SUSE offers a continuous stream of software security updates for your product. By default, the update applet is used to keep your system up-to-date. Refer to Section 9.4, “Keeping the System Up-to-date” for further information on the update applet. This chapter covers the alternative tool for updating software packages: YaST Online Update.
The current patches for openSUSE® Leap are available from an update software repository, which is automatically configured during the installation. If you have registered your product during the installation, an update repository is already configured. If you have not registered openSUSE Leap, you can do so by starting the in YaST. Alternatively, you can manually add an update repository from a source you trust. To add or remove repositories, start the Repository Manager with › in YaST. Learn more about the Repository Manager in Section 9.3, “Managing Software Repositories and Services”.
If you are not able to access the update catalog, this might be because of an expired subscription. Normally, openSUSE Leap comes with a one-year or three-year subscription, during which you have access to the update catalog. This access will be denied after the subscription ends.
In case of an access denial to the update catalog you will see a warning message with a recommendation to visit the SUSE Customer Center and check your subscription. The SUSE Customer Center is available at https://scc.suse.com//.
SUSE provides updates with different relevance levels:
Fix severe security hazards and should always be installed.
Fix issues that could compromise your computer.
Fix non-security relevant issues or provide enhancements.
To open the YaST yast2 online_update
.
The
window consists of four sections.
The openSUSE Leap. The patches are sorted by security relevance:
security
, recommended
, and
optional
. You can change the view of the
section by selecting one of the following options
from :
Non-installed patches that apply to packages installed on your system.
Patches that either apply to packages not installed on your system, or patches that have requirements which have already have been fulfilled (because the relevant packages have already been updated from another source).
All patches available for openSUSE Leap.
Each list entry in the Shift–F1. Actions required by Security
and
Recommended
patches are automatically preset. These
actions are ,
and .
If you install an up-to-date package from a repository other than the update repository, the requirements of a patch for this package may be fulfilled with this installation. In this case a check mark is displayed in front of the patch summary. The patch will be visible in the list until you mark it for installation. This will in fact not install the patch (because the package already is up-to-date), but mark the patch as having been installed.
Select an entry in the
section to view a short at the bottom left corner of the dialog. The upper right section lists the packages included in the selected patch (a patch can consist of several packages). Click an entry in the upper right section to view details about the respective package that is included in the patch.The YaST Online Update dialog allows you to either install all available patches at once or to manually select the patches that you want to apply to your system. You may also revert patches that have been applied to the system.
By default, all new patches (except optional
ones) that
are currently available for your system are already marked for installation.
They will be applied automatically once you click
or .
If one or multiple patches require a system reboot, you will be notified
about this before the patch installation starts. You can then either decide
to continue with the installation of the selected patches, skip the
installation of all patches that need rebooting and install the rest, or go
back to the manual patch selection.
Start YaST and select
› .
To automatically apply all new patches (except optional
ones) that are currently available for your system, proceed with
or to start the
installation of the preselected patches.
First modify the selection of patches that you want to apply:
Use the respective filters and views that the interface provides. For details, refer to Section 11.1, “The Online Update Dialog”.
Select or deselect patches according to your needs and wishes by right-clicking the patch and choosing the respective action from the context menu.
Do not deselect any security
-related patches without
a very good reason. These patches fix severe security hazards and
prevent your system from being exploited.
Most patches include updates for several packages. If you want to change actions for single packages, right-click a package in the package view and choose an action.
To confirm your selection and apply the selected patches, proceed with
or .After the installation is complete, click
to leave the YaST . Your system is now up-to-date.
YaST also offers the possibility to set up an automatic update with daily,
weekly or monthly schedule. To use the respective module, you need to
install the
yast2-online-update-configuration
package first.
By default, updates are downloaded as delta RPMs. Since rebuilding RPM packages from delta RPMs is a memory- and processor-consuming task, certain setups or hardware configurations might require you to disable the use of delta RPMs for the sake of performance.
Some patches, such as kernel updates or packages requiring license agreements, require user interaction, which would cause the automatic update procedure to stop. You can configure to skip patches that require user interaction.
After installation, start YaST and select
› .
Alternatively, start the module with
yast2 online_update_configuration
from the command
line.
Activate
.Choose the update interval:
, , or .To automatically accept any license agreements, activate
.Select if you want to
in case you want the update procedure to proceed fully automatically.If you select to skip any packages that require interaction, run a manual
occasionally to install those patches, too. Otherwise you might miss important patches.To automatically install all packages recommended by updated packages, activate
.To disable the use of delta RPMs (for performance reasons), deactivate
.To filter the patches by category (such as security or recommended), activate
and add the appropriate patch categories from the list. Only patches of the selected categories will be installed. Others will be skipped.Confirm your configuration with
.The automatic online update does not automatically restart the system afterward. If there are package updates that require a system reboot, you need to do this manually.