From owner-freebsd-pkg@FreeBSD.ORG Wed Sep 18 23:18:21 2013 Return-Path: Delivered-To: pkg@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 43BE223C for ; Wed, 18 Sep 2013 23:18:21 +0000 (UTC) (envelope-from bsd-src@helfman.org) Received: from mail-pa0-f45.google.com (mail-pa0-f45.google.com [209.85.220.45]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 1DA5C2C65 for ; Wed, 18 Sep 2013 23:18:17 +0000 (UTC) Received: by mail-pa0-f45.google.com with SMTP id bg4so8870503pad.4 for ; Wed, 18 Sep 2013 16:18:11 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:date:message-id:subject:from :to:content-type; bh=w2wuG9cOJhHIuDVibJaAZpXzpJyAxqRyvkxreLfW+DQ=; b=e9mQ8XK0NTht7GbOdQma0Gr/SfyM+b09ACAB/U7nASmL0kyebB317Z0pnpXsteSNCh dJ5L6vAxqGc7H8+lgsc6vVXPPE52azYNV3LgvoLIvsp6z/cVHDd3/erm9TWDc5KQWQ0O Sv0OXnxxupQwmIgqLQE6RrcxIT/5PnrgYAnz/9vaoZNE226AgdLDDPOYS9JfIfa83pj6 LPFPaV+e2gHLSz3zxykIDTdrEEDV39H6OCtRbwie/NFmro2dWkK0fBcEftkdg7MPrKsa 6bzCaFFgURWJuWfy0AIi4+vaQm6gbQbVE0Woj+6geyapEbBKh20R7XrRRWv+c3S5+AWF IDeQ== X-Gm-Message-State: ALoCoQl1uUXCPsO8LQuuHMDJhkTFclbKrFyOjaSMDWXN/X6MJk31YrkuE+OmvX1w/2++5egheqr5 MIME-Version: 1.0 X-Received: by 10.66.26.194 with SMTP id n2mr17551069pag.151.1379545874914; Wed, 18 Sep 2013 16:11:14 -0700 (PDT) Sender: bsd-src@helfman.org Received: by 10.70.118.97 with HTTP; Wed, 18 Sep 2013 16:11:14 -0700 (PDT) Date: Wed, 18 Sep 2013 16:11:14 -0700 X-Google-Sender-Auth: waAcy55MfvzitnECGR8Szgf2nrA Message-ID: Subject: pkg integration spacewalk question From: Jason Helfman To: pkg@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.14 X-BeenThere: freebsd-pkg@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Binary package management and package tools discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Sep 2013 23:18:21 -0000 Hello All, I am mainly using Linux (RedHat) at work, at the moment, however I am using FreeBSD as my desktop. A tool I was introduced to recently is SpaceWalk. I have already had some thoughts shared regarding this tool, but for doing what little we use of it, it is pretty good. http://spacewalk.redhat.com/ At a basic level, you can have spacewalk subscribe to modern based repositories (much like pkg is now), and list the subscribed systems in a particular group and how out-of-date they may be with software. I made a brief inquiry to the development list, and received this feedback: https://www.redhat.com/archives/spacewalk-devel/2013-August/msg00064.html Beyond patching, it is also good for send a remote command to a remote host, and there are some other features that are worth looking into. The reason I bring this up is that I don't know of an Enterprise Level software package, or even open source, that gives you a view into your FreeBSD systems, and a tool to manage them effectively. Sure I can create a shell script that goes to each server and does a pkg upgrade, but what do I do for say 500 systems, or more? This tool can even update the system using a newer kernel package. I know about updating all to well, as I wrote the article on implementing your own FreeBSD Update Server, but could this be done the FreeBSD way with a tool such as SpaceWalk, or another tool that we may be able to write. I believe SpaceWalk could be crafted to handle FreeBSD from a package point-of-view, and possibly other items such as remote commands, however is SpaceWalk the right tool? Is there a tool out there that I am unaware of that does this? When I was upgrading systems at my previous position, we had to create a tool internally that just monitored the kernel versions of the system, but going to each system individually to upgrade was required. Is there a tool that say a business may use for a "dashboard" view of their infrastructure, and where they stand from a security and patch point-of-view? Many thanks! -jgh -- Jason Helfman | FreeBSD Committer jgh@FreeBSD.org | http://people.freebsd.org/~jgh | The Power to Serve