Instructions
Fill out this sheet as you progress through the lab and discussions. Hold your worksheets until the end to turn them in as a final submission packet.
Resources / Important Links
- https://public.cyber.mil/stigs/downloads/
- https://httpd.apache.org/
- https://docs.rockylinux.org/books/admin_guide/13-softwares/
- https://sig-core.rocky.page/documentation/patching/patching/
- https://wiki.rockylinux.org/rocky/repo/
- https://www.sans.org/information-security-policy/
- https://www.redhat.com/en/blog/whats-epel-and-how-do-i-use-it/
Downloads
The worksheet has been provided below. The document(s) can be transposed to
the desired format so long as the content is preserved. For example, the .txt
could be transposed to a .md
file.
Unit 5 Recording
Discussion Post #1
Review the rocky documentation on Software management in Linux.
- What do you already understand about the process?
- What new things did you learn or pick up?
- What are the DNF plugins? What is the use of the versionlock plugin?
- What is an EPEL? Why do you need to consider this when using one?
Discussion Post #2
Do a google search for "patching enterprise Linux" and try to wade through all of the noise.
- What blogs (or AI) do you find that enumerates a list of steps or checklists to consider?
- After looking at that, how does patching a fleet of systems in the enterprise differ from pushing "update now" on your local desktop? What seems to be the major considerations? What seems to be the major roadblocks?
The discussion posts are done in Discord threads. Click the 'Threads' icon on the top right and search for the discussion post.
Definitions
Patching
Repos
Software
EPEL
BaseOS v. Appstream (in RHEL/Rocky)
Other types you can find?
- httpd
- patching
- GPG Key
- DNF/YUM
Digging Deeper
- After completing the lab and worksheet, draw out how you would deploy a software repository into your system. How are you going to update it? What tools do you find that are useful in this space?
Reflection Questions
-
Why is it that repos are controlled by root/admin functions and not any user, developer, or manager?
-
What questions do you still have about this week?
-
How are you going to use what you've learned in your current role?