|
|
Sponsored Content
Operating Systems
Solaris
Lifecycle patching
Post 302905005 by rbatte1 on Monday 9th of June 2014 05:36:11 AM
06-09-2014
Moderator
Are you saying that all your servers have direct internet access and that they all download patches when the command is issued?
As some have already said, there needs to be an agreed set that you are installing else your testing does not match what you put into production.
For AIX and HP-UX, I pull down a block of fixes to a directory for testing and then copy that directory to production servers. I don't get a fresh download for that very reason. There may be a neater way, but it's not a huge overhead.
For Red Hat Linux we use their Satellite Server, which means that servers with no business need are not directly on the internet and it reduces our public traffic (that we pay for by usage) This allows us to set up cloned channels (as they call it) into which we can move fixes as we require and then each OS still does a network pull, but from this controlled list. We can then be sure that production gets the same as testing. We then update the patches in the cloned channel and start testing the next updates, and round we go again.
I think Centos has the same and I'm sure others do too.
You can even use Red Hat Satellite for Solaris patching (no roll-back though)
Of course, this is always done if anyone agrees that we will actually do some patching. Let's not get into that debate here though.
Robin
As a DBA, you must have some software patch responsibilities too. It's just common sense and you are right.
As some have already said, there needs to be an agreed set that you are installing else your testing does not match what you put into production.
For AIX and HP-UX, I pull down a block of fixes to a directory for testing and then copy that directory to production servers. I don't get a fresh download for that very reason. There may be a neater way, but it's not a huge overhead.
For Red Hat Linux we use their Satellite Server, which means that servers with no business need are not directly on the internet and it reduces our public traffic (that we pay for by usage) This allows us to set up cloned channels (as they call it) into which we can move fixes as we require and then each OS still does a network pull, but from this controlled list. We can then be sure that production gets the same as testing. We then update the patches in the cloned channel and start testing the next updates, and round we go again.
I think Centos has the same and I'm sure others do too.
You can even use Red Hat Satellite for Solaris patching (no roll-back though)
Of course, this is always done if anyone agrees that we will actually do some patching. Let's not get into that debate here though.
Robin
As a DBA, you must have some software patch responsibilities too. It's just common sense and you are right.
|
|
8 More Discussions You Might Find Interesting
1. Solaris
Hi all,
I'm new to Solaris. How can i make sure that all my servers are patched to the same level. When i do a uname -a, i see different level. How can i make sure that they are having the same patches. Any expert to guide me through pls?
eg.
ServerA#uname -a
SunOS ServerA 5.10... (0 Replies)
Discussion started by: ahlude
0 Replies
2. Virtualization and Cloud Computing
HPL-2008-80 Adaptive Information Technology for Service Lifecycle Management - Rolia, Jerry; Belrose, Guillaume; Brand, Klaus; Edwards, Nigel; Gmach, Daniel; Graupner, Sven; Kirschnick, Johannes; Stephenson, Bryan; Vickers, Paul; Wilcock, Lawrence
Keyword(s): Software as a Service, Enterprise... (0 Replies)
Discussion started by: Linux Bot
0 Replies
3. Solaris
Hi all
Ive got 12 odd sun servers, running solars 8, 9 and soon 10. Have to admit I havent patched for years. Infact the last time I did patch a load of servers, sun provided you will a small script which would review the current patch levels, create a xml file that you would use on sunsolve... (3 Replies)
Discussion started by: sbk1972
3 Replies
4. Solaris
Hi Gurus
I wanted to patch two servers yesterday with the SUN provided patch_cluster for solaris 10
One server is had the same patchlevel before and after patching
SunOS svr10008 5.10 Generic_125100-10 sun4v sparc SUNW,Sun-Fire-T200
The other had after the patching a different patchlevel... (3 Replies)
Discussion started by: gnom
3 Replies
5. Solaris
Hello to all, I have a quick question. I am learning Solaris, with Solaris 10 x86, and one of the chapters in the manual is about patching. So can I download free patches from the Sun page, I mean with out paying a license. Because It would be a great exercise to patch my installation of Solaris.... (1 Reply)
Discussion started by: piukeman
1 Replies
6. Red Hat
hello,
I'm a Solaris admin and I was asked to patch some RHEL servers. I'm having trouble trying to figure out the RHEL java version. Can someone help me?
This what I do in Solaris
java -version
java version "1.5.0_34"
java(TM) 2 Runtime Envirement, Standard Edition (build 1.5.0_34-b03)... (5 Replies)
Discussion started by: bitlord
5 Replies
7. Solaris
Greetings everyone! I have the task of patching six ldoms and two control domains. I have never done this before and would like to know of any pitfalls or "gotchas" I may encounter. I have been looking online but have found very little about patching ldoms. Thank you all. (4 Replies)
Discussion started by: desertdenizen
4 Replies
8. Homework & Coursework Questions
Hello,
I would like to build some sample C++ application on Solaris SunOS 5.8 Generic Virtual sun4v sparc.
so I would like to know what are the compilation utilities and runtime utilities I need to get in my machine
and will any one explain me the detaied life cycle of program like
what... (1 Reply)
Discussion started by: Revathi R
1 Replies
LEARN ABOUT CENTOS
rhn-channel
SPACEWALK-CHANNEL(8) Red Hat, Inc. SPACEWALK-CHANNEL(8) NAME
spacewalk-channel - Subscribe to or unsubscribe system from channel. SYNOPSIS
spacewalk-channel [options] DESCRIPTION
spacewalk-channel allows you to subscribe to and unsubscribe from specified channels via the command line. A visit to the "Spacewalk Server", "Red Hat Satellite" or "Red Hat Network Classic" website isn't required. OPTIONS
-l, --list Print a list of channel(s) that you are currently subscribed to. -b, --base Print a base channel that you are currently subscribed to. -L, --available-channels Print a list of all available child channels. -a, --add You are subscribing system to given channel(s). You have to specify --user and --password. -r, --remove You are unsubscribing system to given channel(s). You have to specify --user and --password. -u, --user Your username used to register the system with and for Red Hat Network Classic, Red Hat Satellite or Spacewalk. If you do not enter this option and it is required, you will be prompted. -p, --password The password associated with the username specified with the --user option. This is an unencrypted password. If you do not enter this option and it is required, you will be prompted. -c, --channel Label of channel you want to subscribe to or unsubscribe from. Can be specified multiple times. -v, --verbose Print out successfull action. -h, --help Show a help message and exit. NOTE
The addition and removal of channels is mutually exclusive, please use the command twice. EXAMPLES
Subscribe to two channels: spacewalk-channel --add -c rhn-tools-rhel-i386-server-5 -c rhel-i386-server-vt-5 --user username --password password Unsubscribe from channel: spacewalk-channel --remove -c rhn-tools-rhel-i386-server-5 -c rhel-i386-server-vt-5 --user username --password password List subscribed channels: spacewalk-channel --list SEE ALSO
rhnplugin(8), rhn_register(8), up2date(5). AUTHORS
Miroslav Suchy <msuchy@redhat.com> BUGS
Report bugs to <http://bugzilla.redhat.com>. COPYRIGHT
Copyright (C) 2009-2010 Red Hat, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICU- LAR PURPOSE. Linux 2010 August 30 SPACEWALK-CHANNEL(8)