Problems patching Solaris 10 system with zones

Hi all,

i'm unable to finish a patchinstall job on a Solarsi 10 system with one local zone. While trying to install April 2007 security baseline on global zone i get this error (from the log):

... snip ...

Loading patches installed on the system...

Done!

Loading patches requested to install.

Done!

Checking patches that you specified for installation.

Done!

Approved patches will be installed in this order:

120900-04

Preparing checklist for local zone check...

Checking local zones...

Booting local zone netconnect_test for patch check...

ERROR: unable to boot zone: problem running </usr/sbin/zoneadm> on zone <netconnect_test>: Error 0

zoneadm: /home0/zones/test: No such file or directory

could not verify zonepath /home0/zones/test because of the above errors.

zoneadm: zone netconnect_test failed to verify

Can not boot local zone netconnect_test

Job FINISHED with Value: 1

Job Ended: Wed May 9 14:57:18 2007

... end snip ...

halting/booting this local zone by hand works very well and with no problems.

/home0/zones/test exists.

Any idea?

Thanks

S.

[1234 byte] By [sf_35568a] at [2007-11-27 3:50:28]
# 1

This is a problem with patchadd and not really with SC per se'. The file systems that your local zone's are mounted from (/home0/zones/test) is not reachable while this patch is being applied. (I'm assuming you're doing this in single user mode? Please confirm).

While the patchadd bug gets fixed, there will also be a separate fix for SC for this in the upcoming maintenance release 1.1.1, where it will check for these zonepaths before trying to patch them.

If you're not doing this in single user mode, then it might be a different issue.

dougsca at 2007-7-12 8:54:23 > top of Java-index,Administration Tools,Sun Update Connection-Enterprise Forum...
# 2
No, is not done in single user mode. This patch does not require su mode.
sf_35568a at 2007-7-12 8:54:23 > top of Java-index,Administration Tools,Sun Update Connection-Enterprise Forum...
# 3
Make sure you have the latest 119254 patch applied (think it's rev 36) and then re-test. Like Doug mentioned this is a bug with patchadd and not a problem with SC/UCE.I thought that it was fixed (with the 119254 patch) though maybe i'm wrong.....
ForumModeratora at 2007-7-12 8:54:23 > top of Java-index,Administration Tools,Sun Update Connection-Enterprise Forum...
# 4

Quite strange: patching manually works fine:

#######################

bash-3.00# patchadd 120900-04

Validating patches...

Loading patches installed on the system...

Done!

Loading patches requested to install.

Done!

Checking patches that you specified for installation.

Done!

Approved patches will be installed in this order:

120900-04

Preparing checklist for local zone check...

Checking local zones...

This patch passes the local zone check.

120900-04

Summary for zones:

Zone netconnect_test

Rejected patches:

None.

Patches that passed the dependency check:

120900-04

Patching global zone

Adding patches...

Checking installed patches...

Verifying sufficient filesystem capacity (dry run method)...

Installing patch packages...

Patch 120900-04 has been successfully installed.

See /var/sadm/patch/120900-04/log for details

Patch packages installed:

SUNWcsr

SUNWdtrc

SUNWzoneu

Done!

Patching local zones...

Patching zone netconnect_test

Adding patches...

Checking installed patches...

Verifying sufficient filesystem capacity (dry run method)...

Installing patch packages...

Patch 120900-04 has been successfully installed.

See /var/sadm/patch/120900-04/log for details

Patch packages installed:

SUNWcsr

SUNWdtrc

SUNWzoneu

Done!

#######################

Still a patchadd problem?

sf_35568a at 2007-7-12 8:54:23 > top of Java-index,Administration Tools,Sun Update Connection-Enterprise Forum...
# 5
What rev of the 119254 patch is installed?
ForumModeratora at 2007-7-12 8:54:23 > top of Java-index,Administration Tools,Sun Update Connection-Enterprise Forum...
# 6

119254-10 is installed.

After checking the messages i found out that SunConnection tried to install the patch in single user mode (which is OK, it is recommended in the README to do so). But with SU mode the /home0/zones zones homedir is not yet available, and zoneadm fails to boot up the local zones.

Any idea how to avoid this and handle SU-mode patches on systems with zones?

sf_35568a at 2007-7-12 8:54:23 > top of Java-index,Administration Tools,Sun Update Connection-Enterprise Forum...
# 7
HiCan we have a look at the output of :# zoneadm -cvAdditionally, can you decribe the local zone and how it was configured in terms of resource pools, resource sets , and any writeable partitions.Mod
ForumModeratora at 2007-7-12 8:54:23 > top of Java-index,Administration Tools,Sun Update Connection-Enterprise Forum...
# 8

So since we've determined that SC was indeed doing the patches in single user mode, I think my original reply should stand - you either need to wait for 1.1.1 which should be later this month, or the other workaround is to install the patch in multi-user mode like you did manually. You would need to change this hosts' preferences for how it handles the reboots.

dougsca at 2007-7-12 8:54:23 > top of Java-index,Administration Tools,Sun Update Connection-Enterprise Forum...