search

mondoohq / cnquery

open source, cloud-native, graph-based asset inventory
https://cnquery.io
Other
320 stars 21 forks source link

os.updates support for Fedora 36 and Pop!_OS 22.04 missing #588

Open stdevel opened 2 years ago

stdevel commented 2 years ago

Is your feature request related to a problem? Please describe. It looks like os.updates can't detect the Fedora 36 and Pop!_OS 22.04 LTS package manager:

mondoo> os.updates
[failed] os.updates
  error: could not detect suiteable update manager for platform

The packages resource on the other hand seems to work:

mondoo> packages.list
packages.list: [
  0: package id = deb://accountsservice/0.6.55-0ubuntu14.1pop0~1648743814~22.04~a006f82/amd64
  1: package id = deb://acl/2.3.1-1/amd64
...

Describe the solution you'd like The OS update resource should work like for other distros. General Pop!_OS support was implemented in mondoohq/client#126.

Describe alternatives you've considered

Additional context

chris-rock commented 2 years ago

@stdevel os.updates are specific to some operating systems, eg. suse linux since they ship some updates that are not part of the normal package update. Debian / Ubuntu do all their updates incl. kernel via normal packages updates. What would you expect to return from this resource on Pop!_OS 22.04 LTS or Fedora?

stdevel commented 2 years ago

Hi @chris-rock, totally understand your point. My main use-case was checking whether there are outstanding critical security fixes (CVEs), but I figured out in the meantime that this is already part of the Platform Vulnerability Policy:

grafik

On the other hand some users might find it useful to check for having particular patches installed. Most package managers (such as dnf and zypper) offer capabilities for reading patch meta information - e.g. show security patches only. It might be nice to have the possibility to use them.

What do you think?

chris-rock commented 2 years ago

@stdevel Interesting. Do you have some time to chat about you use case? Would love to ask a few questions.

stdevel commented 2 years ago

Hi @chris-rock, sorry for the late reply - I just sent you an mail with contact details. Feel free to ping me! :)