Chapter 9. Managing Software with ZENworks

Contents

9.1. Update from the Command Line with rug
9.2. Managing Packages with the ZEN Tools
9.3. For More Information

SUSE Linux Enterprise is ready for integration into an environment administrated by Novell ZENworks Linux Management. It includes an open source ZENworks management agent, back-end daemon, and user space software management tools. Novell ZENworks package management tools use a ZENworks Linux Management server to download packages and updates. If no ZENworks Linux Management server is available in your local network, your system can get updates from the Novell Customer Center, which is described in Section 3.14.4, “Novell Customer Center Configuration”.

The back-end daemon for the Novell ZENworks Linux Management Agent is the ZENworks Management Daemon (ZMD). ZMD performs software management functions. The daemon is started automatically during boot.

Check the status of the daemon with rczmd status. To start the daemon, enter rczmd start. To restart it, use rczmd restart. Deactivate it with rczmd stop.

ZMD can also be started with special options to control its behavior. To have ZMD always start with some special options permanently, set ZMD_OPTIONS in /etc/sysconfig/zmd then run SuSEconfig. The available options are:

-n, --no-daemon

Do not run the daemon in the background.

-m, --no-modules

Do not load any modules.

-s, --no-services

Do not load initial services.

-r, --no-remote

Do not start remote services.

ZMD configuration is stored in /etc/zmd/zmd.conf. You can change the configuration manually or with rug. The URL for the ZENworks service that zmd uses at initial start-up and a registration key are stored in /var/lib/zmd. Updates are downloaded to the ZMD cache in /var/cache/zmd.

ZMD is the back-end only. The software management tasks are initiated through the command line tool rug or the graphical Software Updater applet.

9.1. Update from the Command Line with rug

rug uses the zmd daemon to install, update, and remove software according to the commands given. It can either install software from local files, or from servers. You may use one or more remote servers, known as services. Supported services are mount for local files, and yum or ZENworks for servers.

rug sorts software from services into catalogs (also known as channels), which correspond to groups of similar software. For example, one catalog might contain software from an update server as well as software from a third-party software vendor. You are able to subscribe to individual catalogs in order to control the display of available packages and prevent the accidental installation of unwanted software. Operations usually are performed only on software from catalogs to which you are subscribed.

9.1.1. Obtaining Information from rug

rug provides a wide range of useful information. It allows you to check the status of zmd, view registered services and catalogs, or see information about available patches.

If the zmd is not used for a certain period of time, it can be switched to sleep mode. To check the zmd status and reactivate the daemon, use rug ping. This command wakes zmd up and logs its status information.

To see your registered services, use rug sl, and to see which services are supported on your system, use rug st.

To check for new patches, use rug pch. To get information about a patch, enter rug patch-info patch.

9.1.2. Subscribing to rug Services

By default, a newly installed system is subscribed to several services. To add a new service, use rug sa URI service_name. Replace service_name with a meaningful and unique string that identifies the new service.

[Note]Error on Accessing the Update Catalog

If you are not able to access the update catalog, this might be due to an expired subscription. Normally, SUSE Linux Enterprise comes with a one or three years subscription, during which you have access to the update catalog. This access will be denied once the subscription ends.

In case of an access denial to the update catalog you will see a warning message with a recommendation to visit the Novell Customer Center and check your subscription. The Novell Customer Center is available at http://www.novell.com/center/.

9.1.3. Installing and Removing Software with rug

To install a package from any subscribed catalogs, use rug in package_name. To install from a selected catalog only, use -c catalog name. Get more information about a package with rug if package_name.

To remove a package, use rug rm package_name. If other packages depend on this package, rug displays their names, versions, and types. Confirm if you want to remove the package anyway.

9.1.4. rug User Management

One the main advantages of rug is its user management. Normally, only root can update or install new packages. With rug, you can assign the right to update the system to other users and restrict them, for example, to only updating without the possibility to remove software. Privileges you can grant are:

install

The user may install new software

lock

The user may set package locks

remove

The user may remove software

subscribe

The user may change channel subscriptions

trusted

The user is considered as trusted, so he is able to install packages without package signatures

upgrade

The user may update software packages

view

This allows the user to see which software is installed on the machine and which software is in available channels. The option is relevant only to remote users. Local users are normally permitted to view installed and available packages.

superuser

Permits all rug commands except user management and settings, which must be done locally.

To give a user permission to update the system, use the rug ua  username upgrade command. Replace username by the name of the user. To revoke the privileges of a user, use command rug ud username. To list users with their rights, use rug ul.

To change the current privileges of a user, use rug ue username and replace the username by the name of the desired user. You get a list with the rights of the selected user. The edit command is interactive. Use plus (+) or minus (-) to add or remove the user's privileges and press Enter. For example, to permit the user to delete software, enter +remove. To save and quit, press Enter at a blank prompt.

9.1.5. Scheduling Updates

Using rug, the system can be updated automatically (for example, by scripts). The simplest example is a fully automatic update. To do this, configure a cron job as root that executes rug up -y. The up -y option downloads and installs the patches from your catalogs without confirmation.

However, you may not want the patches to be installed automatically, but may want to retrieve them and select the patches for installation at a later time. To download patches only, use the rug up -dy command. The up -dy option downloads the patches from your catalogs without confirmation and saves them to the rug cache. The default location of the rug cache is /var/cache/zmd.

9.1.6. Configuring rug

rug allows you to customize its setup via a set of preferences. Some of them are preconfigured during installation. Use rug get command to get a list of the preferences available. To edit a preference, enter rug set preference. For example, adjust settings if you need to update your system through a proxy. Before downloading the updates, send your username and password to the proxy server. To do so, use the following commands:

rug set proxy-url url_path
rug set proxy-username name
rug set proxy-password password

Replace url_path by the name of your proxy server. Replace name by your username. Replace password by your password.

9.1.7. For More Information

For more information about updating from the command line, enter rug --help or see the rug(1) man page. The --help option is also available for all rug commands. If, for example, you need help for rug update, enter rug update --help.

9.2. Managing Packages with the ZEN Tools

The ZEN tools serve as graphical front-ends for the ZENworks Management Daemon (zmd), allowing you easily to install or remove software, apply security updates, and manage services and catalogs with just a few clicks.

9.2.1. Getting Permissions

Managing packages on a Linux system requires root privileges. The ZEN tools and rug have their own user management system that allows users to install software updates. When a user first invokes an action that requires special privileges in the ZEN tools, a prompt for the root password appears. When the password has been verified, The ZEN tools automatically add the user's account to the user management system with update permissions. To review or change these settings, use the rug user management commands (see Section 9.1.4, “rug User Management” for information).

9.2.2. Obtaining and Installing Software Updates

Software Updater resides in the notification area (GNOME) or the system tray (KDE) of your panel as an icon depicting a globe. It changes color and appearance depending on the availability of a network link and new updates. Once a day, Software Updater automatically checks whether updates for your system are available (right-click the application icon and choose Refresh to force an immediate check). The Software Updater applet in the panel changes from a globe to an exclamation mark on an orange background when new updates are available.

[Note]Error on Accessing the Update Catalog

If you are not able to access the update catalog, this might be due to an expired subscription. Normally, SUSE Linux Enterprise comes with a one or three years subscription, during which you have access to the update catalog. This access will be denied once the subscription ends.

In case of an access denial to the update catalog you will see a warning message with a recommendation to visit the Novell Customer Center and check your subscription. The Novell Customer Center is available at http://www.novell.com/center/.

Left-click the panel icon to open the updater window. It displays a list of patches and new package versions available. Each entry has a short description and, if applicable, a category icon: Security patches are marked with a yellow shield. Optional patches are marked with a light blue circle. Recommended patches are not marked with an icon. Security patches are listed first, then recommended patches, optional patches, and finally new package versions. Use the links All, Packages, and Patches to filter the list of packages displayed.

[Note]Packages versus Patches

Officially released updates from Novell show up as Patches. New package versions from other sources show up as Packages.

To get details about a certain entry, mark it with the mouse and click the Details link under the list window. To select an entry for installation, mark the entry's check box. Use the links All and None to select or deselect all patches. Clicking Update installs the selected programs.

Figure 9.1. Selecting the Software Updates

Selecting the Software Updates

9.2.3. Installing Software

To install software packages, start Install Software from the menu or run zen-installer. The interface is almost identical to Software Updater (see Section 9.2.2, “Obtaining and Installing Software Updates”). The only difference is a search panel you can use to search for packages or to filter the list. Mark the check box of packages that should be installed then press Install to start the package installation. Possible dependencies on other packages are automatically resolved by the installer.

9.2.4. Remove Software

Start Remove Software from the menu or run zen-remover to uninstall software packages. The list of packages can be narrowed with the links Products (uninstalls the complete products), Patterns (see Section 8.3.1.2, “Installing and Removing Patterns” for details on patterns), Packages, and Patches. Mark the check box of a list entry that should be removed then press Remove to start the package uninstallation. If other packages depend on the ones marked by you, these are also removed. You must confirm the removal of additional packages. If you click Cancel in the confirmation dialog, no packages are uninstalled.

9.2.5. Configuring the Software Updater

To configure the ZEN tools, click Configure in the application window. A window with three tabs opens: Services, Catalogs, and Preferences.

9.2.5.1. Services and Catalogs

Services are basically sources that provide software packages and information about these packages. Each service can offer one or more catalogs.

The service tab lists all services available together with type and status information (if you cannot see the latter two, adjust the window size). Use Remove Service or Add Service to add or remove services. The following service types are available:

YUM

An HTTP, HTTPS, or FTP server using the RPM-MD format for the package data.

ZYPP

ZYPP services are the YaST installation sources added with Software+Installation Source in YaST. Use Software Updater or YaST to add installation sources. The source from which you initially installed (DVD or CD-ROM in most cases) is preconfigured. If you change or delete this source, replace it with another valid installation source (ZYPP service), because otherwise you cannot install new software.

[Note]Terminology

The terms YaST installation source, YaST package repository, and ZYPP service are the same name for a source from which you can install software.

Mount

With Mount, embed a directory mounted on your machine. This is useful, for example, in a network that regularly mirrors the Novell YUM server and exports its content to the local network. To add the directory, provide the full path to the directory in Service URI.

NU

NU stands for Novell Update. Novell provides updates for SUSE Linux Enterprise exclusively as NU services. If you configured update during installation, the official Novell NU server is already present in the list.

If you skipped the update configuration during installation, run suse_register on the command line or the YaST module Software+Product Registration as user root. The Novell Update server is automatically added to Software Updater.

RCE and ZENworks

Opencarpet, Red Carpet Enterprise, or ZENworks services are only available if your company or organization has set up these services within your internal network. This may, for example, be the case if your organization is using third-party software for which updates are deployed on a single server.

After SUSE Linux Enterprise is installed, two services are preconfigured: your installation source (DVD, CD-ROM, or network resource) as a ZYPP service and a SUSE Linux Enterprise update server as a NU service, which was added during product registration. Normally there is no need to change these settings. If you do not see a NUYUM service, open a root shell and execute the command suse_register. A service is added automatically.

9.2.5.2. Catalogs

Services are able to provide packages for different pieces of software or for different software versions (typically RCE or ZENworks services do so). These are organized in different categories called catalogs. Subscribe or unsubscribe from a catalog by marking or unmarking the check box in front of it.

At the moment, the SUSE Linux services (YUM and ZYPP) do not provide different catalogs. Each service only has one catalog. If Software Updater was configured during installation or with suse_register, it subscribes to the YUM and ZYPP catalogs automatically. If you manually add a service, you must subscribe to its catalogs.

9.2.5.3. Preferences

On the Preferences tab, specify whether Software Updater should be launched at start-up or not. As user root, you can also modify the Software Updater settings. As an unprivileged user, you can only view the settings. Refer to the rug man page for an explanation of the settings.

9.3. For More Information

Find more information about ZENworks Linux Management and ZMD at http://www.novell.com/products/zenworks/linuxmanagement/index.html.