Understanding Oracle Linux Package Management
Autonomous Linux provides tools to manage packages and modules on Oracle Linux instances and groups, including scheduling updates, installing or removing packages, and editing modules.
Packages are provided to Oracle Linux instances using OS Management Hub software sources. See Understanding Software Sources.
Update Types Available for Oracle Linux
For Oracle Linux instances, Autonomous Linux applies updates based on specific categories.
| Autonomous Linux Category | Description |
|---|---|
| Security |
An update that addresses security vulnerabilities found during development, testing, or reported by users. Security fixes usually have one or more associated CVE (Common Vulnerabilities and Exposure) names to identify the vulnerabilities. |
| Ksplice |
An update used by Ksplice for installing zero-downtime security patches. The update job can include only Ksplice kernel updates, only Ksplice userspace updates, or both. See Using Ksplice for Oracle Linux for how to configure an instance to receive Ksplice updates. |
| Bug Fix | An update that fixes issues reported by users or discovered during development or testing. |
| Enhancement | An update that introduces new features, improved functionality, or enhanced performance in the package's software. |
| Other | An update that's not associated with any errata. |
Package List Format
When providing a package list within the Console, you must use a valid package name format.
Valid formats are:
- Package name (N)
- Name, version, release, architecture (NVRA)
- Name, epoch, version, release, architecture (NEVRA)
| Format Type | Format | Examples |
|---|---|---|
| N (package name) | name |
|
| NVRA (name, version, release, architecture) | name-version-release.arch |
|
| NEVRA (name, epoch, version, release, architecture) | name-epoch:version-release.arch |
|
The list can contain a combination of any of the formats. For example, a valid list would be:
python2
libselinux-2.8-6.el8.x86_64
NetworkManager-adsl-1:1.30.0-13.0.1.el8_4.x86_64Generating a package list from an existing instance
You can run rpm -qa on a reference instance to collect a package list. For example, the format of the packages is:
pam-1.3.1-27.el8.x86_64
openssl-libs-1.1.1k-12.el8_9.x86_64
libreport-filesystem-2.9.5-15.0.4.el8.x86_64Downloading a package list from an existing software source
You can download the package list from an existing software source and modify it as needed. See Downloading a Package List from a Software Source.
Using Ksplice for Oracle Linux
For Autonomous Linux instances, Ksplice is preconfigured. The Ksplice software sources are automatically attached and the Ksplice client is automatically installed by default. No additional configuration is required.
For general information about Ksplice in Oracle Linux, see Oracle Linux Ksplice User's Guide.
Verifying Ksplice Updates
Use the following methods to verify Ksplice updates are being applied.
Check the effective kernel
View the instance details and verify the effective kernel value has been updated. A blank value (-) indicates that no Ksplice kernel updates have been applied.
Check change history
View the change history report for the instance. Look for entries with a summary of "Update ksplice kernel" or "Update ksplice userspace". Select the entry's date to view job details.
If you don't see Ksplice entries in the change history, the update job might have failed. See Listing Jobs Associated with an Instance and examine the error messages in any failed jobs.
Understanding Modules for Oracle Linux
Oracle Linux 8 releases provide modules, module streams, and profiles to enable the management of different versions of software within a single OS release.
- Modules
-
Modules are a set of RPM packages that are grouped together and must be installed together. They can contain several streams that consist of multiple versions of applications that you can install. You enable a module stream to provide system access to the RPM packages that are contained in that module stream.
- Module Streams
- Module streams hold different versions of content contained within a module. Modules can have multiple streams, where each stream contains a different version of packages and their dependencies. Each stream receives updates independently.
- Profiles
- Profiles provide a list of certain packages that are installed at the same time for a particular use case. Profiles are also a recommendation by the application packagers and experts. Each module stream can have one or more profiles.
For more information about DNF modules, streams, and profiles, see Use DNF Modules and Application Streams in the Oracle Linux documentation.
For important guidelines, caveats, and warnings when performing package operations on modules and streams, see About Modular Dependencies and Stream Changes in the Oracle Linux documentation.
Module Status
The module stream can be in one of the following states:
- Enabled: Stream can provide packages to the instance.
- - (hyphen): Stream isn't enabled but can provide packages to the instance to satisfy package dependencies.
- Disabled: Stream can't provide packages to the instance until enabled.
Package Management Tasks
Use the following tasks to manage packages for Oracle Linux instances and groups.
Instances
- Package Management
- Module Management
-
- Editing a Module on an Instance
- Viewing Modules, Streams, and Profiles on an Instance
- Enabling a Module Stream on an Instance
- Installing Module Stream Profiles on an Instance
- Switching to Another Module Stream on an Instance
- Removing Module Stream Profiles from an Instance
- Disabling a Module Stream on an Instance
- Software Source Management
Groups
- Group Content Management
-
- Viewing the Group Manifest
- Updating Instances in a Group
- Attaching Software Sources to a Group
- Detaching Software Sources from a Group
- Adding Packages to a Group
- Removing Packages from a Group
- Adding a Module to a Group
- Editing a Module for a Group
- Removing a Module from a Group
- Editing the Autonomous Updates Job for a Group