Linux packages: apt, zypper and safe updates

01 / 05

A package manager tracks software

A package bundles software together with metadata and a list of dependencies, so installing one thing correctly pulls in everything it needs. A repository is a configured, trusted source of packages. Let the package manager resolve dependencies for you instead of downloading an RPM or DEB file from a search result and installing it by hand — that shortcut is exactly how conflicting library versions and half-broken systems get created.

Two package managers matter for this curriculum: apt, used by Debian and Ubuntu, and zypper, used by openSUSE — the family ViciBox is built on. openSUSE also offers a graphical front end called YaST, which calls the same underlying tools. Stock ViciBox is its own maintained appliance, not a generic openSUSE install, so a package change that is safe on a plain openSUSE lab is not automatically a supported ViciBox modification; treat the two as related but separate skills.

02 / 05

Detect before you assume

Never guess which package manager a host runs from its hostname, its purpose, or a habit from your last job. `/etc/os-release` names the distribution in a few standard, machine-readable lines, and `command -v` reports whether a given program exists on the current PATH (the list of directories your shell searches, in order, whenever you type a program's name without a full path to it) without running it — both are read-only checks you can run on any unfamiliar host in seconds, before you type a single package command.

Recording the release name and version is the first fact worth writing in any change ticket, because it determines which manual you should be reading and which package names are even valid; a package called openssh on one distribution can be called openssh-server or openssh-clients on another, and guessing wrong wastes time on both sides of a support conversation.

This matters more, not less, once VICIdial is involved. A forum post or an old blog written for a Debian-based install can name packages, paths and commands that simply do not exist under those names on the openSUSE-based ViciBox this curriculum's lab stage uses, and running its apt commands there will only teach you that apt itself is missing.

03 / 05

Guided sample: identify the platform

This sample answers two questions at once: what distribution is this, and which package manager does it actually have installed? `command -v apt` and `command -v zypper` each print a path if the tool exists, and print nothing and exit with a non-zero status if it does not — on almost every real host, exactly one of the two will report a path.

Running both lookups instead of assuming from the first one costs nothing and catches the rare host that genuinely has neither, or that has both because someone installed compatibility tooling — a case worth a question to the host's owner rather than a guess about which one actually manages the system's real packages.

cat /etc/os-releasecommand -v aptcommand -v zypper

04 / 05

Guided sample: branch on what you detected, then inspect only

Now use what the previous sample told you, rather than running a command that only works on one family and prints a confusing "not found" error on the other. The script below checks for zypper first, since ViciBox and every other openSUSE-family host in this curriculum reports it, and falls back to apt-cache only if zypper is absent. Either branch only inspects; neither installs, removes nor upgrades anything.

`zypper info` and `apt-cache policy` both report a package's available and installed versions without asking for confirmation. If either tool ever does prompt you to confirm a transaction, stop — that means you typed an installation command by mistake, not an inspection one.

The captured zypper --no-refresh result uses cached metadata, which the capture shows as expired. It cannot establish that packages are currently up to date. Ask the host owner to verify repository health and refresh metadata during an approved change window before making that conclusion.

if command -v zypper >/dev/null 2>&1; then  zypper --no-refresh info opensshelif command -v apt-cache >/dev/null 2>&1; then  apt-cache policy openssh-serverfi

05 / 05

Update plans need a change window

Everything above is inspection. Actually installing or upgrading a package is a different act entirely, and on a host running Asterisk, a database or a web server, it deserves a compatibility check, a rollback plan and a maintenance window — not a habit carried over from a personal laptop where an unplanned reboot costs nothing.

Treat any upgrade on a ViciBox host as a planned change. The historical ViciBox 7-era kernel note in this library is an unverified legacy reference, not a current upgrade procedure; it walks through repository checks, free space in /boot and a reboot — exactly the preparation an ad hoc `zypper update` skips. That belongs in a change window, never on a host others depend on.

• I can name my host's distribution and its package manager without guessing.
• I ran only the branch that matched what I detected.
• I know that any prompt asking me to confirm a transaction means I have left inspection and entered installation.