{"id":19838,"date":"2024-12-10T14:09:58","date_gmt":"2024-12-10T13:09:58","guid":{"rendered":"https:\/\/orcharhino.com\/errata-for-debian-based-systems-in-orcharhino\/"},"modified":"2026-03-05T14:41:28","modified_gmt":"2026-03-05T13:41:28","slug":"errata-for-debian-based-systems-in-orcharhino","status":"publish","type":"post","link":"https:\/\/orcharhino.com\/en\/resources\/blog\/errata-for-debian-based-systems-in-orcharhino\/","title":{"rendered":"Errata for debian-based systems in orcharhino"},"content":{"rendered":"\n

Errata for debian-based systems in orcharhino<\/h2>\n\n\n\n

English Version<\/h3>\n\n\n\n

Release 4.0.0 of orcharhino <\/a>not only brought a completely revised interface, but also another eagerly awaited feature: Errata management for Debian and Ubuntu hosts.
<\/p>\n\n\n\n

This marks a new milestone in the development of orcharhino. For over a year now, we have been working continuously on expanding Debian\/Ubuntu support. You can find a short overview here<\/a>. <\/p>\n\n\n\n


The perfect day for the presentation of the newly integrated Errata support for Debian-based systems was of course the Open Source Automation Day<\/a> last October.<\/p>\n\n\n\n

\n
<\/div>\n\n\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"img_whitepaper_digital_sovereignty\"\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Who controls your IT – you or your dependencies?<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

Read the free white paper to find out how to identify critical dependencies, make your infrastructure resilient and regain full control over operations, updates and automation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t

Download whitepaper now<\/strong><\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n\n\n\n

<\/div>\n<\/div>\n\n\n\n

Excursus:<\/strong><\/em><\/p>\n\n\n\n

Errata are, so to speak, package inserts that offer a solution to a known problem. The aim of an errata is to provide the admin with information on which packages need to be updated in order to eliminate a (security) problem. <\/em>
<\/p>\n\n\n\n

In the Debian world, the concept of errata is not very common. The common approach here is the regular automatic installation of all updates from “debian-security” (or ubuntu-security). However, this approach is dubious, especially for servers in a business-critical environment. You should think very carefully about whether you really want to automatically install or update packages such as “nginx” or “openssl” on all productive web servers of a web application overnight. <\/em>
<\/p>\n\n\n\n

Since the release of orcharhino 4.0.0, the admin now has full control over the Debian \/ Ubuntu systems managed by orcharhino. They can now decide which servers should receive which security updates and when. Errata support for Debian \/ Ubuntu systems enables us to provide significant support to every admin via a standardized interface.
<\/p>\n\n\n\n

The configuration of the Debian\/Ununtu errata feature is very simple: Debian\/Ubuntu security updates are provided via the “debian-security” (or “ubuntu-securtiy”) repository. The errata is now added to this repository by setting the “Errata-URL: https:\/\/dep.atix.de\/dep\/api\/v1\/debian”. This URL is used to prepare the errata information for Debian or Ubuntu and make it available in a machine-readable format for orcharhino. On the overview page of the repositories available in a product, the number of errata in a repository is now displayed <\/p>\n\n\n\n\n\n

<\/div>\n\n\n\n
\n
\n
\"\"<\/figure>\n<\/div>\n<\/div>\n\n\n\n

Preview: Application Centric Deployment (ACD)<\/strong><\/p>\n

Not part of the orcharhino<\/span> 5.5 release itself, but we spent a lot of time working on another way to deploy whole applications: application centric deployment (ACD). Currently, orcharhino<\/span> is host centric, i.e. you deploy a host and then configure the host using  Ansible<\/a>, Puppet<\/a>, or Salt<\/a>. With ACD, we go one step further and leave the host-centric approach behind.

Modern applications are usually distributed on several servers. Take a web application, for example: it requires a database, a web server, an application server like JBOSS, and a web proxy that distributes the requests to the web servers. Until now, four hosts had to be individually deployed and configured with orcharhino<\/span>. With ACD, we want to look at the application in its entirety: deploying and configuring four hosts with an Ansible Playbook – so that at the end, a coherent web application is created. The configuration is done in a way that the web proxy already knows its web servers and can forward the requests; the web servers already have a connection to the application server; and the application server has already integrated the database server – everything is already coordinated.

While we were working on 5.5, we also laid the foundation of ACD. Application Centric Deployment will be available to our customers with the release of orcharhino<\/span> 5.6. Until then, you can already have a look at screenshots of ACD.

<\/p>\n

We welcome your feedback regarding potential use cases you envision in your organization<\/p>\n\n\n\n

<\/div>\n\n\n\n
\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n<\/div>\n\n\n\n
<\/div>\n\n\n\n
\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n\n
\n
\"\"<\/figure>\n<\/div>\n<\/div>\n\n\n\n\n\n\n\n
<\/div>\n\n\n\n

Renaming smart proxy to orcharhino<\/span> proxy<\/strong><\/p>\n

With orcharhino<\/span> 5.5, we are renaming hosts running smart proxy functionality from smart proxy<\/s> to orcharhino<\/span> proxy<\/strong>. Both the orcharhino<\/span> as well as the orcharhino <\/span>proxy may incorporate smart proxy functionality depending on their configuration.

<\/p>\n

An orcharhino<\/span> proxy<\/a> allows you to deliver content and manage hosts in additional networks. It may be configured to either mirror synced content from your orcharhino<\/span> or pass-through content using Squid from your orcharhino <\/span>to its hosts. This is called smart proxy functionality<\/em> and includes DNS, DHCP, TFTP, and CA capabilities.

<\/p>\n

The term smart proxy<\/strong> is used throughout the management UI<\/a>. It describes the smart proxy functionality present on both your orcharhino<\/span> as well as any attached orcharhino<\/span> proxies.

<\/p>\n

Additionally, there are HTTP proxies as a way of relaying network traffic from one machine to another. They are often part of more advanced internal network architectures.

<\/p>\n

There are two general ways of using orcharhino<\/span> proxies: orcharhino<\/span> proxies running Squid to relay network traffic or running Pulp to mirror software packages. Find out more in our updated blog post orcharhino<\/span> proxies -what is it and why do I need it?<\/a> <\/p>\n\n\n\n

<\/div>\n\n\n\n\n\n

Bug Fixes<\/strong><\/p>\n