Re: [atomic] Best practice for updating Atomic

[Giovanni Tirloni <gpt gtirloni com>]

On Tue, May 31, 2016 at 1:05 PM, Josh berkus <josh agliodbs com> wrote:
> On 05/30/2016 07:52 PM, Giovanni Tirloni wrote:
>> I'm getting started on Atomic and it looks really fascinating.
>>
>> I performed an installation of CentOS Atomic 7 (from 2016-04-04) but
>> `rpm-ostree upgrade` couldn't find any updates.
>
> Hmmm, when did you last run it?  We should have had a CentOS update
> recently.

# date
Tue May 31 16:19:23 UTC 2016

# cat /etc/redhat-release
CentOS Linux release 7.2.1511 (Core)

# rpm-ostree upgrade
Updating from: centos-atomic-host:centos-atomic-host/7/x86_64/standard
1 metadata, 0 content objects fetched; 313 B transferred in 0 seconds
No upgrade available.

# atomic host upgrade
Updating from: centos-atomic-host:centos-atomic-host/7/x86_64/standard
1 metadata, 0 content objects fetched; 313 B transferred in 0 seconds
No upgrade available.

# rpm-ostree status
  TIMESTAMP (UTC)         VERSION        ID             OSNAME
        REFSPEC
* 2016-04-04 21:25:34     7.20160404     e39c28570a
centos-atomic-host
centos-atomic-host:centos-atomic-host/7/x86_64/standard

GPG: Found 1 signature on the booted deployment (*):

  Signature made Mon 04 Apr 2016 09:33:10 PM UTC using RSA key ID
F17E745691BA8335
  Good signature from "CentOS Atomic SIG <security centos org>"

# cat /ostree/repo/config
[core]
repo_version=1
mode=bare

# rpm -q openssl
openssl-1.0.1e-51.el7_2.4.x86_64

I understand the latest one should be openssl-1.0.1e-51.el7_2.5.x86_64
(https://lists.centos.org/pipermail/centos-announce/2016-May/021860.html).

I'm trying to understanding if rpm-ostree is the only way to get these
updates or if there another option. Building our own updates here
doesn't look too complicated but I wouldn't like to reinvent the wheel
/ duplicate work.

If you need any other information and/or have pointers to some docs I
should read, that'd be much appreciated.

Thanks in advance,

Giovanni