mirror of https://github.com/eworm-de/routeros-scripts synced 2024-05-14 08:04:19 +00:00

Christian Hesse d2d913ec19 check-routeros-update: allow to install all updates automatically...

... but with extra hurdle for more awareness of danger.

Let's not send a new notification, intentionally. This feature is
dangerous, and we should not advertise it.

2023-03-06 21:06:48 +01:00

2.9 KiB

Raw Blame History

Notify on RouterOS update

⬅️ Go back to main README

ℹ️ Info: This script can not be used on its own but requires the base installation. See main README for details.

Description

The primary use of this script is to notify about RouterOS updates.

Run from a terminal you can start the update process or schedule it.

Centrally managing update process of several devices is possibly by specifying versions safe to be updated on a web server. Versions seen in neighbor discovery can be specified to be safe as well.

Also installing patch updates (where just last digit is increased) automatically is supported.

⚠️ Warning: Installing updates is important from a security point of view. At the same time it can be source of serve breakage. So test versions in lab and read changelog and forum before deploying to your production environment! Automatic updates should be handled with care!

Sample notification

Requirements and installation

Just install the script:

$ScriptInstallUpdate check-routeros-update;

And add a scheduler for automatic update notification:

/system/scheduler/add interval=1d name=check-routeros-update on-event="/system/script/run check-routeros-update;" start-time=startup;

Configuration

No extra configuration is required to receive notifications. Several mechanisms are availalbe to enable automatic installation of updates. The configuration goes to global-config-overlay, these are the parameters:

SafeUpdateNeighbor: install updates automatically if at least one other device is seen in neighbor list with new version
SafeUpdatePatch: install patch updates (where just last digit changes) automatically
SafeUpdateUrl: url on webserver to check for safe update, the channel (long-term, stable or testing) is appended
SafeUpdateAll: install all updates automatically

ℹ️ Info: Installing all updates automatically requires extra confirmation. See global-config for details.

Also notification settings are required for e-mail, matrix and/or telegram.

Usage and invocation

Be notified when run from scheduler or run it manually:

/system/script/run check-routeros-update;

If an update is found you can install it right away.

Installing script packages-update gives extra options.

2.9 KiB Raw Blame History Unescape Escape