Re: [IPCop-user] Applying patches the correct way?

[Wayland S. <wa...@so...>]

----- Original Message ----- 
From: "Rainer Zocholl" <Use...@zo...>
To: <ipc...@li...>
Sent: Monday, December 29, 2003 4:24 PM
Subject: Re: [IPCop-user] Applying patches the correct way?


> wa...@so...(Wayland Sothcott)  29.12.03 14:05
>
> Once upon a time "Wayland Sothcott " shaped the electrons to say...
>
> >Hello,
>
> >When building IP-Cop boxes we have to apply a whole load of patches
> >which is time consuming. Some patches require a Reboot and others do
> >not. Is it acceptable to apply ALL patches and then do a reboot, or do
> >you have to reboot after each patch which requires it?
>
> >Also you have to get online before you can update the patch list.
>
> More convient without the large overhead of an entire
> build system would be:
>
> You only need to mount the "old" iso on "loop",
> Copy it on disk, add the patch file as files,
> have boot file/catalog and do
> mkisofs to have an iso which contains the patch files
> (but is still unpatched!)
> After installing, you have a shell and can mount the
> CD(if it isn't already) and apply the patches.
>
> (sounds more complicate than it is)
>
>
>
>
> To make a new virus scanner image i use a script idea like this
> (Please edit! It will *not* work as it is!)
>
> ----------------------
>
> #! //bin/sh
> # updates a KNOPPICILLIN Image with new signatures
>
> # edit here your paths and image names
> ISONAME=knoppicillin
> ISOBOOTROOT=KNOPPIX
> ISOROOT=CDROM
>
> # below you may need to edit more.
> # this is only an "idea" of a script!
>
>
> # Copy the CD old image file-by-file to $ISOROOT
> # required only once
> # mount -o loop=/dev/loop0 $ISONAME.iso /iso
> # cp -pr /iso $ISOROOT
> # umount /iso
>
>
> # get new patches
> wget -m $WGETPARM URLtopatches1 URLtopatche2 URLtopatche3 etc...
>
>
> # cleanup
> #
> # attention:
> # check variable $ISOROOT is not empty
> # if uncommenting the rm
> # the explicit named subdir "tools" should
> # avoid the unwanted side effect of a "rm _rf //"
> #
> #rm -rf $ISOROOT/$ISOBOOTROOT/tools
>
> mkdir -p $ISOROOT/$ISOBOOTROOT/tools/bin
>
> # make a backup of this script ;-)
> cp -p $0 $ISOROOT$ISOBOOTROOT/tools/bin
>
> # copy further files
> cp -p patches* $ISOROOT/$ISOBOOTROOT/tools
>
> mkisofs -J -R -hide-rr-moved -pad -b $ISOBOOTROOT/boot.img -c
$ISOBOOTROOT/boot.cat -o $ISONAME.iso $ISOROOT/
>
> -----------------------------------------------------------------
>
> I did not test it for IPcop. (And can't currently, sorry)
> but a similar script (this is a strip down) works good to make
> a new KNOPPICILLIN CD.
>
> The mkisofs parameters might need changes for IPcop.
>
>
> Now you have your "own" iso.
> under /mnt/cdrom/$ISOBOOTROOT/tools you will find your patches
> after mount it.
>
> To test if all went well without burning a CD:
> umount -f /mnt/cdrom
> mount -o loop=/dev/loop0 $ISOBOOTROOT/$ISONAME.iso /mnt/cdrom
>
> The only tools you need are wget and mkisofs and a kernel
> which supports /dev/loop
>
>
>

If I had known it was that easy I would have don't it already ;-)
I need to concentrate hard to get something like that done.


Thanks anyway,
Wayland.