Currently, I update my system daily with dnf offline-upgrade --security
. It is a kind of hassle.
If it’s possible to use pkcon
to sort only security
update. Then I could use it with a systemd service to automatically do security patches with Offline updates.
Is it possible to sort so ?
I haven’t seen anything regarding it in pkcon --help
What distribution are you using - guessing Fedora based on dnf
? If so, please consider the perspective provided by Gordon Messmer (a Fedora maintainer) about using the --security
flag here:
https://www.reddit.com/r/Fedora/comments/10h6wsr/counterpoint_dnf_update_security_has_significant/
I don’t know that this is something KDE Discover (the tag for this post) would be handling anyway, as it relies on upstream projects like PackageKit to handle actually fetching and executing update info.
Well, I don’t want to update everything every hour and restart my system. Hence, why, I prioritize security updates at first and others on weekend.
The reason for using pkcon
is I can’t create a proper trigger file for offline-upgrade
at will, but it seems to be possible on pkcon
which is why I am trying to sort out security only updates.
In general, perhaps you could somehow get the list of packages you want to install from dnf and then pipe that into a list for pkcon, since it looks like pkcon would accept a list of specific packages? That’s beyond my text-parsing knowledge but could be a way to investigate.
Still, I need to filter out CVEs. With dnf update --security
it’s in-place upgrade for packages not offline update.