SUMMARY: Solaris Patching

From: Michael Tewner (tewner_at_jct.ac.il)
Date: 06/17/04

  • Next message: Rajeev Andrews: "rlogin problem."
    To: sunmanagers@sunmanagers.org
    Date: Thu, 17 Jun 2004 14:42:08 +0300
    
    

    So, a bunch of people reported annoyances uses patchpro... I'll
    summarize the different answers.
     I havn't tried any of these yet...

    ----------------------------------------------
    THanks Dan for the comprehensive reply!:

    I Use patchpro, but only on workstions, not on servers.
    Use the pprosetup command to set parameters (pprosetup -h, will list the
    options)

    To run it manually and install the patches, run "smaptch update --"
    You need to set the install policy with pprosetup or you can just edit
    the patchpro.conf file.
    And example would be "pprosetup -i interactive:singleuser:standard"
    Pprosetup -h will list all the options available.

    BTW, the patchpro.conf file in use is not the one listed in the manual,
    IT DOES NOT USE /opt/SUNWppro/etc/patchpro.conf, this file is there but
    it's not used. The correct file to edit is:
    /etc/opt/SUNWppro/etc/patchpro.conf

    I had an ultra10 with Sol9 12/03 that patchpro wouldn't install any
    patches until I applied the latest cluster manually, now works fine.

    ---------------------------------------------------
    I tried SRSnetconnect
    from Sun, a free tool, which analyzes your system. Also a detailed patch
    report
    is given, as it can check real-time the current patchlevel of the
    machine
    against SUN's patch database.
    It monitors your system, and you can generate all
    kinds of reports (trends, performance) You can download it for free if
    you have
    a support contract.
    ---------------------------------------------------
    Patch pro is pretty good.

    use /opt/SUNWppro/bin/pprosetup -i
    standard:singleuser:rebootafter:reconfigafter
    to set policy

    use to update:

    /usr/sadm/bin//smpatch update
    /opt/SUNWppro/bin/pprosvc -i

    use to analize:
    /opt/SUNWppro/bin/pprosvc -l

    use to donwload
    /opt/SUNWppro/bin/pprosvc -d

    to get sunsolve patches
    #pprosetup -u sunsolve-user-name
    Specify your SunSolve password by adding the password to the
    /opt/SUNWppro/lib/.sunsolvepw file.
    # echo sunsolve-user-passwd > /opt/SUNWppro/lib/.sunsolvepw

    you can also schedule it.
    I am sure there are better ways, this is a 10 min one

    ---------------------------------------------------
    Someone mentioned that they just download the patch clusters and install
    them. They use patchdiag for revision control....

    ---------------------------------------------------
    Directly calling pprosvc:
    pprosvc -c force -i
    where "force" is a config file w/name and password, etc...
    ---------------------------------------------------
    Patchpro (w/GUI)
    ---------------------------------------------------
    On person mentioned that SUN is coming out with a new patch program
    called cst. It should automate everything, but I didn't see a website
    for it...I'll keep looking.
    ---------------------------------------------------
    i use sun's patchk [current ver 1.2 afaik] to report outstanding
    patches.
    i have a cron job fetch the latest patchdb and run it, once a month.
    i run a script by hand to parse its output and fetch new patches.
    i then patch by hand.
    ---------------------------------------------------
    http://www.sun.com/bigadmin/features/articles/live_upgrade.html
    But...This needs a browser open on my server, right?
    ---------------------------------------------------
    _______________________________________________
    sunmanagers mailing list
    sunmanagers@sunmanagers.org
    http://www.sunmanagers.org/mailman/listinfo/sunmanagers


  • Next message: Rajeev Andrews: "rlogin problem."

    Relevant Pages

    • Re: Patch 2.4.3 PTR Patch Notes
      ... I'll likely stick with travelform till the patch given the cheapness of ... drop rate of blue gems from mining nodes remains unchanged. ... no longer be required to select a category when opening a GM ticket. ... that requires a GM response or the ?Report Issue? ...
      (alt.games.warcraft)
    • Re: Linux-2.6.13-rc7
      ... > report in first, to verify if this patch works as advertised. ... m68k (and applies both to Linus' tree and m68k CVS); ... send the line "unsubscribe linux-kernel" in ...
      (Linux-Kernel)
    • Re: KB891711 & Final Fantasy XI Blue-Screen
      ... you can uninstall KB891711 - although it's not recommended. ... Use Add/Remove Programs for that. ... MS are actively looking at the problem with the patch - hopefully they'll ... report. ...
      (microsoft.public.windowsupdate)
    • Re: Giving developers clue how many testers verified certain kernel version
      ... I do report bugs and will always ... no problem when people do NOT report bugs in that piece of code ... patch to the official tree. ... > in your ACPI example there is a bug/problem. ...
      (Linux-Kernel)