updatemanager smpatch and zones

Has anyone seen an official published response from Sun on the problems encountered when trying to update a system with zones installed? I would like to know what their official recommendation is and when they intend on issuing a fix. There are many postings and discussions on this topic, but I have not seen any reference to anything "official". This issue is a very serious matter for admins needing to keep systems up to date.

[437 byte] By [_junkken] at [2007-11-26 6:04:43]
# 1

From the FAQ at - http://www.sun.com/service/sunupdate/faq.html

Q.

Can I use Sun Update Connection 1.0, System Edition on a Solaris 10 system that has zones installed?

A.

Yes, but Sun Update Connection only provides partial support for systems that have non-global zones installed.

* Supports the sconadm, smpatch analyze, and smpatch download commands, and the Sun Update Manager registration and analysis features in the global zone only.

The Sun Update Connection web application, the Sun Update Manager application, and the smpatch analyze command can be used to perform an update analysis of the global zone.

* Does not support the smpatch update, smpatch add, and smpatch remove commands, or the install and remove features of the Sun Update Manager application or the Sun Update Connection web application.

Note that you can use the patchadd and patchrm commands to install and remove updates from global zones as well as from non-global zones. The patchadd and patchrm commands fully support Solaris 10 systems that have zones installed.

ForumModerator at 2007-7-6 13:31:00 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 2
Is there an official document on the procedure to follow to update a system which has zones where 175+ patches are needing to be applied?
_junkken at 2007-7-6 13:31:00 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 3

I have some scripts that allow you to patch zoned machines.

But theres no official answer that I'm aware of.

I can post my scripts if people are interested in them.

They do the patching in two phases. The idea being that you make the machine as quiescent as possible to install the critical patches in phase 2.

robertcohen at 2007-7-6 13:31:00 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 4
Ive posted my scripts in another thread.
robertcohen at 2007-7-6 13:31:00 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 5
Can you post a link to the scripts?
gssnetcom at 2007-7-6 13:31:00 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 6
You can find the scripts here http://www.apex.net.au/~robert/sun_zones/
robertcohen at 2007-7-6 13:31:00 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 7

Hello All,

The most recent release "Sun Update Connection Client, System Edition 1.0.4" has been modified to be fully operational in the global zone on systems configured with Solaris 19 Zones.

Support for patching specific non-global zones will be available in a future update. (6302734).

The patch numbers are:

SunOS 5.10_sparc - 121118-05

SunOS 5.10_x86- 121119-05

The links to download these patches and their dependancies patches is as follows:

http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage

Regards

ForumModerator at 2007-7-6 13:31:00 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 8
Except you still have to manually edit /etc/init.d/installupdates and remove the -t fromt the patch line, as far as I am aware.
robertcohen at 2007-7-6 13:31:00 > top of Java-index,Administration Tools,Sun Update Connection-System...