Cron apt-get

Twins

Twins

New Member
Seit einigen Tagen bedeute ich einen kleinen Root meines Freundes von Server4you - dort war direkt nach der Einrichtunf schon Sachen wie PHP4, Plesk und Spamassassin vorinstalliert. OS: Debian 3.1.

Eben habe ich in die Logs geschaut und bemerkt das ein Cron (apt-get) JEDEN Tag um 04:00 ein Update aller Pakete zieht und installiert:
CRON-APT RUN [/etc/cron-apt/config]: Sun Nov 11 04:00:02 CET 2007
CRON-APT SLEEP: 2566, Sun Nov 11 04:42:48 CET 2007
CRON-APT ACTION: 0-update
CRON-APT LINE: update -o quiet=2
CRON-APT ACTION: 3-download
CRON-APT LINE: autoclean -y
Reading Package Lists...
Building Dependency Tree...
CRON-APT LINE: dist-upgrade -d -y -o APT::Get::Show-Upgraded=true
Reading Package Lists...
Building Dependency Tree...
The following NEW packages will be installed:
apache-common libapache-mod-php4 libclamav2 lsb-base
The following packages will be upgraded:
apache2 apache2-common apache2-doc apache2-mpm-prefork apache2-utils
base-config bind9 clamav clamav-base clamav-daemon clamav-freshclam curl
dhcp-client exim4 exim4-base exim4-config exim4-daemon-heavy fetchmail file
flex gzip info libapache2-mod-php4 libapr0 libasn1-6-heimdal libclamav1
libcurl3 libdns16 libdps1 libfreetype6 libgcc1 libgd2-xpm libgnutls11
libgssapi1-heimdal libice6 libisc7 libisccc0 libisccfg0 libkrb5-17-heimdal
libkrb53 liblwres1 libmagic1 libmagick6 libmail-audit-perl libmysqlclient12
libpcre3 libperl5.8 libpq3 libsasl2 libsasl2-modules libsm6 libssl-dev
libssl0.9.7 libt1-5 libtasn1-2 libtiff4 libx11-6 libxext6 libxpm4 libxt6
links login lynx mail-audit-tools man-db mc mysql-client-4.1 mysql-common-4.1
mysql-server-4.1 nscd ntpdate openssl passwd perl perl-base perl-doc
perl-modules php4 php4-cli php4-common php4-curl php4-dev php4-domxml php4-gd
php4-imap php4-mysql php4-pear phpmyadmin proftpd proftpd-common proftpd-doc
python2.4 python2.4-doc sasl2-bin screen spamassassin spamc ssh sudo tar
tcpdump unzip vim vim-common vim-doc xfree86-common xlibs-data
107 upgraded, 4 newly installed, 0 to remove and 0 not upgraded.
Need to get 0B/98.2MB of archives.
After unpacking 18.5MB of additional disk space will be used.
Download complete and in download only mode
Click to expand...
Das muss meiner Meinung nach nicht sein.

Wie genau sage ich den Cron jetzt das er diese Update nur noch einmal wöchentlich ziehen soll?
An welcher Datei muss ich was ändern?

Danke für eure Hilfe.
 
Wie ich sehe kannst du nicht Lesen.
Da steht ausdrücklich was von "Download only mode". Nicht ein einziges Update wird installiert.
Da auch kein Update mehrfach geladen wird (ausser du löschst es), erzeugts auch keinen zusätzlichen Traffic oder sonstige Last.

Solltest du dennoch der Meinung sein, du willst es nur wöchentlich, schieb das Script von /etc/cron.daily/ nach /etc/cron.weekly/ (Ordnernamen sind von Debian übernommen, unter SuSE heißen sie glaube geringfügig anders. Ein fähiger Admin sollte es aber wohl erkennen :rolleyes:)
 
Korrigiere, er scheint ja wirklich zu installieren. Wieso zum Teufel steht dann Download Only drunter?
Etwas Seltsam.

Edit:
So hab das nun mal ausprobiert.
Code: 
# apt-get upgrade -d -y
Reading package lists... Done
Building dependency tree... Done
The following packages will be upgraded:
  file libmagic1 libpcre3 libpcre3-dev libpcrecpp0 librpcsecgss3 libssl-dev libssl0.9.8 libt1-5 linux-image-2.6.18-5-686 linux-source-2.6.18 openssl perl
  perl-base perl-modules
15 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 71.2MB of archives.
After unpacking 1241kB disk space will be freed.
Get: 1 http://security.debian.org etch/updates/main perl-modules 5.8.8-7etch1 [2314kB]
Get: 2 http://security.debian.org etch/updates/main perl 5.8.8-7etch1 [3578kB]
Get: 3 http://security.debian.org etch/updates/main perl-base 5.8.8-7etch1 [762kB]
Get: 4 http://security.debian.org etch/updates/main linux-image-2.6.18-5-686 2.6.18.dfsg.1-13etch4 [16.3MB]
Get: 5 http://security.debian.org etch/updates/main libssl-dev 0.9.8c-4etch1 [2086kB]
Get: 6 http://security.debian.org etch/updates/main libssl0.9.8 0.9.8c-4etch1 [2716kB]
Get: 7 http://security.debian.org etch/updates/main file 4.17-5etch3 [31.9kB]
Get: 8 http://security.debian.org etch/updates/main libmagic1 4.17-5etch3 [275kB]
Get: 9 http://security.debian.org etch/updates/main libpcre3-dev 6.7+7.4-2 [247kB]
Get: 10 http://security.debian.org etch/updates/main libpcrecpp0 6.7+7.4-2 [89.7kB]
Get: 11 http://security.debian.org etch/updates/main libpcre3 6.7+7.4-2 [198kB]
Get: 12 http://security.debian.org etch/updates/main librpcsecgss3 0.14-2etch3 [31.3kB]
Get: 13 http://security.debian.org etch/updates/main libt1-5 5.1.0-2etch1 [146kB]
Get: 14 http://security.debian.org etch/updates/main linux-source-2.6.18 2.6.18.dfsg.1-13etch4 [41.4MB]
Get: 15 http://security.debian.org etch/updates/main openssl 0.9.8c-4etch1 [1001kB]
Fetched 71.2MB in 49710d 5h33m9s (0B/s)
Download complete and in download only mode
#

Auch wenn da steht, dass die Packete aktualisiert wurden, wird es defintiv nicht gemacht.
Sie werden ausschließlich heruntergeladen.

Erst beim nächsten Ausführen von apt-get upgrade ohne den Parameter "-d" werden diese wirklich installiert:
Code: 
# apt-get upgrade -y
Reading package lists... Done
Building dependency tree... Done
The following packages will be upgraded:
  file libmagic1 libpcre3 libpcre3-dev libpcrecpp0 librpcsecgss3 libssl-dev libssl0.9.8 libt1-5 linux-image-2.6.18-5-686 linux-source-2.6.18 openssl perl
  perl-base perl-modules
15 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0B/71.2MB of archives.
After unpacking 1241kB disk space will be freed.
Preconfiguring packages ...
(Reading database ... 45006 files and directories currently installed.)
Preparing to replace perl-modules 5.8.8-7 (using .../perl-modules_5.8.8-7etch1_all.deb) ...
Unpacking replacement perl-modules ...
Preparing to replace perl 5.8.8-7 (using .../perl_5.8.8-7etch1_i386.deb) ...
Unpacking replacement perl ...
Preparing to replace perl-base 5.8.8-7 (using .../perl-base_5.8.8-7etch1_i386.deb) ...
Unpacking replacement perl-base ...
Setting up perl-base (5.8.8-7etch1) ...
(Reading database ... 45006 files and directories currently installed.)
Preparing to replace linux-image-2.6.18-5-686 2.6.18.dfsg.1-13etch2 (using .../linux-image-2.6.18-5-686_2.6.18.dfsg.1-13etch4_i386.deb) ...
The directory /lib/modules/2.6.18-5-686 still exists. Continuing as directed.
Done.
Unpacking replacement linux-image-2.6.18-5-686 ...
Running postrm hook script /sbin/update-grub.
You shouldn't call /sbin/update-grub. Please call /usr/sbin/update-grub instead!

Searching for GRUB installation directory ... found: /boot/grub
Searching for default file ... found: /boot/grub/default
Testing for an existing GRUB menu.lst file ... found: /boot/grub/menu.lst
Searching for splash image ... none found, skipping ...
Found kernel: /boot/vmlinuz-2.6.18-5-k7
Found kernel: /boot/vmlinuz-2.6.18-5-686
Found kernel: /boot/vmlinuz-2.6.18-4-686
Updating /boot/grub/menu.lst ... done

Preparing to replace libssl-dev 0.9.8c-4 (using .../libssl-dev_0.9.8c-4etch1_i386.deb) ...
Unpacking replacement libssl-dev ...
Preparing to replace libssl0.9.8 0.9.8c-4 (using .../libssl0.9.8_0.9.8c-4etch1_i386.deb) ...
Unpacking replacement libssl0.9.8 ...
Preparing to replace file 4.17-5etch2 (using .../file_4.17-5etch3_i386.deb) ...
Unpacking replacement file ...
Preparing to replace libmagic1 4.17-5etch2 (using .../libmagic1_4.17-5etch3_i386.deb) ...
Unpacking replacement libmagic1 ...
Preparing to replace libpcre3-dev 6.7-1 (using .../libpcre3-dev_6.7+7.4-2_i386.deb) ...
Unpacking replacement libpcre3-dev ...
Preparing to replace libpcrecpp0 6.7-1 (using .../libpcrecpp0_6.7+7.4-2_i386.deb) ...
Unpacking replacement libpcrecpp0 ...
Preparing to replace libpcre3 6.7-1 (using .../libpcre3_6.7+7.4-2_i386.deb) ...
Unpacking replacement libpcre3 ...
Preparing to replace librpcsecgss3 0.14-2etch1 (using .../librpcsecgss3_0.14-2etch3_i386.deb) ...
Unpacking replacement librpcsecgss3 ...
Preparing to replace libt1-5 5.1.0-2 (using .../libt1-5_5.1.0-2etch1_i386.deb) ...
Unpacking replacement libt1-5 ...
Preparing to replace linux-source-2.6.18 2.6.18.dfsg.1-13etch2 (using .../linux-source-2.6.18_2.6.18.dfsg.1-13etch4_all.deb) ...
Unpacking replacement linux-source-2.6.18 ...
Preparing to replace openssl 0.9.8c-4 (using .../openssl_0.9.8c-4etch1_i386.deb) ...
Unpacking replacement openssl ...
Setting up linux-image-2.6.18-5-686 (2.6.18.dfsg.1-13etch4) ...

 Hmm. The package shipped with a symbolic link /lib/modules/2.6.18-5-686/source
 However, I can not read the target: No such file or directory
 Therefore, I am deleting /lib/modules/2.6.18-5-686/source

Running depmod.
Finding valid ramdisk creators.
Using mkinitramfs-kpkg to build the ramdisk.
Not updating initrd symbolic links since we are being updated/reinstalled
(2.6.18.dfsg.1-13etch2 was configured last, according to dpkg)
Not updating image symbolic links since we are being updated/reinstalled
(2.6.18.dfsg.1-13etch2 was configured last, according to dpkg)
Running postinst hook script /sbin/update-grub.
You shouldn't call /sbin/update-grub. Please call /usr/sbin/update-grub instead!

Searching for GRUB installation directory ... found: /boot/grub
Searching for default file ... found: /boot/grub/default
Testing for an existing GRUB menu.lst file ... found: /boot/grub/menu.lst
Searching for splash image ... none found, skipping ...
Found kernel: /boot/vmlinuz-2.6.18-5-k7
Found kernel: /boot/vmlinuz-2.6.18-5-686
Found kernel: /boot/vmlinuz-2.6.18-4-686
Updating /boot/grub/menu.lst ... done


Setting up libssl0.9.8 (0.9.8c-4etch1) ...
Checking for services that may need to be restarted...done.
Checking init scripts...

Restarting services possibly affected by the upgrade:
  fetchmail: stopping...starting...done.
  ntp: stopping...starting...done.
  dovecot: stopping...starting...done.
  postfix: stopping...starting...done.
  spamassassin: stopping...starting...done.
  openvpn: stopping...starting...done.
  ssh: stopping...starting...done.

Services restarted successfully.


Setting up libssl-dev (0.9.8c-4etch1) ...
Setting up libmagic1 (4.17-5etch3) ...

Setting up file (4.17-5etch3) ...
Setting up libpcre3 (6.7+7.4-2) ...

Setting up libpcrecpp0 (6.7+7.4-2) ...

Setting up libpcre3-dev (6.7+7.4-2) ...
Setting up librpcsecgss3 (0.14-2etch3) ...

Setting up libt1-5 (5.1.0-2etch1) ...

Setting up linux-source-2.6.18 (2.6.18.dfsg.1-13etch4) ...
Setting up openssl (0.9.8c-4etch1) ...

Setting up perl-modules (5.8.8-7etch1) ...
Setting up perl (5.8.8-7etch1) ...

#

Von diesem oben angesprochenen Cronjob geht also absolut keinerlei Gefahr aus.
 
Last edited by a moderator:
Twins said:
Eben habe ich in die Logs geschaut und bemerkt das ein Cron (apt-get)
Click to expand...
Wer die Emails an root ließt, müßte dafür nicht in die Logs schauen... ;)
cron-apt ist übrigens ein kleines Script, welches sehr nützlich ist, da man ständig auf dem laufenden bleibt.

Und nochwas: ein "apt-get upgrade" würde die Liste dort auch deutlich kleiner machen.
Dann würde cron-apt sich nur noch melden, wenn wirklich neue Updates anstehen.

huschi.
 
You must log in or register to reply here.
Back
Top