Ubuntu 12.04 Server requires reboot after update

[LHammonds]

I have a script that tells me what packages are requiring the reboot. The custom script is called "check_apt_motd.sh" (which requires Nagios Plugins to be installed)

Example output:

Reboot required to apply linux-image-3.5.0-30-generic linux-base

The script and how to install the Nagios Plugins for a remote server can be found in the Nagios link in my sig below.

The above is what I see on my Nagios Monitoring web page as well as when I run it manually (rarely ever do). If you install it, you could modify your login profile to run it so you see the output everytime you login to that server instead of just the basic message.

LHammonds

[fernandoch]

Thank you I saw that this cat gives the details

root@ks83747920:~# cat /var/run/reboot-required.pkgs
libssl1.0.0

[LHammonds]

Yes, that is the core of what the script makes use of. Here is a partial snippet of the code that looks at it:

PKGS=$(echo $APTRES | cut -f1 -d';')
SEC=$(echo $APTRES | cut -f2 -d';')

if [ -f /var/run/reboot-required ]; then
        REBOOT=1
        TOAPPLY=`cat /var/run/reboot-required.pkgs`
else
        REBOOT=0
fi

if [ "${PKGS}" -eq 0 ]; then
        if [ "${REBOOT}" -eq 1 ]; then
                RET=$STATE_WARNING
                RESULT="Reboot required to apply ${TOAPPLY}"
        else
                RET=$STATE_OK
                RESULT="No packages to be updated"
        fi
elif [ "${SEC}" -eq 0 ]; then
        RET=$STATE_WARNING
        RESULT="${PKGS} packages to update (no security updates)"
else
        RET=$STATE_CRITICAL
        RESULT="${PKGS} packages (including ${SEC} security) packages to update"
fi

echo $RESULT

EDIT:

libssl1.0.0 is one of those patches that would not have been automatically applied in my apt upgrade script since it is not listed as a security patch. You only get that one if you type something like aptitude safe-upgrade

[fernandoch]

Well what I did was only apt-get upgrade and that package got upgraded... I did not use aptitude safe-upgrade

[LHammonds]

I think "upgrade" and "safe-upgrade" may be the same. I do know that "full-upgrade" and "dist-upgrade" are the same. The core of my script calls the command with specific parameters so that it only applies security patches.

Example:

aptitude safe-upgrade --assume-yes --target-release `lsb_release -cs`-security

[sandyd]

Only free for Ubuntu Desktop (and Fedora), which is why I don't use it.

Not really.
See http://www.ksplice.com/uptrack/manual-installation#

[fernandoch]

Yes, but you might have to get a license for a server...

[CharlesA]

Not really.
See http://www.ksplice.com/uptrack/manual-installation#

Hmmm... It says say this:

echo 'uptrack uptrack/accesskey string INSERT_ACCESS_KEY' | debconf-set-selections

I wonder how they tell the difference between server and desktop.

[fernandoch]

This is what I was wondering too...

[sandyd]

They dont
Just get the access key, put it in, and it works for both desktop and server.