Solaris Patching using Live Upgrade

Yogesh Raheja

Yogesh working as a Consultant in Unix Engineering by profession. And he has multiple years experience in Solaris, Linux , AIX and Veritas Administration. He has been certified for SCSA9, SCSA10, SCNA10, VXVM, VCS, ITILv3. He is very much passionate about sharing his knowledge with others. Specialties: Expertize in Unix/Solaris Server, Linux (RHEL), AIX, Veritas Volume Manager, ZFS, Liveupgrades, Storage Migrations, Cluster deployment (VCS and HACMP) and administration and upgrade on Banking, Telecom, IT Infrastructure, and Hosting Services.

Loading Facebook Comments ...

27 Responses

  1. seema says:

    @yogesh … Thanks for the post !! can you please diffferenciate between OS patches,kernel patches and security patches ……? OR if you direct me to link will check on patches ….

    • Ramdev says:

      @seema – as you know patching is nothing but fixing bugs in the code. kernel patches fixes the kernel related bugs and patching a kernel is mandatory for some kind of application related package installs. And they mostly need a system reboot.

      About security patches, these patches designed for fixing the security
      vulnerabilities in the operating system
      code. (example… it could fix a vulnerability in a simple command code , a vulnerability in memory Management)

      Either kernel patch or security patch, it will be treated as OS related patch.

  2. seema says:

    Ok Thank you !!!!!!

  3. Yogesh Raheja says:

    @Seema, I guess Ram has explained your query in the best and simplest way. Thanks Ram. Actually thats the reason OS Bundle patching is preferred bzu it includes kernel/security patches. Its needs lots of home work to add individual patches as each patch have there dependencies which indeed have there dependencies. So its bit difficult and tricky to install individual patches and Cluster Bundle is preferred. Hope this helps.

  4. seema says:

    Yes that was simple to understand Ramdev …. thanks a lot Yogesh !!!!

  5. Bob Orton says:

    After doing the equivalent procedure on a SunFire 480R (sparc) system the system panics when running “explorer”

    panic[cpu2]/thread=30008b3a0c0:
    free: freeing free block, dev:0x7600000001, block:26752, ino:2, fs:/.alt.tmp.b-M1.mnt

    Oracle Knowledge Base ID 1329401.1
    The solution is to pkgrm SUNWlucfg, SUNWlur, and SUNWluu, SUNWluzone

  6. Yogesh Raheja says:

    @Bob, Thats the reason I have mentioned that LU pkg needs to be at the latest level as per SUN’s recommendation because once I have faced the same crash while doing Sol.8 to Sol.10 upgrade. Thanks for sharing the Crash Thread.

  7. Bob Orton says:

    @Yogesh Raheja, Looks like the fix was Patch 121430-67: SunOS 5.8 5.9 5.10: Live Upgrade Patch released 14 days ago. I was previously at 121430-55.

  8. Sateesh says:

    good one remind my old work done in past. Thanks.

  9. Yigesh Raheja says:

    @Bob, okies. Thank you very much for your extensive research. Now we need to check the behaviour after installing this patch and then proceeding with upgrades via LU.

  10. Yigesh Raheja says:

    Its our pleasure @Sateesh.

  11. anuj says:

    Hi Yogesh,thanks for sharing live upgradation.Plz share the procedure if Our Root,var,usr file system in mirror through SVM. In that case how i’ll create my Boot Environment .

  12. seema says:

    Hello Yogesh how will i apply patches on Linux ?(RHEL) ….

  13. Ramdev says:

    @Seema – in linux there is no specific patch management – everything goes through the regular package management tool like yum and rpm. for coming days, we will be focusing on linux in gurkulindia, you will find most of the related things in few days.

  14. Pratap says:

    Hi,

    I can see only upto assigning the cylinders to slice3 and slice 4. Can you please post the commands which is used to create boot environment and upgrading it. Thanks in advance.

  15. Yogesh Raheja says:

    @Pratap, check the post now. You will be able to see complete steps now.

  16. Kiran says:

    Clear cut procedure for LU…

    “I wish Human brains have LU or YUM :) “

  17. chandra says:

    Hi Ram,

    we are having issue in live upgrade from solaris 10 8/07 to solaris 10 9/10. we are able to create lucreate and luupgrade and able to boot with new BE without any issue. But getting lot of SMF service error on non-global zones. Not able to connect the non-globla zones from outside.
    As recommended by oracle we have applied patchset and all required patches but no luck. we also applied latest patch cluster. But still same issue with zones.

  18. Ramdev says:

    Hi chandra, as per the Oracle, as of today there are around 20+ unsupported environments that doesn’t support the LU straight forward. And I will collect that information and post that sometime this week.

    By the way, I want to know more about  the errors you see in NGZ? like svcs -xv and errors from /var/log/messages, and boottime errors.

  19. chandra says:

    Please find the svcs -xv output from on NGZ

    —svcs-xv.out
    svc:/system/sysidtool:net (sysidtool)
    State: offline since Sat Mar 23 20:56:16 2013
    Reason: Start method is running.
    See: http://sun.com/msg/SMF-8000-C4
    See: man -M /usr/man -s 1M sysidtool
    See: /var/svc/log/system-sysidtool:net.log
    Impact: 38 dependent services are not running:
    svc:/network/rpc/bind:default
    svc:/network/nis/client:default
    svc:/network/service:default
    svc:/network/dns/client:default
    svc:/milestone/name-services:default
    svc:/system/webconsole:console
    svc:/system/filesystem/autofs:default
    svc:/system/system-log:default
    svc:/milestone/multi-user:default
    svc:/system/boot-config:default
    svc:/milestone/multi-user-server:default
    svc:/application/autoreg:default
    svc:/application/stosreg:default
    svc:/application/sthwreg:default
    svc:/application/graphical-login/cde-login:default
    svc:/application/cde-printinfo:default
    svc:/network/smtp:sendmail
    svc:/application/management/seaport:default
    svc:/application/management/sma:default
    svc:/network/sendmail-client:default
    svc:/network/ssh:default
    svc:/network/nfs/cbd:default
    svc:/network/nfs/client:default
    svc:/network/nfs/mapid:default
    svc:/network/inetd:default
    svc:/network/ntp:default
    svc:/system/cron:default
    svc:/network/nfs/nlockmgr:default
    svc:/network/nfs/status:default
    svc:/system/sysidtool:system
    svc:/milestone/sysconfig:default
    svc:/system/utmp:default
    svc:/system/console-login:default
    svc:/application/management/wbem:default
    svc:/system/sac:default
    svc:/system/postrun:default
    svc:/application/management/dmi:default
    svc:/system/filesystem/volfs:default

    svc:/network/rpc/gss:default (Generic Security Service)
    State: uninitialized since Sat Mar 23 20:55:34 2013
    Reason: Restarter svc:/network/inetd:default is not running.
    See: http://sun.com/msg/SMF-8000-5H
    See: man -M /usr/share/man -s 1M gssd
    Impact: 17 dependent services are not running:
    svc:/network/nfs/client:default
    svc:/system/filesystem/autofs:default
    svc:/system/webconsole:console
    svc:/system/system-log:default
    svc:/milestone/multi-user:default
    svc:/system/boot-config:default
    svc:/milestone/multi-user-server:default
    svc:/application/autoreg:default
    svc:/application/stosreg:default
    svc:/application/sthwreg:default
    svc:/application/graphical-login/cde-login:default
    svc:/application/cde-printinfo:default
    svc:/network/smtp:sendmail
    svc:/application/management/seaport:default
    svc:/application/management/sma:default
    svc:/network/sendmail-client:default
    svc:/network/ssh:default

    svc:/application/management/snmpdx:default (Sun Solstice Enterprise Master Agent)
    State: disabled since Sat Mar 23 20:55:35 2013
    Reason: Disabled by an administrator.
    See: http://sun.com/msg/SMF-8000-05
    See: man -M /usr/share/man/ -s 1M snmpdx
    Impact: 3 dependent services are not running:
    svc:/application/management/dmi:default
    svc:/milestone/multi-user-server:default
    svc:/application/autoreg:default

    svc:/application/print/server:default (LP print server)
    State: disabled since Sat Mar 23 20:55:34 2013
    Reason: Disabled by an administrator.
    See: http://sun.com/msg/SMF-8000-05
    See: man -M /usr/share/man -s 1M lpsched
    Impact: 1 dependent service is not running:
    svc:/application/print/ipp-listener:default

    svc:/network/rpc/smserver:default (removable media management)
    State: uninitialized since Sat Mar 23 20:55:39 2013
    Reason: Restarter svc:/network/inetd:default is not running.
    See: http://sun.com/msg/SMF-8000-5H
    See: man -M /usr/share/man -s 1M rpc.smserverd
    Impact: 1 dependent service is not running:
    svc:/system/filesystem/volfs:default

  20. chandra says:

    As suggest by the oracle we have applied patchset and also 2011 patch cluster. but still no luck, same issue is occurring even after applying the patches. oonly problem with NGZ. global is able to boot successfully without any smf error.

  21. chetantare says:

    Hi,
    i have performed live upgrade activity while performing live upgrade there no error came but after performing patch upgrade it show me following error
    “The patch add to the BE failed (with result code ).”
    NOTE: after completing live upgrade i didn’t took reboot. up gradation from S10U9 to S10U10. pls help me to slove this issue.

  22. Ramdev says:

    Hi Chethan, is there any result code mentioned in the error?

  23. chetantare says:

    YES, the return code is “1”…..

  24. Tom says:

    Hi there,
    If the server contains other critical file systems like /usr /var /opt, how do i choose a slice to create a new boot environment according to your post?

    Filesystem size used avail capacity Mounted on
    /dev/dsk/c0t0d0s0 39G 20G 19G 52% /
    /devices 0K 0K 0K 0% /devices
    ctfs 0K 0K 0K 0% /system/contract
    proc 0K 0K 0K 0% /proc
    mnttab 0K 0K 0K 0% /etc/mnttab
    swap 17G 1.0M 17G 1% /etc/svc/volatile
    objfs 0K 0K 0K 0% /system/object
    sharefs 0K 0K 0K 0% /etc/dfs/sharetab
    /usr/lib/libc/libc_hwcap1.so.1
    39G 20G 19G 52% /lib/libc.so.1
    fd 0K 0K 0K 0% /dev/fd
    /dev/dsk/c0t0d0s3 34G 11G 23G 34% /var
    swap 512M 376K 512M 1% /tmp
    swap 17G 28K 17G 1% /var/run
    /dev/dsk/c0t0d0s4 79G 42G 36G 54% /opt
    /dev/dsk/c0t0d0s5 12G 8.2G 3.5G 71% /export/home

  1. September 16, 2015

    […] Read – Patching Using Live Upgrade […]

Leave a Reply

Your email address will not be published.

[contact-form to='ramkumar.ramadevu@gmail.com' subject='New Learning Request Submitted'][contact-field label='Name' type='name' required='1'/][contact-field label='Email' type='email' required='1'/][contact-field label='Learning Request' type='textarea' required='1'/][contact-field label='Are you Looking for ' type='radio' required='1' options='Paid Training,Free Training'/][/contact-form]

What is your Learning Goal for Next Six Months ? Talk to us