Updatemanager, smpatch und meine Nerven...

[Ebbi]

Moin,

smpatch treibt mich noch in den Wahnsinn.

Ich habe mir ein frisches Solaris 9 9/05 installiert, den Updatemanager aufgespielt und erst mal laufen lassen.
Am Schluss hiess es wie immer, dass ich neu starten muss, weil einige Patches einen Neustart benötigen.
Das habe ich mit "init 6" gemacht (NICHT reboot) gemacht, wie man das eben machen soll.
Tja, nur vermisse ich beim Neustart die Anzeige dass die Patches nun eingespielt werden.

Also gut dachte ich, nimmste eben smpatch. Die Patches sind ja schon runtergeladen.
Funktioniert aber leider auch nicht.

Was läuft denn da schief?
Und wie bekomme ich denn die Dinger nun ins System?

Code: [Auswählen]

# smpatch update
Installing patches from /var/sadm/spool...
NOTICE: Patch 114014-22 cannot be installed because it is typed as "interactive" which is prohibited by policy.
NOTICE: Update 114344-41 cannot be applied at this time since it is typed as "single user, reconfig immediate" which is disallowed                                             by installation policy.
NOTICE: Patch 114344-41 cannot be installed until the next system shutdown.
NOTICE: Update 112908-36 cannot be applied at this time since it is typed as "single user, reboot immediate" which is disallowed by                                             installation policy.
NOTICE: Patch 112908-36 cannot be installed until the next system shutdown.
NOTICE: Update 118558-39 cannot be applied at this time since it is typed as "single user, reconfig immediate" which is disallowed                                             by installation policy.
NOTICE: Patch 118558-39 cannot be installed until the next system shutdown.
NOTICE: Patch 112837-20 cannot be installed because it is typed as "interactive" which is prohibited by policy.
NOTICE: Update 112874-45 cannot be applied at this time since it is typed as "single user, reboot immediate" which is disallowed by                                             installation policy.
NOTICE: Patch 112874-45 cannot be installed until the next system shutdown.
NOTICE: Update 112963-33 cannot be applied at this time since it is typed as "single user" which is disallowed by installation poli                                            cy.
NOTICE: Patch 112963-33 cannot be installed until the next system shutdown.
NOTICE: Update 117123-08 cannot be applied at this time since it is typed as "reconfig immediate" which is disallowed by installati                                            on policy.
NOTICE: Patch 117123-08 cannot be installed until the next system shutdown.
NOTICE: Update 113277-66 cannot be applied at this time since it is typed as "single user, reconfig immediate" which is disallowed                                             by installation policy.
NOTICE: Patch 113277-66 cannot be installed until the next system shutdown.
NOTICE: Update 117471-04 cannot be applied at this time since it is typed as "reboot immediate" which is disallowed by installation                                             policy.
NOTICE: Patch 117471-04 cannot be installed until the next system shutdown.
NOTICE: Update 116047-03 cannot be applied at this time since it is typed as "single user" which is disallowed by installation poli                                            cy.
NOTICE: Patch 116047-03 cannot be installed until the next system shutdown.
NOTICE: Update 113451-16 cannot be applied at this time since it is typed as "single user, reconfig immediate" which is disallowed                                             by installation policy.
NOTICE: Patch 113451-16 cannot be installed until the next system shutdown.
NOTICE: Update 113329-24 cannot be applied at this time since it is typed as "single user, reconfig immediate" which is disallowed                                             by installation policy.
NOTICE: Patch 113329-24 cannot be installed until the next system shutdown.
NOTICE: Update 113718-04 cannot be applied at this time since it is typed as "single user" which is disallowed by installation poli                                            cy.
NOTICE: Patch 113718-04 cannot be installed until the next system shutdown.
NOTICE: Update 114564-14 cannot be applied at this time since it is typed as "single user" which is disallowed by installation poli                                            cy.
NOTICE: Patch 114564-14 cannot be installed until the next system shutdown.
NOTICE: Update 116669-36 cannot be applied at this time since it is typed as "single user, reconfig immediate" which is disallowed                                             by installation policy.
NOTICE: Update 117127-03 cannot be applied at this time since it is typed as "single user, reboot immediate" which is disallowed by                                             installation policy.
NOTICE: Patch 116669-36 cannot be installed until the next system shutdown.
NOTICE: Update 137402-02 cannot be applied at this time since it is typed as "single user" which is disallowed by installation poli                                            cy.
NOTICE: Patch 117127-03 cannot be installed until the next system shutdown.
NOTICE: Patch 137402-02 cannot be installed until the next system shutdown.
NOTICE: Patch 113575-11 cannot be installed because it is typed as "interactive" which is prohibited by policy.
/var/sadm/spool/patchpro_dnld_2009.09.19@19:24:39:CEST.txt has been moved to /var/sadm/spool/patchproSequester/patchpro_dnld_2009.0                                            9.19@19:24:39:CEST.txt

ID's of the updates that are disallowed by installation policy have been
written to file
        /var/sadm/spool/disallowed_patch_list

One or more updates that you installed requires a system shutdown to activate it. To initiate the system shutdown, you must use one                                             of the following commands:
o Drop to the firmware prompt - init 0 or shutdown -i 0
o Power down the system - init 5 or shutdown -i 5
o Restart the system - init 6 or shutdown -i 6

Besten Dank!


//Edith sagt, dass smpatch add -x idlist=/var/sadm/spool/disallowed_patch_list am besten funktioniert, wenn man vorher die alte disallowed_patch_list umbenennt.

[DukeNuke2]

beim neustart werden die patches nicht installiert. das wird während des herunterfahrens erledigt. nach einem neustart einfach noch mal ein "smpatch analyze" laufen lassen und wenn da nix angezeit wird, sind die patche drauf.

[Ebbi]

Danke, aber ich hab's jetzt manuell gerade gezogen.

• - /var/sadm/spool/disallowed_patch_list löschen
• smpatch update
• Fehlgeschlagene Patches aufschreiben
• Neustart
• Fehlgeschlagene Patches runterladen
• Fehlgeschlagene Patches manuell einspielen
• Neustart
• /var/sadm/spool/disallowed_patch_list umbenennen
• smpatch update
• Neustart
• smpatch add -x idlist=/var/sadm/spool/disallowed_patch_list

Fertig

[escimo]

Super Automatismus  - oh je

[maal]

Hallo,

ich habe am vergangenen Sonntag nach länger Zeit wieder auf blogs.sun.com gestöbert.
In einem der Beiträge wurde auf ein "privates" (d.h. begrenzter Personenkreis) Forum zum Thema Patches hingewiesen.
Begrenzt bedeutet in diesem Fall, der Inhalt wird erst sichtbar nachdem man sich mit einem SOA (Sun Online Account) anmeldet, dem ein Servicevertrag zugeordnet ist.

Der Hinweis, dies wäre selbstverständlich nicht offizieller Support, fehlte natürlich nicht.

Als Solaris 10 gerade erschienen war, lief der Sun Update Manager sehr instabil. Zusätzlich gab es Probleme mit den Servern, die die Patches vorgehalten haben. Damals war der Produkt-Manager äußerst aktiv, sowohl im allgemeinen Forum als auch in entsprechenden Newsgroups. Leider hat er dann Sun verlassen (evtl. müssen).

Einerseits ist SUM nur ein kleiner Teilbereich des Themas Patches, andererseits stellen tausende Freiwilliger kostenlos ihr Wissen auf forums.sun.com zur Verfügung. Aus diesem Grund mißfallen mir solche privaten Foren.

Dies ist der Link zum Beitrag:

http://blogs.sun.com/patch/entry/patch_forums_now_available_for

Um auf deine Frage zurückzukommen: Interaktive Patches müssen immer manuell installiert werden.
Mir ist es unter Solaris 10 schon passiert, daß anstehende Patches beim Herunterfahren nicht installiert wurden. Ursache war der Service svc:/system/installupdates:default stand auf disabled.

Michael

[DukeNuke2]

interactive patches müssen nicht von hand heruntergeladen werden. man hat da sogar 2 möglichkeiten diese zu installieren. zum einen kann man die smpatch konfiguration so anpassen das auch als interactive gekennzeichnete patches mitinstalliert werden. zum anderen kann man mit dem aufruf "smpatch add -i patchid" den patch auch per smpatch installieren lassen.

greets,
DN2