Solaris Global/Zones patching


 
Thread Tools Search this Thread
Operating Systems Solaris Solaris Global/Zones patching
# 1  
Old 11-07-2016
Solaris Global/Zones patching

Issue is : We have Solaris Global with 12 Zones and some have 15 Zones. All the OS version are10.
Is it possible to apply patch at Zone level instead of patching at Global level? Please let me know.
# 2  
Old 11-08-2016
Solaris 10.....

Yes, you can apply a patch to a particular zone by running the command as the zone admin. Also, you can apply a patch to a global zone only.

Applying a Patch to a Solaris System
With Zones Installed (System Administration Guide: Oracle Solaris Containers-Resource Management and Oracle Solaris Zones)
# 3  
Old 11-08-2016
Caveat: does not work for sparse zones.
This User Gave Thanks to jim mcnamara For This Post:
# 4  
Old 11-08-2016
Yes, thanks Jim. Many thanks for pointing that out. I missed that point.

Zones can be "whole root", that is self-sufficient operating systems with all their own binaries, or "sparse zone" where all binaries are not loaded but the global zone's binaries are used instead, ie, the global zone binaries are shared to make the zone disk space smaller.
# 5  
Old 11-08-2016
A few comments:
- some patches might apply to packages that are required to be in sync across all zones including the global one (SUNW_PKG_ALLZONES property). In such case the patch will refuse to be applied to a single zone or the global zone only.
- for obvious reasons, kernel patches are of this kind
- Patches that do not modify files residing in inherited file-systems can be applied to a sparse zone.
This User Gave Thanks to jlliagre For This Post:
# 6  
Old 11-09-2016
Thanks for the great response Smilie

What I'm understanding is "Sparse Zone" cannot apply patch at Zone level and for "Whole root Zone" the patch can be applied at Zone/Global level.

And some patches (kernel patch) might not be able to apply on both type of zones at Zone level and they have to be applied at Global level.

Please let me know if I'm wrong.
# 7  
Old 11-09-2016
I'm not sure to understand what you wrote so let me state again some facts:

Some patches can be applied to a sparse zone.

Some patches need to be applied at once to all zones including the global one, and from the latter.

Many patches can be applied to a single zone, whether global or not.

The fact a zone is sparse is strongly limiting the number of patches that can be applied to it.
Login or Register to Ask a Question

Previous Thread | Next Thread

6 More Discussions You Might Find Interesting

1. Solaris

Solaris 11 Global zone patching having Solaris 10 branded zone

I am planning to do solaris 11 global zone patching having solaris 10 branded zone. I have a doubts on step 8 specially Can someone clear my step 8 doubts or if anything wrong between step 1 to step 9 please correct that also as I have pretty good idea about Step 10 mean patching in solaris 10... (2 Replies)
Discussion started by: amity
2 Replies

2. Solaris

Solaris 10 - rexplorer and Non-Global zones

Hi all - not really a problem as such, but just hoping someone can shed some light. We point rexplorer to multiple Global zones and it works as expected. However, each Non-Global zone get around a hundred of root su'ing to root messages, i.e.: SU 07/14 03:02 + ??? root-root SU 07/14 03:02 +... (5 Replies)
Discussion started by: dlam
5 Replies

3. Solaris

Network / global zones (Solaris 10 / 8) config recommendations

I have a few non-globa zones running in a 10.10.xx.xx network on a machine that is on a 192.168.xx.xx network. My goal is to allow each of the non-global zones to communicate to each other while not communicating on the 192.168.xx.xx network. I am using the current version of Solaris 10 in... (7 Replies)
Discussion started by: BradJM
7 Replies

4. Solaris

Advanced Sysconfig use when building non-global zones in Solaris 11

I'm in an LDOM. I'm building non-global IP exclusive zones. I am using manifests and profiles to configure the system after install so I don't have to tab through the sysconfig startup dialog everytime I boot a system the first time for settings that never change (DNS, regional data, NTP etc). I... (0 Replies)
Discussion started by: os2mac
0 Replies

5. Solaris

Help req for Patching on Solaris 10 Zones

Hi Experts, Can advise on this: Global zone running on solaris 10, & the local zones on top running on solaris 9, but we need to patch the solaris 9 local zones & also the solaris 10 global zone. Which should be patched first to avoid any crash in case, first local zones... (1 Reply)
Discussion started by: fizan
1 Replies

6. Solaris

How to access ENV variables of non global zones in global zone???

Hi Guys, My requirement is I have file called /opt/orahome/.profile in non global zone. PATH=/usr/bin:/usr/ucb:/etc:/usr/sbin:/usr/local/bin:/usr/openwin/bin:. export PATH PS1="\${ORACLE_SID}:`hostname`:\$PWD$ " export PS1 EDITOR=vi export EDITOR ENV=/opt/orahome/.kshrc export ENV... (1 Reply)
Discussion started by: vijaysachin
1 Replies
Login or Register to Ask a Question