The software described in this documentation is either no longer supported or is in extended support.
Oracle recommends that you upgrade to a current supported release.
After you have used Spacewalk and kickstart to provision client systems, you must maintain these systems. For example, whenever new security errata are released, you can apply updates to protect systems, applications, and data. Spacewalk is particularly useful in this respect. When client systems register with a Spacewalk server and subscribe to software channels, Spacewalk makes the latest software packages available to the clients whenever the channels are updated.
There are countless ways to configure Spacewalk channels and maintain client systems, and almost every organization and system administrator have their own approach. When configuring a Spacewalk environment, it is helpful to plan how updates should occur. Should Spacewalk update systems automatically with the latest errata as soon as patches are released or is explicit manual control required over which errata are applied to which systems?
Spacewalk is extremely flexible and you can configure channels to meet the requirements of a variety of deployment scenarios. Oracle consultants can help your organization analyze its operational requirements and design an optimal Spacewalk configuration that meets your system security and maintenance policies.
The following are a few suggestions for configuring channels:
Create base and patch channels for each release from ULN.
A common strategy for channel creation is to create a base and patch channel for each Oracle Linux release and update level and then regularly synchronizing these channels with ULN. Periodically synchronize the patch channel to pull in the most recent errata. Spacewalk offers effective mechanisms, using the web interface and the command line, to view and manage errata, including cloning errata for channels, if required.
Create an Oracle Linux Ksplice channel.
You can configure a Spacewalk server to mirror the Oracle Linux Ksplice channels on ULN, downloading the latest Ksplice update packages to a software channel. Using the Ksplice Offline Client software, Spacewalk clients can install kernel updates from the Spacewalk server without needing to reboot and incurring downtime.
Maintain the latest channels for applying errata to systems locked to earlier updates.
Some organizations have application requirements or policies that require some systems to remain at a particular update level of an Oracle Linux release. For example, perhaps certain production machines must remain locked to Oracle Linux 6 Update 6. Oracle releases new errata and patches for the latest release, such as Oracle Linux 6 Update 7. If upgrading to the latest update is not feasible for these systems, Oracle strongly recommends that you apply the latest security errata to avoid compromising the security of these systems.
One strategy is to maintain latest channels, containing the latest errata, separately, usually without any client systems subscribed to these channels. You can then copy the errata and dependent packages from these latest channel to other channels such as release and update-specific patch channels if you need to make the latest fixes available.