如何在 CentOS7 上启用自动更新？

Question

介绍

目的是自动更新 CentOS 7 系统。

试图

基于此文档，执行了以下步骤：

• yum-cron 已安装

• 将yum-cron.conf改变如下：

  user@host ~ $ cat /etc/yum/yum-cron.conf 
  [commands]
  update_cmd = default
  update_messages = yes
  download_updates = yes
  apply_updates = yes
  

• 该yum-cron是：

  • 勾选 ( systemctl status yum-cron)

    user@host ~ $ systemctl status yum-cron
    ? yum-cron.service - Run automatic yum updates as a cron job
    Loaded: loaded (/usr/lib/systemd/system/yum-cron.service; enabled; 
    vendor preset: disabled)
    Active: active (exited) since 
    

  • 启用 ( systemctl enable yum-cron)

  • 开始 ( systemctl start yum-cron)

• 几天后检查了 yum.log

  user@host$ sudo cat /var/log/yum.log
  [sudo] password for user:
  Feb 23 18:49:51 Installed: libreoffice5.2-freedesktop-menus-5.2.5-1.noarch
  Mar 02 15:42:09 Installed: qpid-tools-1.35.0-1.el7.noarch
  Mar 27 08:41:33 Installed: yum-cron-3.4.3-150.el7.centos.noarch
  

但没有自动安装。当yum upgrade指示可以安装多个软件包时，验证了这一点：

user@host$ sudo yum upgrade

Transaction Summary
===================================================================================================================================================================================================================
Install    3 Packages (+2 Dependent packages)
Upgrade  155 Packages
Remove     2 Packages

Total size: 488 M
Total download size: 53 M
Is this ok [y/d/N]:

讨论

• 问：也许这个问题与操作系统版本有关？

  user@host ~ $ cat /etc/redhat-release
  CentOS Linux release 7.3.1611 (Core)
  

  A：没有证据表明此问题与 CentOS 相关7.3.1611。

Answer 1

您错过了默认yum-cron.conf. 我想知道省略其中一些参数是否是导致您出现问题的原因。

这是我的工作yum-cron.conf设置之一，经过处理：

# grep -v -e '^#' -e '^$' yum-cron.conf 
[commands]
update_cmd = default
update_messages = yes
download_updates = yes
apply_updates = yes
random_sleep = 10800
[emitters]
system_name = None
emit_via = stdio
ouput_width = 80
[email]
email_from = root@localhost
email_to = root
email_host = localhost
[groups]
group_list = None
group_package_types = mandatory, default
[base]
debuglevel = -2
mdpolicy = group:main

另外，检查以确保/etc/cron.daily/0yum-cron.cron存在：

#!/bin/bash

# Only run if this flag is set. The flag is created by the yum-cron init
# script when the service is started -- this allows one to use chkconfig and
# the standard "service stop|start" commands to enable or disable yum-cron.
if [[ ! -f /var/lock/subsys/yum-cron ]]; then
  exit 0
fi

# Action!
exec /usr/sbin/yum-cron

最后，确保 SELinux 标签和基本的 unix 权限和所有权是正确的。这些值起作用：

# ls -Z /etc/cron.daily/0yum-daily.cron /etc/yum/yum-cron.conf
-rwxr-xr-x. root root system_u:object_r:bin_t:s0       /etc/cron.daily/0yum-daily.cron
-rw-r--r--. root root unconfined_u:object_r:etc_t:s0   /etc/yum/yum-cron.conf