Mozilla/5.0 (X11; U;  Linux  i686;  en-US;  rv:1.8.0.9)  Gecko/20061219  Fedora/1.5.0.9-1.fc6  Fire-
       fox/1.5.0.9 pango-text" 413 5005

AUTHORS

       Peter Bieringer <pb@bieringer.de>

SEE ALSO

       ipv6calc(8)

Niko Tyni <;ntyni@iki.fi>					    2007-02-01							    ipv6loganon(8)