I have just purcased a couple of new raq 4i's....What patches do I need?

Have a look at the Sun Cobalt downloads site, then go to Package Master.
There are quite a few threads here about security etc., so I'd read them.
Remember to get SSH and switch off telnet.

I assume that I need to install all of them? OS Update Release 1.0 looks to be the last installed by Sun on my new servers...

Just be careful... I have heard stories of patches with bugs in them that screwed up a few things during the inititial release and then were patched by Sun.
I guess the basic rule of thumb is if a lot of other people have it installed it can't be that bad.
I would urge you to read the threads on RAQ security and follow the advice carefully. Unless you can afford to pay for a physical firewall you will need to lock your box down.

I think patches must also be done in order - ie if you want to load "patch 3" you have to have loaded "patch 2".

I had problems with the Kernel Update 2.0.1 (RaQ4-All-Kernel-2.0.1-2.2.16C32III.pkg). It installed fine and seemed working well, but after five days the raq started losing network connectivity randomly. At first I thought it was an hardware problem but after checking I discovered that the problem was caused by the new kernel. I then downgraded to the previous kernel (RaQ4-All-Kernel-1.0.1.216C28III.pkg) and the raq started working again normally.
Other people have experienced severe problems with the glibc Update 2.0.1 (RaQ4-All-Security-2.0.1-13453.pkg).

No problems here thanks to Pronic Solutions - all upgraded, ready-to-go and working fine.

Originally posted by grandad
I think patches must also be done in order - ie if you want to load "patch 3" you have to have loaded "patch 2". Very true. A lot of them are dependent on other ones. The package master site is usually quite clear about these things

Rule of thumb when installing patches, do it from the machine.

SSH2 into the machine.

Goto

/home/sites/home/web (or whatever, you can create a directory called updates, like I have)

issue the command

wget http://(copy short cut from the update site)

The gets the file on your local server.

Then when you install a update use the URL method
http://yourachine.com/file name.pkg

Why do I suggest this?

Well this will limit time out errors, esp when the update is very large, like 25+ meg. Most failures happen when the download times out.

Just a word of wise.


Hey blacknight, how you doing bud? Long time to chat :D

Thanks Guys......

Everything seemed to go well at this stage

Damien

Actually, after you wget the files to your server, why not go ahead and install them from the command line?

as root:

cd /home/packages

wget filename.pkg

/usr/local/sbin/cobalt_upgrade filename.pkg

Brandon

pkgmaster.com is a good start