主题： patching
-
Support Repository Updates and the Solaris 11.4 patching model: SRUs, CPUs, and checking what is installed
Solaris 11.4 patches through the same pkg update path as any other install; the entire incorporation's version reports the exact update level, Oracle ships fixes as roughly monthly Support Repository Updates with every third one also a Critical Patch Update, and Oracle's Premier/Extended/Sustaining phases set what each stage delivers.
-
Checking an operating system's support lifecycle before automating against it
Automating patch, upgrade or compliance workflows against a host that has already passed end-of-life produces false confidence: no more security fixes are coming regardless of what the automation reports. This methodology lists where each major vendor publishes lifecycle dates and how to fold an EOL check into a pre-flight step.
-
Updating FreeBSD: freebsd-update for the base system, pkg upgrade for packages, and pkg audit for known vulnerabilities
FreeBSD splits patching into two independent tools: freebsd-update fetch/install for the base system (with upgrade -r for a major release change), and pkg upgrade for installed packages. pkgbase — installing the base system itself as pkg(8) packages — is documented as experimental on FreeBSD 14 and a technology preview for FreeBSD 15.0, not yet the default path.
-
Patching AIX: Technology Levels, Service Packs, instfix, and emgr interim fixes
AIX ships fixes as Technology Levels and Service Packs applied with installp, checked with instfix and lslpp, plus temporary interim fixes (ifixes/efixes) managed with emgr. Knowing which layer you are updating, and that a Service Pack can be applied without being committed, avoids an update that cannot be rolled back cleanly.
-
Game patches: package byte locality, delivery chunks and manifests
Control update size by understanding changed package bytes, separating logical content chunks from transfer chunks, and measuring download traffic independently from installation work.
-
配置 unattended-upgrades，在 Debian 和 Ubuntu 上自动安装安全补丁
unattended-upgrades 通过定时器应用软件包更新，使用两个文件：20auto-upgrades（是否更新及频率）和 50unattended-upgrades（使用哪些来源及是否重启）。在生产环境启用之前用 --dry-run --debug 测试，可避免意外重启或只完成一半的升级。
机器可读： JSON