1. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Michal Prochazka, (Daniel Kouril)

2. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Overview Patch monitoring http://pakiti.sourceforge.net/ Gathers list of packages and evaluates them against available updates security updates and/or OVAL Enables additional features searching based on particular vulnerability id (CVE) Simple clients can be launched via cron, monitoring framework,...

3. www.egi.eu EGI-InSPIRE RI-261323 09/15/10 3 Pakiti Architecture Pakiti server PHP + MySQL application PHP scripts + PHP Web GUI Pakiti client Bash script Runs under ordinary user privileges Automatically detects curl or openssl transport Uses rpm and dpkg-query to query list of packages

4. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Server Installation Requirements Apache, MySQL, PHP 5.x Default installation location /var/lib/pakiti2 Installation scripts and configuration files /usr/share/doc/pakiti-server-*/pakiti2.sql (MySQL) /usr/share/doc/pakiti-server-*/pakiti2.apache2 (Apache) Configuration files Top level config: /etc/pakiti2/pakiti2-server.conf Config file: /var/lib/pakiti2/config/config.php

5. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Server Installation 1. Install RPM 2. Create DB in MySQL, Import pakiti2.sql 3. Setup site in Apache (pakiti2.apache2) 4. Edit top level config 5. Customize Pakiti by editing config.php 6. Let clients report to the server 7. Setup OVAL and Repositories in web GUI (Settings link)

6. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Server Configuration Top level config pakiti2-server.conf Setup DB connection Config.php You can leave default options Cron jobs OVAL and Repository update scripts are run regularly from /var/lib/pakiti2/scripts/

7. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Server Configuration

8. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Server Configuration All reported Oses have to be assigned to an Os group, afterwards the Os group can be assigned to a repository.

9. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Server Configuration Each repository is defined for particular architecture and purpose (security, main,...)

10. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Client Separate RPM package Default locations: /usr/bin/pakiti2-client, /etc/pakiti2/pakiti2- client.conf If pakiti2-client.conf doesn't exist default values are given in pakiti2-client Cron job is installed, pakiti2-client is run every day (at random time given during installation)

11. www.egi.eu EGI-InSPIRE RI-261323 Pakiti Client Configuration Required options servers_name, server_url, tag Optional configuration options host_cert – certificate + private key of the host connection_method – autodetect, curl, openssl, stdout openssl_path, curl_path – if not in PATH report – should the client print the results Interface – interface to use if the hosts has more interfaces clients are indentified based on source IP