Automated package updates

[ludo69]

Hello,

I'm using WAPT Enterprise on Windows version 2.6.0.17392.

How can I automatically update packages from the TranquilIT repository on my WAPT Enterprise server?

Currently, I go to the private repository -> refresh available packages,
then update from the store for packages marked in 'red',
then add the packages to the cart,
and finally import the package cart.

This method is quite slow and, more importantly, doesn't allow for automated daily updates, which would be necessary for faster response to vulnerabilities.

How can I automate this?
Or is there a simpler manual process?

Thank you.

[sfonteneau]

Automatic import is not possible because the WAPT server does not have the private key.

You MUST recheck the Tranquility packages during import (they are not guaranteed), which is why we recommend a pre-production environment.

In short, we don't want to create a CrowdStrike2 by automatically updating your network.

By approving updates yourself, YOU take responsibility for what you import.

Rather than using the "red packages,"

simply click on "Import from internet" and check the boxes:

* "Newer than in my repository"
* "Compatible with known machines"
* "Latest version only."

Select all the packages and import them according to your chosen maturity level.

[ludo69]

Thank you for your reply.

Is there a way to script this?

Because if I run the script, I assume the same responsibility

. Sincerely,

[sfonteneau]

The easiest way is to push the tranquility key on all your parks.

https://wapt.tranquil.it/wapt/catranquilit.crt

In this way, tranquility is easily controlled All your park.

And on your end, you just added the Tranquility packages to your repository:

example :

Code: Select all

cd /var/www/wapt
wget https://wapt.tranquil.it/wapt/tis-chrome_109.0.5414.120-42_x64_windows_6.1_10.0_PROD.wapt
wapt-scanpackages /var/www/wapt -ldebug

This way you don't re-sign the packages, you use ours directly, and this way we can control your fleet.

[vcardon]

Simon is teasing; Tranquil IT absolutely does not want to replace your work. We're simply trying to make it more enjoyable and worthwhile for you.

If you're looking for a complete WAPT managed services solution with the associated contractual guarantees, you can contact a company like Suricate.

Otherwise, yes, it's just 3 clicks every day or 2-3 times a week—a 10-minute process that previously took you days and hours, without the quality assurance that WAPT now provides. So no, you never waste time with WAPT.

[sfonteneau]

Simon is teasing

I was perfectly serious and the proposed solution is perfectly valid (it's better than automatically re-signing).

Automatic duplication without verification leads to this exact conclusion: "peace of mind can control your entire fleet"