

If the auto-configuration process already completed, you can still obtain theįingerprint of the security certificate. Other clients can establish trust by using either the fingerprint of the CAĬertificate or the CA certificate itself. Fleet Server and Fleet-managedĮlastic Agents are automatically configured to trust the CA certificate. Any clients that connect to Elasticsearch,īeats, standalone Elastic Agents, and Logstash must validate that they trust theĬertificate that Elasticsearch uses for HTTPS.
#DEBIAN APT COMMANDS UPGRADE#
In other words (it is an invented version of the package: aptitude forbid-version php7.4=7.4.4-0ubuntu2.10Īfter blocking a package in the above ways, if you run the aptitude upgrade command and detect updates for the retained package you will see something similar to this: 30 packages upgraded, 0 newly installed, 0 to remove and 1 not upgraded.The hex-encoded SHA-256 fingerprint of thisĬertificate is also output to the terminal.

We can prevent it from upgrading like this: aptitude forbid-version PACKAGE=VERSION Imagine we have php=7.4.2 and we don’t want to upgrade to php=7.4.4 because it has a security bug (it’s made up, I haven’t checked if it’s true). This is useful, for example, to prevent an unwanted version of a package from being installed. We can also prevent a package from being upgraded to a particular version, while allowing automatic upgrades to future versions. To blacklist a package we must execute the following command: aptitude hold PACKAGEįollowing the previous examples, with the php7.4 package it would be: aptitude hold php7.4 Unlike the previous one, this method works with both installed and uninstalled packages. Using the same php7.4 package for the example: echo "php7.4 install" | dpkg -set-selections Blocking package updates with the aptitude command (method 3) To remove the lock on a package: echo "PACKAGE_NAME install" | dpkg -set-selections Or also: dpkg -set-selections | grep PACKAGE_NAME Unblocking a package Obtain package status dpkg -set-selections PACKAGE_NAME Using the same php7.4 package for the example: echo "php7.4 hold" | dpkg -set-selections We can put a package on hold as follows: echo "PACKAGE_NAME hold" | dpkg -set-selections

Is outdated, and needs to be updated through a frontend method Otherwise, you will get an error like the following: dpkg: warning: package not in status nor available database at line 1: PACKAGEĭpkg: warning: found unknown packages this might mean the available database The package must be installed to put it on standby when using the dpkg method.
#DEBIAN APT COMMANDS HOW TO#
In our case: apt-mark unhold php7.4 How to prevent the update of a package with the dpkg command (method 2) Now to print the list of blocked packages: apt-mark showhold Step 4 – Cancel withholdingĭo you want to cancel a hold you have previously placed on a package? You can do it this way: apt-mark unhold PACKAGE Php7.4 set on 3 – Display a list of waiting packages Pass the hold option to the apt-mark command as follows to mark a package as held, which will prevent the package from being installed, upgraded or removed automatically: apt-mark hold PACKAGE Run the apt command: sudo apt list -upgradable Step 2 – Force apt-get to retain the package named php7.4 using apt-mark Or also: sudo apt-get update & sudo apt-get upgrade Normally we run the following two commands to update all packages: sudo apt update & sudo apt upgrade
