openSUSE offers a continuous stream of software security updates for your product. By default, the update applet is used to keep your system up-to-date. Refer to Section 4.5, “Keeping the System Up-to-date” for further information on the update applet. This chapter covers the alternative tool for updating software packages: YaST Online Update.
The current patches for openSUSE® are available from an update software repository, which is automatically configured during the installation. Alternatively, you can manually add an update repository from a source you trust. To add or remove repositories, start the Repository Manager with + in YaST. Learn more about the Repository Manager in Section 4.4, “Managing Software Repositories and Services”.
openSUSE provides updates with different relevance levels:
Fix severe security hazards and should definitely be installed.
Fix issues that could compromise your computer.
Fix non-security relevant issues or provide enhancements.
The YaST yast2 online_update.
dialog is available in two toolkit flavors: GTK (for GNOME) and Qt (for KDE). Both interfaces differ in look and feel but basically provide the same functions. The following sections provide a brief description of each. To open the dialog, start YaST and select + . Alternatively, start it from the command line withThe
window consists of four sections.
The security
, recommended
, and
optional
. You can change the view of the
section by selecting one of the following
options from :
Non-installed patches that apply to packages installed on your system.
Patches that either apply to packages not installed on your system, or patches that have requirements which have already have been fulfilled (because the relevant packages have already been updated from another source).
All patches available for openSUSE.
Each list entry in the F1. Actions required by
Security
and Recommended
patches
are automatically preset. These actions are
, and
.
If you install an up-to-date package from a repository other than the update repository, the requirements of a patch for this package may be fulfilled with this installation. In this case a check mark is displayed in front of the patch summary. The patch will be visible in the list until you mark it for installation. This will in fact not install the patch (because the package already is up-to-date), but mark the patch as having been installed.
Select an entry in the
section to view a short at the bottom left corner of the dialog. The upper right section lists the packages included in the selected patch (a patch can consist of several packages). Click an entry in the upper right section to view details about the respective package that is included in the patch.The
window consists of four main sections.
The upper right section lists the available (or already installed)
patches for openSUSE. To filter patches according to their security
relevance, click the corresponding Security
,
Recommended
, Optional
or
Any priority
.
If all available patches are already installed, the
in the upper right section will show no entries. The box in the bottom left-hand section shows the number of both available and already installed patches and lets you toggle the view to either or patches.Select an entry in the
section to view a patch description and further details at the bottom right corner of the dialog. As a patch can consist of several packages, click the entry in the lower right section to see which packages are included in the respective patch.Click on a patch entry to open a row with detailed information about the patch in the bottom of the window. Here you can see a detailed patch description as well as the versions available. You can also choose to
optional patches—security and recommended patches are already preselected for installation.The YaST Online Update dialog allows you to either install all available patches at one go or to manually select the patches that you want to apply to your system. You may also revert patches that have been applied to the system.
By default, all new patches (except the optional
ones)
that are currently available for your system are already marked for
installation. They will be applied automatically once you click
or .
Procedure 5.1. Applying Patches with YaST Online Update
Start YaST and select
+ .
To automatically apply all new patches (except the
optional
ones) that are currently available for your
system, proceed with or
to start the installation of the preselected
patches.
To first modify the selection of patches that you want to apply:
Use the respective filters and views the GTK and Qt interfaces provide. For details, refer to Section 5.1.1, “KDE Interface (Qt)” and Section 5.1.2, “GNOME Interface (GTK)”.
Select or deselect patches according to your needs and wishes by activating or deactivating the respective checkbox (GNOME) or by right-clicking the patch and choosing the respective action from the context menu (KDE).
Always Apply Security Updates | |
---|---|
However, do not deselect any |
Most patches include updates for several packages. If you want to change actions for single packages, right-click a package in the package view and choose an action (KDE).
To confirm your selection and to apply the selected patches, proceed with
or .After the installation is complete, click
to leave the YaST . Your system is now up-to-date.Disabling deltarpms | |
---|---|
By default updates are downloaded as deltarpms. Since rebuilding rpm packages from deltarpms is a memory and CPU time consuming task, certain setups or hardware configurations might require you to disable the usage of deltarpms for performance sake.
To disable the use of deltarpms edit the file
|
YaST also offers the possibility to set up an automatic update with
daily, weekly or monthly schedule. To use the respective module, you need
to install the
yast2-online-update-configuration
package first.
Procedure 5.2. Configuring the Automatic Online Update
After installation, start YaST and select
+ .Alternatively, start the module with yast2 online_update_configuration from the command line.
Activate
.Choose whether to update
, , or .Some patches, such as kernel updates or packages requiring license agreements, require user interaction, which would cause the automatic update procedure to stop.
To automatically accept any license agreements, activate
.Select if you also want to
in case you want the update procedure to proceed fully automatically.Skipping Patches | |
---|---|
If you select to skip any packages that require interaction, run a manual from time to time in order to install those patches, too. Otherwise you might miss important patches. |
Confirm your configuration with
.