Patch using modular Fixlets

This topic describes how to deploy modular Fixlets on Rocky Linux Endpoints.

  1. Modular streams must be enabled on client before deploying the modular Fixlets.
  2. Modular stream can be enabled on the endpoint using Fixlet for
    1. RockyLinux 8: 501 dnf module commands execution on endpoint - RockyLinux 8 - x86_64
    2. RockyLinux 9: 501 dnf module commands execution on endpoint - RockyLinux 9 - x86_64
  3. Modular stream can also be enabled on the endpoint by manually running dnf module commands (reset, enable) on the endpoint (this commands will run successfully only when the client is registered with the subscription manager).
  4. If the modular Fixlets are applicable, you can deploy modular Fixlets on the endpoint.
  5. Example

    Perform the following steps to deploy the modular Fixlet "RLSA-2025:8419 - Python36:3.6 Security Update - RockyLinux 8 x86_64":

    1. The Fixlet "RLSA-2025:8419 - Python36:3.6 Security Update - RockyLinux 8 x86_64" is not applicable because python36 version of 3.6 is not enabled on the endpoint as shown in the following figures:
      Figure 1. Python36 Fixlet

      Python36 Fixlet
      Figure 2. Python 3.6 (disabled)

      Python 3.6 (disabled)
    2. To enable python modular stream version of 3.6, you must deploy the Fixlet "501 dnf module commands execution on endpoint - RockyLinux 8 - x86_64" as shown in the following figures:
      Figure 3. Enable python36 module with stream 3.6

      Enable python36 module with stream 3.6
    3. The Modular Fixlet "RLSA-2025:8419 - Python36:3.6 Security Update - RockyLinux 8 x86_64" become relevant on the client after python36 3.6 has been enabled, as shown in the following figure:
      Figure 4. Relevant Fixlet


    4. Now, modular Fixlet "RLSA-2025:8419 - Python36:3.6 Security Update - RockyLinux 8 x86_64" is applicable and can be deployed on the client.
      Note: An errata for a specific module stream is used to patch only the specific stream and not to be used as an update for other module streams. Follow this general practice for all the modular streams. For example, an endpoint is usually configured to one module stream, such as nodejs:10 and the packages from the same stream should be applied as an update. For some reason, however, if you want to switch the module stream that is installed on an endpoint from nodejs:10 to nodejs:12 then you must remove all the nodejs:10 packages or dependencies manually and update the endpoint with nodejs:12 packages. This scenario cannot be covered through BigFix.
      Note: Modular Fixlets are available for Rocky Linux 8 and Rocky Linux 9.