How to install _only_ security updates with apt-get?

Lotharster · 05-09-2006, 04:37 PM

Is there a way to install debian security updates with apt-get without installing upgrades that are not security-related?

I'm using debian sarge.

JimBass · 05-09-2006, 08:22 PM

There may be a simpler way, but the way I would do it would be to comment out the standard lines, and just leave the security ones. For example, turn this:

Code:

#deb file:///cdrom/ sarge main

deb http://ftp.debian.org/debian/ stable main
deb-src http://ftp.debian.org/debian/ stable main

deb http://security.debian.org/ stable/updates main

Into this:

Code:

#deb file:///cdrom/ sarge main

#deb http://ftp.debian.org/debian/ stable main
#deb-src http://ftp.debian.org/debian/ stable main

deb http://security.debian.org/ stable/updates main

After you change the file /etc/apt/sources.lst, you would just do apt-get update followed by apt-get upgrade.

Why you would want to do this is beyond me though. If the box won't be connected to the net, you should still do the full set of updates when it is built.

Also, if this is a desktop machine, don't use debian sarge. Go at least for testing, or unstable. Sarge is intended for servers, and has very few of the newest software.

Peace,
JimBass

demian · 05-09-2006, 08:32 PM

Unless you have inofficial repositories in your sources.list all updates to sarge are security related.

Lotharster · 05-10-2006, 07:52 AM

Quote:

Originally Posted by demian

Unless you have inofficial repositories in your sources.list all updates to sarge are security related.

OK, in that case I will just uncomment the unofficial sources.

Thanks,

Lotharster

philippeP · 05-10-2006, 11:21 AM

Quote:

Originally Posted by Lotharster

OK, in that case I will just uncomment the unofficial sources.

What are you trying to do exactly? Supposing this "unofficial source" doesn't have a specific repository for security updates, then by commenting it out, I would guess you may be missing out on their security updates.

Not quite 100% sure about my comment, but I don't see where you would get these updates from otherwise?!