PHP and external repo

[yugher]

Hi,
I am using CentOS release 6.8 (Final)
I just added some external repositories ONLY to upgrade PHP (from 5.3 to 5.6):

Code: Select all

wget http://rpms.famillecollet.com/enterprise/remi-release-6.rpm && rpm -Uvh remi-release-6*.rpm
wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm && rpm -Uvh epel-release-latest-6.noarch.rpm

PHP went fine.
Now, I could upgrade some other RPM:

Code: Select all

apachetop.x86_64                                                                0.15.6-1.el6                                                             epel     
libmcrypt.x86_64                                                                2.5.8-9.el6                                                              epel     
libmcrypt-devel.x86_64                                                          2.5.8-9.el6                                                              epel     
mhash.x86_64                                                                    0.9.9.9-3.el6                                                            epel     
mhash-devel.x86_64                                                              0.9.9.9-3.el6                                                            epel     
monit.x86_64                                                                    5.14-1.el6                                                               epel     
mysql.x86_64                                                                    5.5.54-1.el6.remi                                                        remi     
mysql-libs.x86_64                                                               5.5.54-1.el6.remi                                                        remi     
perl-Test-Mock-LWP.noarch                                                       0.05-4.el6                                                               epel     
remi-release.noarch                                                             6.8-2.el6.remi                                                           remi     
Obsoleting Packages
GeoIP.x86_64                                                                    1.6.5-1.el6                                                              epel     
    geoip.x86_64                                                                1.4.6-1.el6.rf                                                           @rpmforge
GeoIP-devel.x86_64                                                              1.6.5-1.el6                                                              epel     
    geoip-devel.x86_64                                                          1.4.6-1.el6.rf                                                           @rpmforge

In your opinion, to keep the system as stable as possible, should I completely disable external repo right now?
For example, as you can see, I could upgrade mysql and mysql-libs from remi repo. Is that a good idea?

Code: Select all

# yum repolist enabled
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * base: mirror.crazynetwork.it
 * epel: mirror.imt-systems.com
 * extras: mirror.crazynetwork.it
 * remi: mirror.23media.de
 * remi-php56: mirror.23media.de
 * remi-safe: mirror.23media.de
 * rpmforge: mirror.crazynetwork.it
 * updates: mirror.crazynetwork.it
repo id                                                repo name                                                                                            status
base                                                   CentOS-6 - Base                                                                                       6,696
epel                                                   Extra Packages for Enterprise Linux 6 - x86_64                                                       12,259
extras                                                 CentOS-6 - Extras                                                                                        63
litespeed                                              LiteSpeed Tech Repository for CentOS 6 - x86_64                                                       1,474
litespeed-update                                       LiteSpeed Tech Repository for CentOS 6 - x86_64                                                         113
nginx                                                  nginx repo                                                                                               53
remi                                                   Remi's RPM repository for Enterprise Linux 6 - x86_64                                                 4,034
remi-php56                                             Remi's PHP 5.6 RPM repository for Enterprise Linux 6 - x86_64                                           415
remi-safe                                              Safe Remi's RPM repository for Enterprise Linux 6 - x86_64                                            1,753
rpmforge                                               RHEL 6 - RPMforge.net - dag                                                                           4,718
updates                                                CentOS-6 - Updates                                                                                      820
repolist: 32,398

Thank you for your suggestion.

[mghe]

You don't need disable repo, but you have to look carefully during update. Cross update packages form mixed repo can be issue in future.

So keep core pakages form CentOS repo and only certain packages form external repo.

[remirepo]

if you want PHP 5.6,, you only need "remi-php56" (which only provides php, nothing else) and "remi-safe" for dependency (which is really safe, only additional packages). You don't need "remi" (excepted if you want some packages from it, in this case I recommend you use the includepkgs directive to filter what will be pulled from there)


As explained in the Wizard instructions

[TrevorH]

And you definitely don't want rpmforge any more. The maintainer got bored with it about 4 years ago and almost nothing there has been updated since so you have 4 years of security problems that are not patched. Remove it, find the packages installed from it and replace them from other places.

[yugher]

Hi TrevorH, thank you very much, I tried to uninstall RPMs from rpmforge, I noticed this:

Code: Select all

# yum erase libmcrypt.x86_64 
Loaded plugins: fastestmirror
Setting up Remove Process
Resolving Dependencies
--> Running transaction check
---> Package libmcrypt.x86_64 0:2.5.7-1.2.el6.rf will be erased
--> Processing Dependency: libmcrypt.so.4()(64bit) for package: libmcrypt-devel-2.5.7-1.2.el6.rf.x86_64
--> Processing Dependency: libmcrypt.so.4()(64bit) for package: php-mcrypt-5.6.30-1.el6.remi.x86_64
--> Processing Dependency: libmcrypt = 2.5.7-1.2.el6.rf for package: libmcrypt-devel-2.5.7-1.2.el6.rf.x86_64
--> Running transaction check
---> Package libmcrypt-devel.x86_64 0:2.5.7-1.2.el6.rf will be erased
---> Package php-mcrypt.x86_64 0:5.6.30-1.el6.remi will be erased
--> Finished Dependency Resolution

Dependencies Resolved

===================================================================================================================================================================
 Package                                  Arch                            Version                                       Repository                            Size
===================================================================================================================================================================
Removing:
 libmcrypt                                x86_64                          2.5.7-1.2.el6.rf                              @rpmforge                            633 k
Removing for dependencies:
 libmcrypt-devel                          x86_64                          2.5.7-1.2.el6.rf                              @rpmforge                            358 k
 php-mcrypt                               x86_64                          5.6.30-1.el6.remi                             @remi-php56                           89 k

Transaction Summary
===================================================================================================================================================================
Remove        3 Package(s)

Installed size: 1.1 M
Is this ok [y/N]:

Should I confirm that, and install php56-php-mcrypt.x86_64 instead of php-mcrypt ?

Thank you

[mghe]

Use 'rpm -e --nodeps' to remove pakages without dependencies.

[TrevorH]

That's not good advice.

Personally I would wait for Remi to reply since it's his php-crypt package that's being removed as a result of the rpmforge package going away. Of course, if you don't need php-mcrypt then you could just go ahead and remove them both.

[remirepo]

Packages in remi repository rely on EPEL packages.

So;
remove libmcrypt (from rpmforge)
disable rpmforge
reinstall php-mcrypt (which will pull libmcrypt form epel)


BTW, even better if you can avoid this bad extension
Read: https://blog.remirepo.net/post/2015/07/ ... php-mcrypt

> Should I confirm that, and install php56-php-mcrypt.x86_64 instead of php-mcrypt ?

If you use "php-common", install "php-mcrypt" (base package, single version)
If you use "'php56-php-common", install "php56-php-mcrypt" (SCL package, parallel installation, multiple versions)