Installing update 118833-23 Failed
Hi All!
118833-23 has a problem on Solaris 10 with zones:
# init 6
# svc.startd: The system is coming down. Please wait.
svc.startd: 80 system services are now being stopped.
Installing update 118833-23 Failed
..............
> less disallowed_patch_list_report
..............
Patching zone zproxy
Booting non-global zone zproxyfor patching...
Adding patches...
Executing prePatch script...
Checking installed patches...
Executing prepatch script...
Verifying sufficient filesystem capacity (dry run method)...
Installing patch packages...
Pkgadd failed. See /var/tmp/118833-23.log.5413for details
Removing partially installed patch
Validating patches...
Loading patches installed on the system...
Done!
....................
> tail /export/zones/zproxy/root/var/tmp/118833-23.log.5413
Installation of <SUNWnfsckr> was successful.
This appears to be an attempt to install the same architecture and
version of apackage which is already installed. This installation
will attempt to overwritethis package.
pkgadd: ERROR: unable to create unique temporary file </etc/fs/nfs/mount5Ia4ty>: (30) Read-only file system
Installation of <SUNWnfscr> partially failed.
> cat /etc/release
Solaris 10 1/06 s10s_u1wos_19a SPARC
Copyright 2005 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 07 December 2005
[1703 byte] By [
v0vik] at [2007-11-26 10:26:33]
# 1
This patch has been obsoleted by 118833-24. Can you install the later revision and let us know if you see the same problems?
# 2
it seems -24 not to be accessible:
# smpatch analyze
123252-01 SunOS 5.10: platform/SUNW,Netra-T2000 patch
121017-04 Sun Studio 11: Patch for Sun C++ 5.8 compiler
120760-09 Sun Studio 11: Compiler Common patch for Sun C C++ F77 F95
121021-04 Sun Studio 11: Patch for Fortran 95 Dynamic Libraries
121019-03 Sun Studio 11: Patch for Fortran 95 8.2 Compiler
# smpatch get
patchpro.backout.directory-""
patchpro.baseline.directory-/var/sadm/spool
patchpro.download.directory-/var/sadm/spool
patchpro.install.types -rebootafter:reconfigafter:standard
patchpro.patch.sourcehttp://10.200.1.86:3816/solaris/https://getupdates1.sun.com/
patchpro.patchsetcurrent current
patchpro.proxy.host "" ""
patchpro.proxy.passwd********
patchpro.proxy.port 80 8080
patchpro.proxy.user -""
# showrev -p | cut -d' ' -f 2 | grep 118833
118833-18
118833-23
118833-03
v0vik at 2007-7-7 2:30:16 >
# 3
I see from the output that you are using a SunUC proxy. As such verify that this host can connect and run an analysis so that a fresh copy of the current.zip file is being used to analyse the hosts it serves rather than a cached copy.
# 4
/a/upcache/Database> ls -l
total 1242
-rw-r--r--1 rootroot280240 Aug 3 11:12 https%3A%2F%2Fgetupdates.sun.com%2Fsolaris%2F%2FDatabase%2Fcurrent.zip
-rw-r--r--1 rootroot282701 Sep 29 14:21 https%3A%2F%2Fgetupdates1.sun.com%2Fsolaris%2F%2FDatabase%2Fcurrent.zip
-rw-r--r--1 rootroot45967 Aug 21 12:47 https%3A%2F%2Fgetupdates1.sun.com%2Fsolaris%2F%2FDatabase%2Frecommended.zip
I deleted all files from the Database directory, now I've only
# ls -l Database/
total 773
-rw-r--r--1 rootroot282701 Sep 29 15:09 http%3A%2F%2F10.204.4.91%3A3816%2Fsolaris%2F%2FDatabase%2Fcurrent.zip
and the smpatch output stays unchanged
v0vik at 2007-7-7 2:30:16 >
# 5
118833-24 was issued on Tue Sep 26 08:28:38 MDT 2006.
You can review the readme via [url=http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage]patchfinder[/b ][/url]. The patch should be visible and downloadable at least for contract customers.
Despite the fact that the keyword list of the readme contains security, it's maybe not a freely available patch. It wasn't
listed by smpatch analyze on my non-contract system (about 15 hours ago).
Michael
# 6
Dear V0vikOnce an smpatch analyze was run on the Update Connection Proxy, which may take several minutes , were the new recommended and current file present?On the client system, have you refreshed these files in the same manner if they exist?Thank-you.
# 7
Is there a BugID for this mis-behaviour (smpatch analyze doesn't properly update the list of available patches) ?Michael
# 8
There is no bug id open yet to ther best of my knowledge since we're still trying to confirm the issue. smpatch can only work off the info thats provided to it so if there is an issue it's likely with the patch db itself and not smpatch.
V0vik, can you confirm that you are registered without a support contract?
# 9
Hello
> V0vik, can you confirm that you are registered
> without a support contract?
I'm sad not to confirm this. Our proxy is registered with our contract ID. Meanwhile, I see -24 in the analyze now. I removed all cached *.zip files on proxy and client side and checked time stamps of new files. It looks like, it was a server issue.
I'm on the vocation now, but it was reported to me that some latest patches couldn't be installed now. The patch will not be downloaded to client.
WARNING: The installer cannot find the patch.
The reason is, some patches couldn't be verified, they have no valid signature. I can't provide logs from proxy now, but here is the list of patches:
119252-13 SunOS 5.10: System Administration Applications Patch
123494-02 X11 6.6.2: fontconfig patch
122761-01 SunOS 5.10: Sun Update Connection Bootstrapper
123003-02 SunOS 5.10: dependency issue with SUNWopenssl-include
119280-07 CDE 1.6: Runtime library patch for Solaris 10
Message was edited by:
v0vik
sorry, the signature issue already dicussed here: http://forum.sun.com/jive/thread.jspa?threadID=108200&tstart=0
v0vik at 2007-7-7 2:30:16 >
# 10
As this patch is released post 24-Sep would you please ensure you have patch121118-08installed.Thank you.
# 11
this solvs the problem:
> diff -c /var/patchsvr/solaris/WEB-INF/web.xml_bak /var/patchsvr/solaris/WEB-INF/web.xml
*** /var/patchsvr/solaris/WEB-INF/web.xml_bakThu Oct 5 12:26:32 2006
/var/patchsvr/solaris/WEB-INF/web.xmlThu Oct 5 12:27:30 2006
***************
*** 38,44 ****
</init-param>
<init-param>
<param-name>patchsvr.security.patch.signingcert</param-name>
!<param-value>patchsigning</param-value>
</init-param>
<init-param>
<param-name>patchsvr.security.kslocation</param-name>
38,44 -
</init-param>
<init-param>
<param-name>patchsvr.security.patch.signingcert</param-name>
!<param-value>patchsigning:patchsigning2</param-value>
</init-param>
<init-param>
<param-name>patchsvr.security.kslocation</param-name>
v0vik at 2007-7-7 2:30:16 >
# 12
v0vik, I was having the same problem. Your little XML hack fixed it. Thank you!!!
# 13
To clarify, the XML hack need only be applied to the host running patchsvr, then bounce patchsvr. At least that was the case for me.
# 14
> This patch has been obsoleted by 118833-24. Can you
> install the later revision and let us know if you see
> the same problems?
turning back to the problem of 118833+zones: if I try to install the -24 or -23 in milestone single-user I have the old problem: pkgadd: ERROR: unable to create unique temporary file </etc/fs/nfs/mount5Ia4ty>: (30) Read-only file system
in the zones. I assume, the patchadd starts the zones and not waits until the zone is online. On the old slow hardware it can bring this error message and, at least, the /etc/fs/nfs/mount will not be updated.
The workaround is not to install this patch automatically, start zones with boot -s, wait, until they are ready and then apply this patch. It's probably not very bad idea to start all active zones first and then apply patches. It spares time on slow and not very slow systems.
Tested on
# prtdiag
System Configuration: Sun Microsystems sun4u Sun Ultra 5/10 UPA/PCI (UltraSPARC-IIi 333MHz)
System clock frequency: 111 MHz
Memory size: 512 Megabytes
========================= CPUs =========================
RunEcacheCPUCPU
Brd CPUModuleMHzMBImpl.Mask
- ---
0003332.0121.3
========================= IO Cards =========================
Bus# Freq
Brd Type MHzSlot NameModel
- - - -- -
0PCI-1 331ebus
0PCI-1 331network-SUNW,hme
0PCI-1 332SUNW,m64B ATY,GT-C
0PCI-1 333ide-pci1095,646
0PCI-2 331scsi-glm Symbios,53C875
0PCI-2 331scsi-glm Symbios,53C875
0PCI-2 332pci-pci8086,b154
No failures found in System
===========================
# cat /etc/release
Solaris 10 1/06 s10s_u1wos_19a SPARC
Copyright 2005 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 07 December 2005
# uname -a
SunOS app02 5.10 Generic_118833-24 sun4u sparc SUNW,Ultra-5_10
# smpatch analyze
119252-13 SunOS 5.10: System Administration Applications Patch
124171-01 SunOS 5.10: flash issue with SUNWscn-base due to broken package
124327-01 SunOS 5.10: libpcp patch
123252-01 SunOS 5.10: platform/SUNW,Netra-T2000 patch
119280-07 CDE 1.6: Runtime library patch for Solaris 10
Message was edited by:
v0vik
I tested the installation of 118833-24 with smpatch update; init 6 too.
v0vik at 2007-7-7 2:30:16 >
