Patching Best Practices PDF

WS-2700-S10: Solaris
TM
10 Patching Best Practices Course Reference Guide is a sule!ent to
the "e#-#ased training course: WS-2700-S10: Solaris
TM
10 Patching Best Practices$ The guide
resents the %e& concets of the course #ut it does not contain all the content resented in the
course itself$ The guide is intended to #e used as a reference and refresher after ha'ing co!leted
the online course$
(or detailed infor!ation on an& toic resented in this guide) lease refer to the aroriate Solaris 10 S&ste!
*d!inistration guide on docs$sun$co! and the Big*d!in Solaris Patching Center "e#site at
htt:++"""$sun$co!+#igad!in+atches+solaris+$
TM
10 Patching Best Practices Course Reference Guide
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * 1 of 88
Table of Contents
Module 1: .'er'ie" of SolarisTM 10 Patching$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$/
Toic 1: Solaris 10 Patching Philosoh&$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$/
Toic 2: The Solaris 10 Patching Best Practices$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$0
Toic /: What1s 2e3t for Solaris 10 Patching4$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$10
Toic 5: Solaris 10 Patching Resources$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$1/
Module 2: -ntroduction to Solaris 6i'e 7grade$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$10
Toic 1: The *d'antages of 7sing Solaris 6i'e 7grade$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$10
Toic 2: Stes of the Solaris 6i'e 7grade Process$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$18
Module /: Plannin g for Solaris 6i'e 7grade $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$22
Toic 1: Planning S&ste! Prearation and *lternate Boot 9n'iron!ent Creation$$$$$$$$$$$$$$$$$$$$$$$$$$$$22
Toic 2: Planning 7grading+7dating) *cti'ating) and Maintaining$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$2,
Module 5: -nstalling SolarisTM 6i'e 7grade$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$/1
Toic 1: -nstall the Solaris 6i'e 7grade Pac%ages$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$/1
Toic 2: -nstall Re:uired Patches 2eeded #& Solaris 6i'e 7grade$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$/8
Module 0: 7sing Solaris 6i'e 7grade to Create an *lternate Boot 9n'iron!ent$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$/;
Toic 1: Guidelines for Creating an *lternate 7(S Boot 9n'iron!ent$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$/;
Toic 2: Create an *lternate 7(S Root Boot 9n'iron!ent$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$/,
Toic /: Create an *lternate Boot 9n'iron!ent for a <(S Root Pool$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$5/
Module 8: 7grading "ith Solaris 6i'e 7grade$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$00
Toic 1: 7grade an *lternate Boot 9n'iron!ent$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$00
Toic 2: *cti'ate an *lternate Boot 9n'iron!ent$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$08
Module 7: *l&ing Pac%ages and Patches to an *lternate Boot 9n'iron!ent$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$80
Toic 1: *l& Pac%ages and Patches to an *lternate Boot 9n'iron!ent$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$80
Toic 2: *cti'ate an *lternate Boot 9n'iron!ent$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$85
Module ;: Maintaining Solaris 6i'e 7grade Boot 9n'iron!ents$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$8,
Toic 1: (our =e&s of an 9ffecti'e Maintenance Strateg&$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$8,
Toic 2: Creating a Maintenance Plan$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$72
Toic /: Perfor!ing Solaris 6i'e 7grade Maintenance Tas%s$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$7/
TM
Module ,: -ntroduction to >eferred *cti'ation Patching$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$78
Toic 1: What is >eferred *cti'ation Patching4$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$77
Toic 2: ?o" >eferred *cti'ation Patching Wor%s$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$;0
Toic /: >ifference Bet"een >eferred *cti'ation Patching and Solaris 6i'e 7grade$$$$$$$$$$$$$$$$$$$$$;2
Module 10: -ntroduction to the =ernel Patch$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$;/
Toic 1: .'er'ie" of the =ernel Patch$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$;/
Toic 2: .'er'ie" of =ernel Patch -nstallation$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$;0
Toic /: Patch Re@u'enation and the =ernel Patch$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$;7
TM
Module 1: .'er'ie" of Solaris
TM
10 Patching
Topic 1: Solaris 10 Patching Philosophy
Key factors that contributed to the perception
of Solaris 10 patching as comple:
So many patches; hard to pick the right set of patches
Introduction of Zones into Solaris 10 complicated the
creation and testing of patches
Dim Sum Patching - Running a combination of
arious Solaris binaries that hae neer been tested
together
!e" system administrators neer really taught ho"
to patch properly
Point !1: "se Solaris #i$e "pgrade
Solaris #ie $pgrade reduces the do"ntime
and risk associated "ith patching because you
can patch the alternate boot enironment "hile
the system is still in production%
If issues occur after the ne" boot enironment
is actiated& you can reboot the system back
into the original boot enironment and fi' the
issue "ithout impacting production%
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * % of 88
Point !2: &$oid patching li$e systems 'ith
(ones 'hen possible)
$se Solaris #ie $pgrade to patch systems
"ith (ones%
$se the appropriate patch bundles to enable
your systems to use Solaris #ie $pgrade to
patch and upgrade systems "ith non-global
(ones% )or more information see the Solaris
#ie $pgrade Patch Re*uirements%
Point !3: &$oid *+im Sum, patching)
+he ,Dim Sum, patching problem occurs "hen
Solaris 10 users pick and choose "hich patches they
install from arious patch releases instead of
upgrading their systems to a defined baseline%
-s a result& their systems run a combination of arious
Solaris binaries that hae neer been tested together%
+his less-than-ideal approach can lead to a ariety of
system problems%
Point !%: Consistently apply Solaris 10
Patching -est Practices)
-pplying the Solaris 10 Patching .est Practices in
your day-to-day sysadmin routine "ill make
administering and maintaining your systems much
easier%
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * . of 88
Point !.: +o not hesitate to see/ guidance)
Sun /icrosystems "ants to proide the Solaris 10
sysadmin community "ith all the support and guidance
it needs to keep its systems running smoothly and
efficiently%
Sun /icrosystems has set up a ariety of resources to
make your 0ob easier& including1
.ig-dmin
SunSole
Patch 2orner .log
Topic 2: The Solaris 10 Patching -est Practices
10 &l'ays install the latest patch and pac/age
utility patches first0
Patches the patching binaries themseles
3nsures that the patching utilities function correctly%
1btaining the Patch "tilities Patch from SunSol$e
Patch $tilities Patch
#ocated on sunsole%sun%com
!o charge
Different patches for SP-R2 and '45 systems
.efore applying the patch utilities patch& erify that the patch has not been preiously applied to the system1
# patchadd -p | grep Patch: <patch_id>
TM
20 "pgrade to the latest Solaris 10 "pdate
release during your net ma3or maintenance
'indo'0
Includes ne"est features
3nsures a good *uality baseline
)rees up system space
+id 4ou Kno'5
3ach Solaris $pdate contains all the bug fi'es that "ere aailable at the time the release "as built% +hese
patches are pre-applied into the Solaris $pdate image% +his helps make each Solaris $pdate successiely
better *uality%
+he Solaris 10 $pdates are ery intensely tested by a "ide ariety of *uality assurance teams in Sun
/icrosystems% +his is "hy they proide a good *uality baseline% -lso& it means that all of the Solaris
enhancements included in the Solaris $pdate are fully aailable to you%
1btaining the latest Solaris 10 "pdate release
from SunSol$e
Solaris 10 $pdate Release
-ccessed from sunsole%sun%com
!o charge
Read/e file contains step-by-step instructions for
performing the upgrade
)or information on ho" to install a Solaris 10
$pdate& see the Solaris 10 Release and Installation
2ollection on docs%sun%com%
TM
30 Keep as up to date as possible 'ith the
contents of the Sun &lert patch cluster in
bet'een ma3or maintenance 'indo's0
+he patches contained in the Sun -lert patch cluster1
-re considered to be the most important and highly
recommended patches for Solaris 10
Proide the minimum amount of change re*uired to
address kno"n Security& Data 2orruption& and
-ailability issues
+id 4ou Kno'5
+he Sun -lert patch cluster contains Solaris operating system 67S8 patches only% +he cluster proides all
aailable patches that address Sun -lert issues for the Solaris 7S itself%
1btaining the Sun &lert Patch Cluster from
SunSol$e +emonstration
Sun -lert Patch 2luster1
Is located on sunsole%sun%com
Re*uires alid support contract to do"nload
2ontains step-by-step instructions in the Read/e file
for performing the upgrade

TM
Sun &lert Program
Proides "eekly notifications adising of ne" and
updated Sun -lerts to 2ontract Sun 2ustomers%
!otifications detail important hard"are and soft"are
issues that may pose a risk to your computing
enironment
!on-contract subscribers hae access to Sun -lerts
and Patches for Security-related issues only%
+o sign up for Sun -lert notifications on SunSole&
go to the Sun -lert subscription page%
%0 "se Solaris #i$e "pgrade to patch or
upgrade an inacti$e boot en$ironment0
-oids much of the risk and do"ntime associated
"ith patching the lie boot enironment
Proides a simple roll-back mechanism%
+id 4ou Kno'5
9hen patching a lie boot enironment& there:s a risk of interaction bet"een the ne"ly patched ob0ects and
old ersions loaded in memory% .ecause Solaris #ie $pgrade "orks on an inactie or alternate copy of the
boot enironment& the issue of the interaction bet"een the ne"ly patched ob0ects and old ersions loaded in
memory does not arise% Solaris #ie $pgrade also remoes the need for interim reboots "hen patching early
Solaris 10 releases& thereby minimi(ing the do"ntime and risk associated "ith patching%
+he factory pre-install images proided on Sun e*uipment no" contain space for an alternate boot
enironment for use by #ie $pgrade by default%
TM
.0 8f you are going to use Solaris #i$e
"pgrade to patch systems 'ith non9global
(ones that are running Solaris 10 8:06
;"pdate %< or an earlier Solaris 10 "pdate
release= apply the Solaris 10 #i$e "pgrade
>ones Starter Patch -undle0
Patches the system up to the leel re*uired to enable
the use of #ie $pgrade in a basic (ones enironment
-fter the patch bundle has been applied& Solaris #ie
$pgrade can be used to patch (ones in an alternate
boot enironment
1btaining the Solaris 10 #i$e "pgrade >ones Starter Patch -undle from SunSol$e
+emonstration
Solaris 10 #ie $pgrade Zones Starter Patch .undle
#ocated on sunsole%sun%com
Re*uires alid support contract to do"nload
Read/e file contains step-by-step instructions for performing the upgrade
>ones Tips
9hen patching in a (ones enironment& consider the
follo"ing1
$se Solaris #ie $pgrade
$se Zones ;$pdate on -ttach<
=reatly decreases comple'ity of patching
(ones
Syncs up the patch leel of non-global
(ones "ith the global (one
Improes (ones patching performance
)or more information on Zones ,$pdate on -ttach,&
see the Patch 2orner blog%
TM
"sing ?"pdate on &ttach? to Patch >ones
10 Detach the non-global (ones%
2$ -pply patches& including >ernel patch 1?@1?@-0A&
to the global (one%
/$ Reattach the non-global (ones "ith ;$pdate on
-ttach%<
Note: ;$pdate on -ttach< "ill not remoe any
"ithdra"n patches from the non-global (one%
.ecause ,$pdate on -ttach, only "orks for updates&
not do"n-re:ing& you need to remoe any "ithdra"n
patches from all (ones before detaching%
Topic 3: @hatAs Bet for Solaris 10 Patching5
>ones Parallel Patching Cnhancement
-ailable "ith Solaris 10 $pdate 4
Paralleli(es the patching process
Improes (ones patching performance
Reduces the maintenance "indo"s re*uired for
Zones systems
+id 4ou Kno'5
Bust a point of clarification regarding Zones Parallel Patching1 you do not need to upgrade to Solaris 10
$pdate 4 to use Zones Parallel Patching; this feature is currently aailable to all customers on all Solaris 10
releases% -ll you hae to do is install patch utilities patch 11ACDE-55 6SP-R28 F 11ACDD-55 6'458 and a"ay
you go% +he difference no" is that the patch is pre-applied into Solaris 10 $pdate 4 and "ill be pre-applied
into all subse*uent Solaris $pdates%
8mpro$ed Patch Space Chec/s Dunctionality
+he enhancements to the patch space checks functionality in the patchadd command "ill improe the (ones
patching e'perience
TM
Eeturn Code -ac/ Cnhancement in patchadd
/ore fault codes hae been added to the Return 2ode
.ack in patchadd& so that the reason for the non-
install "ill be readily identifiable%
Pre9flight Chec/s Tool for patchadd
+he pre-flight checks tool for patchadd "ill ensure
that a system is ready to be patched% )or more
information on the Patching Pre-flight 2heck 6:ppc:8
tool& go to
http1FFblogs%sun%comFpatchFentryFpatchingGpreGflightG
checksGppc%
Patch Cluster 8mpro$ements
Improements to patch clusters include1
$sing a ne" install_cluster script in the Recommended and Sun -lert patch clusters
/erging Recommended and Sun-lert patch clusters into a single cluster
2hanges to the backend process to improe cluster *uality
)or more information about the patch cluster improemetns& go to the Patch Cluster and Patch -undle
do'nload page0
&dditional 8mpro$ements
Sun /icrosystems is also "orking on the follo"ing
improements1
Patch Product Identifier is designed to tie a
product to a patch more closely%
Patch 3ntitlement implementation "ill
become stricter 6see the Soft"are $pdate
3ntitlement Policy for Solaris8
!e" Patch )inder is planned to proide a
more refined set of search results%
Solaris +est 2ore +eam is proactiely reie"ing test
coerage of ne" features being added to Solaris
$pdate Releases%
TM
+id 4ou Kno'5
)uture reisions of the Patch)inder +ool "ill contain contain further enhancements1
Patch access entitlement information
Shopping cart functionality
Patch dependency resolution
Patch install order resolution
Patch set do"nload 6effectiely Dynamically =enerated Patch 2lusters8
+o try the ne" Patch)inder +ool& go to http1FFsunsole%sun%comFpatchfinder%
)or more information see the related entry on the
http1FFblogs%sun%comFpatchFentryF(onesGparallelGpatchingGfeatureGno"%
@here to Dind Fore 8nformation
Hisit the .ig-dmin Solaris Patching 2enter and the Patch 2orner blog "ebsite for the latest updates%
Topic %: Solaris 10 Patching Eesources
Eesources for Patching Support and
+ocumentation
$se these "ebsites to make your 0ob easier1
.ig-dmin
SunSole
Patch 2orner
TM
-ig&dmin
.ig-dmin is Sun /icrosystems: main "ebsite for
system administrator resources and community%
http1FF"""%sun%comFbigadmin
SunSol$e
Iou can find the latest Solaris 10 patches and soft"are
updates for do"nload on SunSole%
http1FF"""%sunsole%sun%comF
Patch Corner
Patch 2orner is a blogging site dedicated to proiding
the latest information on Solaris 10 patching issues and
resolutions%
http1FFblogs%sun%comFpatchF
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * 1% of 88
Module 2: -ntroduction to Solaris 6i'e 7grade
Topic 1: The &d$antages of "sing Solaris #i$e "pgrade
#i$e "pgrade: & -etter @ay to Patch Solaris 10
Solaris #ie $pgrade reolutioni(es the "ay that you
add patches to Solaris products and can sae you hours of
time and effort%
+he genius of Solaris #ie $pgrade is that it creates an
identical copy of your Solaris image on an inactie disc
partition% +his is called an alternate boot enironment& or
-.3% Iour running image is no" kno"n as the primary
boot enironment& or P.3%
7nce this copy is created& you apply the recommended
patches or upgrade to the alternate boot enironment
"ithout interrupting your actie system%
7nce you:e made all the necessary changes& you simply
restart the system to the alternate boot enironment and
you:re finishedJ
@hat Can 4ou +o @ith #i$e "pgrade5
Solaris #ie $pgrade enables you to duplicate a boot enironment "ithout affecting the currently running
system%
Iou can1
$pgrade an alternate boot enironment
2hange the current boot enironment:s disk configuration
/aintain numerous boot enironments "ith different images
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * 1. of 88
The -enefits of #i$e "pgrade
$sing Solaris #ie $pgrade has four main benefits1
+here is no system do"ntime "hile you apply
the patches
+he patching process is less comple'
+he patching process can be completed at your
pace and on your schedule
If a problem occurs& you can *uickly reert to
the original boot enironment "ith a simple
series of commands
Topic 2: Steps of the Solaris #i$e "pgrade Process
@hat &re the Steps of the Solaris #i$e "pgrade
Process5
1% Prepare the system for Solaris #ie $pgrade%
C% 2reate an alternate boot enironment%
?% $pgrade or update the alternate boot
enironment%
E% -ctiate the alternate boot enironment& and
D% /aintain the alternate boot enironment%
TM
10 Prepare the System for Solaris #i$e "pgrade
+he first step of the process is to prepare the system for
Solaris #ie $pgrade% During this step you install the
Solaris #ie $pgrade soft"are packages on your system
as "ell as apply all the re*uired patches listed in Infodoc
C054EE% Infodoc C054EE contains the patch re*uirements
a system must hae in order to use the Solaris #ie
$pgrade soft"are%
+id 4ou Kno'5
Heritas no" supplies scripts for H'H/ 1%D to enable H'H/ to "ork "ith #ie $pgrade% +hese scripts are
aailable from Heritas%
20 Create an &lternate -oot Cn$ironment
-fter you hae prepared the system for Solaris #ie
$pgrade& the ne't step is to use Solaris #ie $pgrade to
create an alternate boot enironment% +his alternate boot
enironment proides a place to copy critical system
components "here they can be updated "ithout
interrupting the system%
-s you are creating the alternate boot enironment& you
can reorgani(e the disk& customi(e file systems& and
copy critical system components to the alternate boot
enironment%
+he graphic on this page sho"s the process of creating
an alternate boot enironment using Solaris #ie
$pgrade%
TM
30 "pgrade and "pdate an &lternate -oot
Cn$ironment
-fter you hae created an alternate boot enironment&
you can upgrade or update it%
-n upgrade consists of installing a Solaris 10 soft"are
update release% -n update consists of adding indiidual
patches& patch clusters& patch bundles& or packages to the
alternate boot enironment%
.oth the soft"are releases and patches and packages are
aailable for do"nload from sunsole%sun%com%
Iou use the luupgrade command to upgrade an
alternate boot enironment and to apply patches and
packages%
+he graphic on this page sho"s ho" to upgrade an
alternate boot enironment using Solaris #ie $pgrade%
TM
+id 4ou Kno'5 9 "pgrading 'ith a Dlash &rchi$e
- flash archie is a mirrored image of a system that can be installed on another system of the same
architecture%
Rather than an upgrade& you can install a Solaris )lash archie on an alternate boot enironment% +he Solaris
)lash installation feature enables you to create a single reference installation of the Solaris 7S on a system%
+his system is called the master system% +hen& you can replicate that installation on a number of systems that
are called clone systems% In this situation& the alternate boot enironment is a clone%
%0 &cti$ate an &lternate -oot Cn$ironment
9hen you are ready to s"itch to the alternate boot
enironment that you:e patched or upgraded& you
simply actiate the alternate boot enironment and then
restart the system% )iles are synchroni(ed bet"een the
primary and alternate boot enironments the first time
that you restart to the alternate boot enironment%
9hen you restart the system& the configuration that you
installed on the alternate boot enironment is actie% +he
original primary boot enironment then becomes another
Iou use the luactiate command to actiate an alternate
boot enironment% +he graphic on this page sho"s a
s"itch after a restart to an alternate boot enironment%
.0 Dall -ac/ to the 1riginal -oot Cn$ironment
If a problem occurs& you can *uickly reert to the original primary boot enironment "ith an actiation and
restart%
$sing the fall back procedure takes only enough time to restart the system& "hich is much *uicker than
backing up and restoring the original% +he alternate boot enironment that had an issue is presered% +he
issue can then be analy(ed%
TM
+here are different "ays to fall back to the preious boot enironment% +he problem descriptions on this
screen describe Solaris #ie $pgrade fallback problems and actions%
Problem &ction
+he ne" boot enironment boots successfully& but you
are not happy "ith the results
Run the luactivate command "ith the name
of the preious boot enironment and reboot%
'45F'5E only1
Starting "ith the Solaris 10 1F05 release& you
can fall back by selecting the original boot
enironment that is found on the =R$. menu%
+he original boot enironment and the ne" boot
enironment must be based on the =R$.
soft"are%
+he ne" boot enironment does not boot% .oot the fallback boot enironment in single-
user mode& run the luactivate command&
and reboot%
Iou cannot boot in single-user mode% Perform one of the follo"ing1
.oot from DHD or 2D media or a net
installation image
/ount the root 6F8 file system on the fallback
boot enironment
Run the luactivate command and reboot
TM
20 Faintain an &lternate -oot Cn$ironment
7nce you hae updated your Solaris system& Solaris
#ie $pgrade allo"s you to keep the system in optimal
condition by completing a ariety of maintenance tasks%
+hese include1
Hie"ing boot enironment status
$pdating an alternate boot enironment
Deleting an alternate boot enironment& and
2hanging the name of an alternate boot
enironment
)or a complete list of maintenance tasks& see the Solaris
10 10/08 Installation Guide: Solaris Live Upgrade and
Upgrade Planning .
It contains step-by-step instructions on ho" to complete
each step of the Solaris #ie $pgrade process%
Module /: Plannin
TM
g for Solaris 6i'e 7grade
Topic 1: Planning System Preparation and &lternate -oot Cn$ironment Creation
Planning for #i$e "pgrade
Steps of the Solaris #ie $pgrade Process
10Prepare the system for Solaris #ie $pgrade%
202reate an alternate boot enironment%
30$pgrade or update the alternate boot enironment%
%0-ctiate the alternate boot enironment
.0/aintain the alternate boot enironment%
TM
Step 1:
Prepare the System for Solaris #i$e "pgrade
+o prepare the system for Solaris #ie $pgrade1
Install the Solaris #ie $pgrade soft"are
packages%
-pply all the re*uired patches listed in Infodoc
C054EE%
Step 2:
Create an &lternate -oot Cn$ironment
G +is/ Space EeHuirements
/aking a duplicate of the current boot enironment
enables you to1
$pgrade your systems to a later Solaris 10
$pdate release "ithout impacting the
production enironment
)all back to the current boot enironment if the
alternate boot enironment should fail for any
reason
+he disk on the alternate boot enironment must be
able to sere as a boot deice%
Some systems restrict "hich disks can sere as a boot
deice%
Refer to your system:s documentation to determine if
any boot restrictions apply%
2heck that the disk is formatted properly%
TM
&re 4our +is/s Dormatted Properly5
+o ensure that your disk is formatted properly1
Identify slices large enough to hold the file systems to be copied%
Identify file systems that contain directories that you "ant to share bet"een boot enironments rather
than copy% If you "ant a directory to be shared& you need to create a alternate boot enironment "ith
the directory put on its o"n slice% +he directory is then a file system and can be shared "ith future boot
enironments%
For more information about creating separate file systems for sharing, see ;=uidelines for Selecting
Slices for Shareable )ile Systems< in the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and
Upgrade Planning %
+id you /no'5
$p until no" "e:e been coering $)S& but "e "ill be coering Z)S
+/
later in the course%
Cnough +is/ Space5
Solaris #ie $pgrade inoles haing t"o simultaneous boot enironments& so enough disk space for both is a
prere*uisite% )or general guidelines about the amount of disk space re*uired& refer to the Solaris 10 10/08
Installation Guide: Planning for Installation and Upgrade- and reie" the section titled -llocating Disk and
S"ap Space.
Special considerations:
9hen using #ie $pgrade in an enironment "here / and /var are separate& and if mirroring them to ne" disk
slices 6be it same or different disk 8& you "ill need at least the space consumed by df -k /var and df -k /, and
then add some e'tra space for future gro"th in /var and /. .e a"are that due to issues such as the lack of
sparse file support in #ie $pgrade& files like lastlog "ill get replicated in full& so if ls sho"s the file lastlog is
seeral gigabytes in si(e& then the alt root "ill also need to be seeral gigabytes in si(e and not the fe"
megabytes that the file actually consumes on disk%
In a system configuration "ith non-global (ones& if they are on shared disk 6i%e% the disk is shared bet"een both
boot en:s8& then each non-global (one is physically copied on disk& so if each (one has K gigabyte& you "ill
need an additional K gigabyte to copy each (one for #$%

If (onepath is a (fs dataset& cloning is used and ery little space "ill be consumed on the pool% If (onepath is a
directory in (fs dataset& then ne" (one is created using a dataset as (onepath& and old (onepath is copied to ne"
(onepath%
)or more information& refer to the Solaris 10 10/08 Installation Guide: Planning for Installation and Upgrade.
TM
Step 2: Create an &lternate -oot Cn$ironment
G Dile Systems Iuidelines
)ollo" these guidelines for specifying file systems for
the alternate boot enironment1
Specify one -m option for root 6F8
/erge critical file systems
#imit file systems
Don:t duplicate mounts
Dile System Iuidelines
Iou must specify one -m
option for the root 6F8 file
system for the alternate
boot enironment%
Iou must specify one -m option for the root 6F8 file system for the alternate boot
enironment% If you run lucreate "ithout the -m option& the 2onfiguration menu is
displayed% +he 2onfiguration menu enables you to customi(e the alternate boot
enironment by redirecting files onto ne" mount points%
3'it the 2onfiguration menu and rerun the lucreate command "ith the -m option%
Some file systems are
merged%
-ny critical file systems that e'ist in the current boot enironment and that are not
specified in a -m option are merged into the ne't highest-leel file system created%
7nly the file systems that
are specified by the -m
option are created on the
alternate boot
enironment%
7nly the file systems that are specified by the -m option are created on the alternate
boot enironment% +o create the same number of files systems that is on your
current system& you must specify one -m option for each file system to be created%
)or e'ample& a single use of the -m option specifies "here to put all the file
systems% Iou merge all the file systems from the original boot enironment into the
one file system that is specified by the -m option% If you specify the -m option
t"ice& you create t"o file systems% If you hae file systems for root 6F8& Fopt& and
Far& you "ould use one -m option for each file system on the alternate boot
enironment%
Do not duplicate a mount
point%
Do not duplicate a mount point% )or e'ample& you cannot hae t"o root 6F8 file
systems%
+id 4ou Kno'5
If you "ould like to use multiple disk partitions for different file systems& you need to use a -m option for each
slice% )or e'ample& the follo"ing series of commands creates a separate slice for root6F8& Fusr& and Far1
-mF1FdeFdskFc0t0d0s01ufs
-mFusr1FdeFdskFc0t0d0s?1ufs
-mFar1FdeFdskFc0t0d0s@1ufs
TM
1$erlapping Slices
Do not oerlap slices "hen reslicing disks% If this condition e'ists& the alternate boot enironment appears to
hae been created& but "hen actiated& the boot enironment does not boot% +he oerlapping file systems might
be corrupted%
)or Solaris #ie $pgrade to "ork properly& the fstab file on the actie boot enironment must hae alid
contents and must hae an entry for the root 6F8 file system at the minimum%
+id 4ou Kno'5
+o 2reate a .oot 3nironment 9ith R-ID-1 Holumes 6/irrors8 use the follo"ing link1
http1FFdocs%sun%comFappFdocsFdocF4C0-DC?4Fchapter-??LlMenNaMie"
See the section called ,2reate a .oot 3nironment "ith R-ID-1 Holumes< and look at e'amples E-A through
E-1?%
Step 2: Create an &lternate -oot Cn$ironment
G Customi(ing the Cn$ironment
Iou can customi(e the alternate boot enironment by1
3'cluding directories and files
Reinstating specified subdirectories or files
under the e'cluded directory
lucreate Command 1ptions for Eemo$ing and Eestoring +irectories and Diles
Slice for the root
6F8 )ile System
9hen you create an inactie boot enironment& you need to identify a slice "here the root
6F8file system is to be copied% $se the follo"ing guidelines "hen you select a slice for the
root 6F8 file system% +he slice must comply "ith the follo"ing1
/ust be a slice from "hich the system can boot
/ust meet the recommended minimum si(e
2an be on different physical disks or the same disk as the actie root 6F8 file system
2an be a Heritas Holume/anager olume 6H'H/8% If H'H/ olumes are configured on
your current system& the lucreate command can create a ne" boot enironment% 9hen the
data is copied to the ne" boot enironment& the Heritas file system configuration is lost
and a $)S file system is created on the ne" boot enironment%
Slices for/irrored
)ile Systems
Iou can create a ne" boot enironment that contains any combination of physical disk
slices& Solaris Holume /anager olumes& or Heritas Holume /anager olumes% 2ritical
TM
file systems that are copied to the ne" boot enironment can be of the follo"ing types1
- physical slice
- single-slice concatenation that is included in a R-ID-1 olume 6mirror8% +he slice that
contains the root 6F8 file system can be a R-ID-1 olume%
- single-slice concatenation that is included in a R-ID-0 olume% +he slice that contains
the root 6F8 file system can be a R-ID-0 olume% 9hen you create a ne" boot
enironment& the lucreate -m command recogni(es the follo"ing three types of deices1
- physical slice in the form of FdeFdskFcwtxds!
- Solaris Holume /anager olume in the form of FdeFmdFdskFdnu"
- Heritas Holume /anager olume in the form of FdeF'FdskFvolu"e#na"e%
If H'H/ olumes are configured on your current system& the lucreate
command can create a ne" boot enironment% 9hen the data is copied to
the ne" boot enironment& the Heritas file system configuration is lost and
a $)S file system is created on the ne" boot enironment%
Slice for a
S"apHolume
See ;2onfiguring S"ap for the !e".oot 3nironment< in Solaris 10 10F04 Installation
=uide1 Solaris #ie $pgrade and $pgrade Planning%
Slices for
Shareable )ile
Systems
Solaris #ie $pgrade copies the entire contents of a slice to the designated ne" boot
enironment slice% Iou might "ant some large file systems on that slice to be shared
bet"een boot enironments rather than copied to consere space and copying time% )ile
systems that are critical to the 7S such as root 6F8 and Far must be copied% )ile systems
such as Fhome are not critical file systems and could be shared bet"een boot
enironments% Shareable file systems must be user-defined file systems and on separate
s"ap slices on both the actie and ne" boot enironments% Iou can reconfigure the disk
seeral "ays& depending your needs%
TM
Topic 2: Planning "pgrading:"pdating= &cti$ating= and Faintaining
Step 3: "pgrade or "pdate the &lternate -oot
Cn$ironment
Iou can use Solaris #ie $pgrade to1
$pgrade your systems to the latest Solaris 10
$pdate release%
-dd patches and packages to a system%
Iou use the luupgrade command to perform both
upgrades and updates%
Reie" the soft"are upgrade and patch information
aailable on .ig-dmin as part of your planning
actiities%
"pgrading and "pdating 4our &lternate -oot Cn$ironment
)or more information about upgrading an alternate boot enironment& see ;$pgrading a .oot 3nironment< in
the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning.
Step %: &cti$ate the &lternate -oot
Cn$ironment
+o actiate an alternate boot enironment& you1
$se the luactiate command%
Restart the system%
)iles are synchroni(ed bet"een the preious primary
boot enironment and the ne"ly created alternate boot
enironment%
Solaris #ie $pgrade proides fallback commands if
something didn:t go as planned and you need to reert
to the preious system configuration%
TM
&cti$ating an &lternate -oot Cn$ironment
)or information about actiating an alternate boot enironment& see ;-ctiating a .oot 3nironment< in the
Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning%
)or information about synchroni(ing the actie and alternate boot enironments& see ;Synchroni(ing )iles
.et"een .oot 3nironments< in the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade
Planning %
Step .: Faintain the &lternate -oot
Cn$ironment
It is important to maintain your alternate boot
enironments%
)or recommendations and best practices on deeloping
a patch management maintenance strategy& see
.ig-dmin and the Patch 2orner blog%
9ith Solaris #ie $pgrade you can perform the
follo"ing maintenance tasks1
Display the status of all boot enironments
Hie" the configuration of a boot enironment
$pdate a preiously configured boot
enironment
Delete an inactie boot enironment
Faintaining an &lternate -oot Cn$ironment
)or more information about maintaining Solaris #ie $pgrade& see ?Faintaining Solaris #i$e "pgrade
-oot Cn$ironments? in the Solaris 10 10:08 8nstallation Iuide: Solaris #i$e "pgrade and
"pgrade Planning0
TM
Module 5: -nstalling Solaris
TM
6i'e 7grade
Topic 1: 8nstall the Solaris #i$e "pgrade Pac/ages
Ietting Started
Documents that e'plain ho" to install the Solaris #ie $pgrade soft"are packages1
Solaris 10 10F04 Installation =uide1 Solaris #ie $pgrade and $pgrade Planning
6http1FFdocs%sun%comFappFdocsFdocF4C0-DC?48
Infodoc C054EE1 SolarisO+/P #ie $pgrade Soft"are1 Patch Re*uirements
6http1FFsunsole%sun%comFsearchFdocument%doLassetkeyM1-51-C054EE-1 8
+id 4ou Kno'5
Infodoc C054EE "as formerly Infodoc @C0AA%
Key Point to Eemember
If using #$ to upgrade the 7S& the release of the
Solaris #ie $pgrade packages must match the release
of the 7S you are upgrading to%
)or more information& see Infodoc C054EE%
TM
+id 4ou Kno'5
)or customers "ho may hae policies in place that make it difficult to upgrade but okay to patch a system& Sun
/icrosystems proides corresponding Solaris 10 Patch .undles for each Solaris 10 $pdate starting "ith Solaris
10 0DF04%
+he Solaris 10 Patch .undle "ill not suit eeryone% It is a large collection of patches and& therefore& slo" to
do"nload and install%
)or customers "ho "ant to bring all their systems to the latest Solaris 10 release patch leel& installing or
upgrading to the latest Solaris 10 release image remains the recommended option "here feasible% +he Solaris
10 Patch .undle "as simply created in response to a demand from customers for an alternatie option "here
upgrading "as not feasible due to internal customer policies%
.ecause Solaris $pdate releases are intensely tested& the patch bundle proides a good *uality patch ,baseline,
on "hich to standardi(e systems%
"pgrading Solaris 10 to a #ater Solaris 10
"pdate
)or upgrading Solaris 10 to a later Solaris 10 update
release& there are t"o separate scenarios that apply
depending on the Solaris $pdate release leel of the
system being upgraded and the Solaris $pdate release
that is being upgraded to%
Scenario 11 If the system being upgraded is installed
"ith Solaris 10 11F05 or an earlier Solaris 10 update1
10 -dd SUNWlucfg package from Solaris 10
04F0@ media or from any Solaris 10 $pdate
release media subse*uent to 04F0@1
# pkgadd SUNWlucfg
20 -dd the latest #ie $pgrade patch from
SunSole for your architecture1
1C1E?0 6SP-R28
1C1E?1 6'45 8
Senario 1 If the system being upgraded is installed "ith Solaris 10 04F0@ or a later Solaris 10 update& 0ust add
the latest #ie $pgrade patch from SunSole for your architecture1
1C1E?0 6SP-R28
1C1E?1 6'458
3nsure you hae the latest patch utilities patches installed on your system%
TM
Note1 Sun strongly recommends that customers apply the latest patch utility patches to ensure they hae up-
to-date patch utility functionality and bug fi'es prior to performing any other patch installation or remoal%
+id 4ou Kno'5
+he patch utilities patches are located on SunSole%
+o do"nload the patches1
1$ =o to sunsole%sun%com%
2$ )rom SunSole:s main page select the Patches and $pdates link%
/$ #ocate the ,)ind a specific soft"are update 6patch8, section on the #atest Patch $pdates page% +he
patch utility patches are listed in the #atest Patch $tilities Patches pull-do"n menu%
5$ Select and do"nload the patch utilities patches for your system architecture from the pull-do"n menu%
8nstall the Solaris #i$e "pgrade Patch
G Step 1: -ecome superuser or assume an
eHui$alent role0
+id 4ou Kno'5
R.-2 is a security feature for controlling user access to tasks that "ould normally be restricted to superuser%
R.-2 collects superuser capabilities into rights profiles%
Rights profiles are assigned to special user accounts that are called roles%
- user can then assume a role to do a 0ob that re*uires some of superuser:s capabilities%
)or more information about roles& see ;2onfiguring R.-2 6+ask /ap8< in Sste" $d"inistration Guide:
Se%urit Servi%es%
TM
G Step 2: Create a directory to do'nload the
patch to if storing the patch on a local dis/0
Don:t make the patch directory a subdirectory of Ftmp
instead of FarFtm because if you had to reboot for
any reason& all the files under a Ftmp subdirectory
"ould be gone% 9hereas in a FarFtmp directory& the
files are safe%
G Step 3: +o'nload the patch from SunSol$e0
+id 4ou Kno'5
+o obtain a patch from SunSole& complete these steps%
1% -ccess sunsole%sun%com%
C% -ccept the SunSole #icense -greement%
?% 9hen the SunSole main page appears& select Patches and $pdates%
E% 3nter the patch ID in the Patch)inder field and click )ind Patch%
D% 9hen the R3-D/3 file displays& read through the file and pay special attention to these sections1
Installation Re*uirements
Re*uired Patches
Patch Installation Instructions
Special Install Instructions
5% 2lick on Q++P to the right of Do"nload Patch to do"nload the patch%
TM
G Step %: Change to the patch directory
G Step .: "n(ip the patch0
G Step 2: 8nstall the patch 'ith the patchadd
command
R patchadd pat&#to#pat%&esFpat%&#id
Note1 patchGid is the patch number or numbers%
Separate multiple patch names "ith a space%
+id 4ou Kno'5
-f the directory you hae created for patches contains only the patches you "ant to install 6and not additional
patches that you don:t "ant to install8& there:s no need to list the PatchIDs on the command line; you can 0ust
specify the directory that contains the patches% )or e'ample)
# patchadd - !"ar!t#p!lupatches
Note1 Starting "ith ersion 10 of the Solaris operating system& patchadd performs alidity and dependency
checking among a collection of patches that you specify "ith the -/ source specifier%
99 Step 6: Eeboot the system if necessary0 Certain patches reHuire a reboot to be effecti$e0
2ertain patches re*uire a reboot to be effectie% 2heck the R3-D/3 file for patch 1C1E?1-?4 for details%
TM
Topic 2: 8nstall EeHuired Patches Beeded by Solaris #i$e "pgrade
8nstall EeHuired Patches Beeded by Solaris
#i$e "pgrade
Documents that e'plain ho" to install the re*uired
patches for Solaris #ie $pgrade:
Infodoc C054EE1 SolarisO+/P #ie $pgrade
Soft"are1 /inimum Patch Re*uirements
6http1FFsunsole%sun%comFsearchFdocument%doL
assetkeyM1-51-C054EE-1 8
Solaris 10 10F04 Installation =uide1 Solaris
#ie $pgrade and $pgrade Planning
6http1FFdocs%sun%comFappFdocsFdocF4C0-DC?48
Key Points to Eemember
Re*uired patches for Solaris #ie $pgrade1
3nsure correct operation of Solaris #ie
$pgrade on a particular 7S ersion
Potentially fi' defects in Solaris #ie $pgrade
as "ell as fi' defects in components that
Solaris #ie $pgrade depends on
+id 4ou Kno'5
-n addition to fi'ing defects& the re*uired patches support the features that are part of the 7S ersion that you
are upgrading to%
TM
8nstall the EeHuired Patches Beeded by
Solaris #i$e "pgrade
+o utili(e all aailable Solaris #ie $pgrade
functionality 6such as support for non-global (ones and
Z)S root8& install the additional patches listed in
Infodoc C054EE for your architecture%
+o minimi(e risk and do"ntime& use Solaris #ie
$pgrade to1
2reate an alternate boot enironment
Install the additional patches listed in Infodoc
C054EE
-ctiate the alternate boot enironment
+id 4ou Kno'5
Proided specifically for use on systems "ith non-global (ones that are running Solaris 10 04F0@ 6$pdate E8 or
an earlier Solaris 10 $pdate& the Solaris 10 #ie $pgrade Zones Starter Patch .undle contains the set of
patches needed to proide Solaris #ie $pgrade "ith support for (ones on $)S file systems% It:s primary use is
to simplify the task of patching early Solaris 10 $pdates "ith the necessary multiple kernel patches and
associated system reboots%
9hen the patch bundle is installed& the leel of functionality proided is sufficient to enable use of Solaris #ie
$pgrade on these systems "ithout the need to apply further patches to the actie boot enironment%
+he Solaris 10 #ie $pgrade Zones Starter Patch .undle is aailable from the SunSole Patch 2luster and
Patch .undle do"nload page at http1FFsunsole%sun%comFsho"%doLtargetMpatchesFpatch-access%
TM
Module 0: 7sing Solaris 6i'e 7grade to Create an *lternate Boot 9n'iron!ent
Topic 1: Iuidelines for Creating an &lternate "DS -oot Cn$ironment
Dile Systems and the &lternate -oot Cn$ironment
Solaris #ie $pgrade distinguishes bet"een t"o file system types1
2ritical file systems1 re*uired by the Solaris 7S
Shareable file systems1 user-defined files
)ile systems can be customi(ed before being copied to the alternate boot enironment% Shareable file systems
are shared bet"een boot enironments by default% S"ap can be shared& split& and merged%
+id 4ou Kno'5
Solaris #ie $pgrade distinguishes bet"een t"o file system types1 critical file systems and shareable%
2ritical file systems1 2ritical file systems are re*uired by the Solaris 7S% +hese file systems are separate mount
points in the fstab of the actie and inactie boot enironments% +hese file systems are al"ays copied from the
source to the inactie boot enironment% 2ritical file systems are sometimes referred to as nonshareable%
Shareable file systems1 Shareable file systems are user-defined files& such as Fe'port& that contain the same
mount point in the fstab in both the actie and inactie boot enironments% +herefore& updating shared files in
the actie boot enironment also updates data in the inactie boot enironment% 9hen you create an alternate
boot enironment& shareable file systems are shared by default%
)or $)S file systems& s"ap is a special shareable olume% #ike a shareable file system& all s"ap slices are
shared by default% .ut& if you specify a destination directory for s"ap& the s"ap slice is created%
Iuidelines for Creating an &lternate "DS -oot Cn$ironment
)ollo" these guidelines for creating an alternate $)S root boot enironment1
$se the lucreate command "ith the -m option to specify "hich file systems and the number of file
systems to be created in the alternate boot enironment%
Specify the e'act number of file systems to be created by repeating the -m option%
Iou must specify one -m option for the root 6F8 file system for the alternate boot enironment%
-ny critical file systems that e'ist in the current boot enironment and are not specified in a -m option
are merged into the ne't highest-leel file system created%
7nly the file systems that are specified by the -m option are created on the alternate boot enironment%
TM
Do not duplicate a mount point%
+id 4ou Kno'5
If you run lucreate "ithout the -# option& the 2onfiguration menu is displayed% +he 2onfiguration menu
enables you to customi(e the alternate boot enironment by redirecting files onto ne" mount points%
Solaris #i$e "pgrade +is/ EeHuirements
Disk Re*uirement -ctiities
3stimate the file system si(e that is needed to
create a boot enironment%
3nsure the disk on the alternate boot
enironment is able to sere as a boot deice%
3nsure the disk on the alternate boot
enironment is formatted properly%
Identify slices large enough to hold the
file systems to be copied%
Identify file systems that contain
directories that you "ant to share bet"een
boot enironments rather than copy%
Topic 2: Create an &lternate "DS Eoot -oot Cn$ironment
-efore 4ou Create an &lternate -oot
Cn$ironment for the Dirst Time
.efore you create an alternate $)S root boot
enironment for the first time1
Reie" the guidelines for creating an alternate
$)S root boot enironment in the Solaris 10
10/08 Installation Guide: Solaris Live Upgrade
and Upgrade Planning
6http1FFdocs%sun%comFappFdocsFdocF4C0-DC?48%
Determine disk space re*uirements for the
3nsure that the disk on the alternate boot
enironment can sere a as boot deice; it has
an S/I label on it%
2heck that the disk has been formatted
properly%
TM
Create an &lternate "DS -oot Cn$ironment
for the Dirst Time
9 Step 1: -ecome superuser or assume an
eHui$alent role
TM
9 Step 2: Create the alternate boot en$ironment:
# lucreate $-% &BE_description&' -c BE_name (
-# mountpoint:device[,metadevice]:fs_options $-# )))' -n BE_name
Note1 +his command takes a "hile to complete%
+id 4ou Kno'5
)or instructions on ho" to perform other tasks "ithin the alternate boot enironment& such as merging and
splitting file systems& copying a shareable file system& using a Solaris )lash -rchie& using R-ID-1 Holumes&
and customi(ing content& see the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade
Planning%
& Closer #oo/ at the lucreate Command
+he follo"ing definitions describe each part of the command used to create an alternate $)S root boot
enironment sho"n aboe1
-- '()#des%ription' 67ptional8 3nables the creation of an alternate boot
enironment description that is associated "ith the
alternate boot enironment name 6()#na"e8% +he
description can be any length and can contain any
characters%
-c ()#na"e -ssigns the name ()#na"e to the actie boot
enironment% +his option is not re*uired and is only
used "hen the first boot enironment is created% If you
run lucreate for the first time and you omit the -c
option& the soft"are creates a default name for you%
-m "ountpoint 2an be any alid mount point or S 6hyphen8& indicating
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * %0 of 88
a s"ap partition% +he file systems that are specified as
arguments to -m can be on the same disk or they can be
spread across multiple disks% $se this option as many
times as needed to create the number of file systems
that are needed%
devi%e can be one of the follo"ing1 +he name of a disk deice& of the form
FdeFdskFc"t'dys(
+he name of a Solaris Holume /anager
olume& of the form FdeFmdFdskFdnum
+he name of a Heritas Holume /anager
olume& of the form FdeFmdF'fsFdskFdnum
+he key"ord merged& indicating that the file
system at the specified mount point is to be
merged "ith its parent
fsGoptions can be one of the follo"ing1 ufs& "hich indicates a $)S file system%
'fs& "hich indicates a Heritas file system%
s"ap& "hich indicates a s"ap olume% +he
s"ap mount point must be a S 6hyphen8%
-n ()#na"e +he name of the alternate boot enironment to be
created% ()#na"e must be uni*ue on the system%
Iuidelines for Eeconfiguring S'ap
+hree "ays to configure a s"ap slice by using the
lucreate command "ith the -m option1
If you do not specify a s"ap slice& the s"ap slices
belonging to the primary boot enironment are
configured for the alternate boot enironment by
default%
If you specify one or more s"ap slices& these slices are
the only s"ap slices that are used by the alternate boot
enironment% +he t"o boot enironments do not share
any s"ap slices%
Iou can specify to both share a s"ap slice and add a
slice for s"ap%
TM
+id 4ou Kno'5
-n adantage to reconfiguring s"ap is that the reconfigured s"ap slice& unlike the default s"ap slice& "ill not
be lost should the creation of the alternate boot enironment fail during actiation%
TM
Create an &lternate "DS Eoot -oot
Cn$ironment and Eeconfigure S'ap
eHui$alent role
9 Step 2: Create the alternate boot
en$ironment and reconfigure s'ap:
# lucreate $-%
&BE_description&' -c BE_name (
-#
mountpoint:device[,metadevice]:
fs_options $-# )))' \
-m -:device:swap -n BE_name
+id 4ou Kno'5
If you hae a long list of s"ap slices& you can create a s"ap list% lucreate uses this list for the s"ap slices in the
)or step-by-step instructions on ho" to complete this task& see ,+o 2reate a .oot 3nironment and Reconfigure
S"ap by $sing a #ist, section in the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade
Planning %
Topic 3: Create an &lternate -oot Cn$ironment for a >DS Eoot Pool
TM
1$er$ie' of Solaris #i$e "pgrade and >DS
Eoot Pools
9ith Solaris #ie $pgrade& you can1
/igrate $)S file systems to a Z)S root pool
2reate Z)S root file systems from an e'isting
Z)S root pool
$se the lucreate command to copy critical file
systems from an actie $)S boot enironment
to an alternate boot enironment "ithin an
e'isting Z)S root pool
Note1 $ser defined 6shareable8 file systems are not
copied bet"een the $)S file system and the Z)S root
pool% S"ap is not shareable bet"een a $)S root boot
enironment and a Z)S root pool boot enironment%
Solaris #i$e "pgrade and >DS Eoot Pools System EeHuirements and #imitations
9hen using Solaris #ie $pgrade "ith Z)S& keep the follo"ing system re*uirements and limitations in mind1
Sun /icrosystems recommends you hae the Solaris 10 10F04 6$pdate 58 release or later installed%
Iou must allo" for the minimum amount of aailable pool space re*uired for a bootable Z)S root file
system& to include1
-mount of physical memory
-ailable disk space
!umber of boot enironments to be created
Note1
If you do not hae Solaris 10 10F04 or a later release installed& you can still migrate to Z)S Root by doing the
follo"ing1
-pply the $pdate 5 >ernel patch 1?@1?@-0A 6SP-R2T8 F 1?@1?4-0A 6'458 and associated patches
specified in the Special Install Instructions section of the >ernel R3-D/3 file%
-pply the Solaris #ie $pgrade patches specified in Infodoc C054EE%
Sun /ircosystems recommends that you also apply the latest Z)S& patch and package utility& and Solaris #ie
$pgrade patches to get the latest bug fi'es and enhancements "hen migrating to a Z)S Root enironment%
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * %% of 88
Solaris #i$e "pgrade and >DS &lternate -oot
Cn$ironment Tas/s 1$er$ie'
Z)S -lternate .oot 3nironment +asks
/igrate a $)S )ile System to a Z)S )ile
System
2reate an -lternate .oot 3nironment 9ithin
the Same Z)S Root Pool
2reate an -lternate .oot 3nironment in a
!e" Z)S Root Pool
Figrate a "DS Dile System to a >DS Dile
System
eHui$alent role0
+id 4ou Kno'5
/igration is possible only from a $)S file system to a Z)S file system%
)ile systems other than a $)S file system cannot be migrated to a Z)S root pool%
- $)S boot enironment cannot be created from a Z)S root pool%
9 Step 2: Create a >DS root pool0
# *p++l create rpool disk_slice
+he Z)S root pool must be on a single slice to be
bootable and upgradeable%
In this e'ample& the ne" Z)S root pool& rpool& is
created on a separate slice& ,-t-d-s.)
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * %. of 88
+id 4ou Kno'5
.efore migrating& a Z)S storage pool must e'ist& and the Z)S storage pool must be created "ith slices rather
than "hole disks to be upgradeable and bootable%
+he pool must hae an S/I label% -n 3)I-labeled disk cannot be booted%
'45 only1 +he Z)S pool must be in a slice "ith an fdisk partition%
9 Step 3: Figrate the "DS root ;:< file system to
the ne' >DS root pool0
# lucreate $-c ufsBE' -n new-
zfsBE -p rpool
+he third step is to migrate the $)S root file system to
the ne" Z)S root pool%
In this e'ample& the lucreate command migrates
the currently running $)S boot enironment)
c-t-d-) to the ne" Z)S boot enironment) ne/-
*fs01) and places the alternate boot enironment in
rp++l$
.ecause the $)S file system data is being copied to
the Z)S root pool& the creation of the alternate Z)S
boot enironment might take a "hile%
9hen the alternate boot enironment has been created&
you can use the luupgrade or luacti"ate
command to upgrade or actiate the ne" Z)S boot
enironment%
+id 4ou Kno'5
9hen you migrate shared file systems& shared file systems cannot be copied to a separate slice on the ne" Z)S
root pool% )or e'ample& "hen performing a Solaris #ie $pgrade "ith a $)S root 6F8 file system& you can use
the -m option to copy the Fe'port file system to another deice% Iou do not hae the -m option of copying the
shared file system to a Z)S pool%
9hen you are migrating a $)S root file system that contains non-global (ones& shared file systems are not
migrated%
7n a system "ith a $)S root 6F8 file system and non-global (ones installed& the non-global (ones are migrated if
the (one is in a critical file system as part of the $)S to Z)S migration% 7r& the (one is cloned "hen you
upgrade "ithin the same Z)S pool% If a non-global (one e'ists in a shared $)S 6F8 file system& to migrate to a
Z)S root pool& you must first upgrade the (one& as in preious Solaris releases% )or more information on
migrating non-global (ones& see the ,Solaris #ie $pgrade )or Z)S 9ith !on-=lobal Zones Installed, in the
Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning %
TM
& Closer #oo/ at the lucreate Command
+he follo"ing definitions describe each part of the command used to migrate the $)S root 6F8 file system to the
ne" Z)S root pool%
-c ufsBE
67ptional8 -ssigns the name ufs() to the current $)S
boot enironment% +his option is not re*uired and is
used only "hen the first boot enironment is created% If
you run the lucreate command for the first time and
you omit the -c option& the soft"are creates a default
name for you%
-n new-zfsBE
-ssigns the name new-!fs() to the boot enironment to
be created% +he name must be uni*ue on the system%
-p rpool
Places the ne"ly created Z)S root 6F8 file system into
the Z)S root pool defined in rpool%
9 Step %: ;1ptional< Jerify that the boot
en$ironment is complete0
+he fourth step is to erify that the alternate boot
enironment is complete% Iou do this by entering the
lustatus command% +his command reports "hether
the alternate boot enironment creation is complete
and bootable%
# lustatus
9 Step .: ;1ptional< Jerify the basic dataset
information on the system0
+he fifth step is to erify the basic dataset information
on the system% Iou do this through the *fs list
command% +he list command displays the names of all
datasets on the system%
# *fs list
TM
+id 4ou Kno'5
Iou should set dataset properties before using the lucreate command% Solaris #ie $pgrade creates the datasets
for the boot enironment and Z)S olumes for the s"ap area and dump deice but does not account for any
e'isting dataset property modifications% +his means that if you "ant a dataset property enabled in the alternate
boot enironment& you must set the property before the lucreate operation% )or e'ample1
# *fs set c+#pressi+n2+n rp++l!3445
Create an &lternate -oot Cn$ironment @ithin
the Same >DS Eoot Pool
eHui$alent role0
9 Step 2: Create an alternate boot en$ironment0
# lucreate $-c zfsBE' -n new-zfsBE
+id 4ou Kno'5
9hen creating a Z)S boot enironment "ithin the same Z)S root pool& you cannot use the lucreate
command include and e'clude options to customi(e the content$
Iou cannot use the -f) -+) -6) -7) and -* options to include or e'clude files from the primary boot
enironment "hen creating a boot enironment in the same Z)S root pool% Qo"eer& you can use these options
in the follo"ing cases1
2reating a boot enironment from a $)S file system to a $)S file system
2reating a boot enironment from a $)S file system to a Z)S root pool
2reating a boot enironment from a Z)S root pool to a different Z)S root pool
9 Step 3: ;1ptional< Jerify that the boot en$ironment is complete0
# lustatus
TM
9 Step %: ;1ptional< Jerify the basic dataset information on the system0
# *fs list
Create an &lternate -oot Cn$ironment in a
Be' >DS Eoot Pool
eHui$alent role0
9 Step 2: Create a >DS root pool
# zpool create rpool2
disk_slice
9 Step 3: Create the alternate boot
en$ironment0
# lucreate [-c zfsBE] -n new-
zfsBE -p rpool2
9 Step %: ;1ptional< Jerify that the boot en$ironment is complete0
# lustatus
9 Step .: ;1ptional< Jerify the basic dataset information on the system0
# *fs list
TM
Module 8: 7grading "ith Solaris 6i'e 7grade
Topic 1: "pgrade an &lternate -oot Cn$ironment
1$er$ie' of "pgrading an &lternate -oot
Cn$ironment 'ith Solaris #i$e "pgrade
+hings you should kno" before you upgrade an
alternate $)S root boot enironment1
$pgrading an alternate boot enironment "ith the
latest 7S does not affect the actie boot enironment%
+he ne" files merge "ith the inactie boot
enironment:s critical file systems& but the shareable
file systems are not changed%
)or more information on upgrading an alternate boot
enironment& see ;$pgrading a .oot 3nironment< in
the Solaris10 10/08 Installation Guide: Solaris Live
Upgrade and Upgrade Planning.
+id 4ou Kno'5
Iou can upgrade "hen R-ID-1 olumes are installed& or if non-global (ones are installed& or you can install a
Solaris )lash%
Iou can upgrade an inactie boot enironment that contains any combination of physical disk slices& Solaris
Holume /anager olumes& Z)S root olumes& or Heritas Holume /anager olumes% +he slice that is chosen
for the root 6F8 file system must be a single-slice concatenation that is included in a R-IDS1 olume 6mirror8%
)or procedures about creating a boot enironment "ith mirrored file systems& see ;+o 2reate a .oot
3nironment 9ith R-ID-1 Holumes 6/irrors8< in the Solaris 10 10/08 Installation Guide: Solaris Live
Upgrade and Upgrade Planning.
Iou can upgrade a system that has non-global (ones installed "ith any installation program% )or procedures
about upgrading "ith non-global (ones& see ;$pgrading the Solaris 7S on a System 9ith !on-=lobal Zones
Installed< in the Solaris 10 10F04 Installation =uide1 Solaris #ie $pgrade and $pgrade Planning%
Rather than upgrading& if you hae created a Solaris )lash archie& you could install the archie on an inactie
boot enironment% +he ne" files oer"rite critical file systems of the inactie boot enironment& but shareable
file systems are not changed% See ;Installing Solaris )lash -rchies on a .oot 3nironment< in the Solaris 10
10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning .
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * .0 of 88
Prepare for the "pgrade
+o prepare for the upgrade1
10#og in to sunsole%sun%com%
20-ccept the Soft"are #icense -greement%
302lick Patches and $pdates on SunSole:s main
page%
%0=o to the Do"nloads section and click #atest
Solaris 10 Do"nload%
.0Select a format option 6DHD full image& DHD
segmented image& or 2D image8 for the Solaris 10
$pdate soft"are and click Do"nload%
20Sae file to a directory on the current boot
enironment%
+id 4ou Kno'5
)ollo"ing is an e'ample of the commands you "ould use to mount the Solaris 10 $pdate 5 DHD IS7 image
to a directory 6in this e'ample& Fe'port8 on an '45 machine1
# l+fiad# -a !e8p+rt!s+l-9--u:-ga9-8;:-d"d)is+
!de"!l+fi!9
# #+unt -< hsfs !de"!l+fi!9 !#nt
# cd !#nt
# ls
+he commands for mounting the DHD IS7 image for a SP-R2 machine "ould be the same but the image file
name "ould reflect SP-R2 instead of '45 as follo"s1
# l+fiad# -a !e8p+rt!s+l-9--u:-ga9-sparc-d"d)is+
!de"!l+fi!9
# #+unt -< hsfs !de"!l+fi!9 !#nt
# cd !#nt
# ls
+o unmount the image& you "ould use the follo"ing commands for both '45 and SP-R21
# cd
# u#+unt !#nt
TM
# l+fiad# -d !de"!l+fi!9
#
Note:
If you don:t run the umount command& the 7S image stays mounted on !#nt% If you reboot& that mount "ill be
lost% +he real impact is that if you hae a follo"-on operation that "ill use lofi and it depends on
!de"!l+fi!9 being aailable& that operation "ill no" fail because the IS7 image lofi has been left mounted
on !de"!l+fi!9%
Iou also hae the option of burning the IS7 image to a DHD% +o do this& insert a blank DHD into a DHD
burner and perform the follo"ing command1
#cdr/ -i -, !e8p+rt!s+l-9--u:-ga-$sparc +r 8;:'-d"d)is+
"pgrade an &lternate "DS -oot Cn$ironment
eHui$alent role0
TM
G Step 2: "pgrade the alternate boot
en$ironment:
# luupgrade -u -n BE_name -s
os_image_path
+id 4ou Kno'5
Iou can also upgrade an alternate boot enironment using Solaris #ie $pgrade "ith a multiple 2D
installation%+he steps are as follo"s1
1%.ecome superuser or assume an e*uialent role%
C%Indicate the boot enironment to upgrade and the path to the installation soft"are by typing1
# luupgrade -u -n BE_name -s os_image_path
3'planation of the commands1
-u
$pgrades an alternate boot enironment
-n BE_name
Specifies the name of the alternate boot enironment that is to be upgraded
-s os_image_path
Specifies the path name of a directory that contains an installation image
?%9hen the installer is finished "ith the contents of the first 2D& insert the second 2D%
E%+his step is identical to the preious step& but the -u option is replaced by the -i option% -lso& choose to run
the installer on the second 2D "ith menus or "ith te't%
+his command runs the installer on the second 2D "ith menus%
# luupgrade -i -n BE_name -s os_image_path
+his command runs the installer on the second 2D "ith te't and re*uires no user interaction%
# luupgrade -i -n BE_name -s os_image_path -O -nodisplay -noconsoleK
Cplanation of the commands:
TM
-i
Installs additional 2Ds% +he soft"are looks for an installation
program on the specified medium and runs that program% +he
installer program is specified "ith -s%
-n BE_name
Specifies the name of the alternate boot enironment that is to be
upgraded
-s os_image_path
Specifies the path name of a directory that contains an installation
image
-O '-nodisplay
-noconsole'
67ptional8 Runs the installer on the second 2D in te't mode and
re*uires no user interaction%
Repeat steps ? and E for each 2D that you "ant to install%
+he alternate boot enironment is ready to be actiated%
!pgrading an "lternate #FS $oot %nvironment
+o upgrade an alternate boot enironments in Z)S using Solaris #ie $pgrade& use the follo"ing command1
# luupgrade -n zfsBE -u -s os_image_path
)ollo"ing is an e'ample of a ne" boot enironment being upgraded by using the luupgrade command from an
image that is stored in the location indicated "ith the -s option%
# luupgrade -n zfsBE -u -s netinstalle!ports"#com$ined%s"#
=99>= ?l+cks
#inir++t files6ste# is <l+fs>
+unting #inir++t at
<!net!install!e8p+rt!s+laris_9-!c+#?ined)s+laris_9-_/+s
!S+laris_9-!5++ls!0++t>
@alidating the c+ntents +f the #edia
<!net!install!e8p+rt!s9-!c+#?ined)s9->)
5he #edia is a standard S+laris #edia)
5he #edia c+ntains an +perating s6ste# upgrade i#age)
5he #edia c+ntains S+laris "ersi+n <9-_9--;>)
,+nstructing upgrade pr+file t+ use)
A+cating the +perating s6ste# upgrade pr+gra#)
,hecking f+r e8istence +f pre"i+usl6 scheduled Ai"e
Upgrade reBuests)
,reating upgrade pr+file f+r 01 <*fs01>)
Ceter#ining packages t+ install +r upgrade f+r 01 <*fs01>)
Perf+r#ing the +perating s6ste# upgrade +f the 01 <*fs01>)
,%U5D4N: Dnterrupting this pr+cess #a6 lea"e the ?++t en"ir+n#ent unsta?le
+r un?++ta?le)
Upgrading S+laris: 9--E c+#pleted
Dnstallati+n +f the packages fr+# this #edia is c+#plete)
%dding +perating s6ste# patches t+ the 01 <*fs01>)
5he +perating s6ste# patch installati+n is c+#plete)
DN<43%5D4N: 5he file !"ar!sad#!s6ste#!l+gs!upgrade_l+g +n ?++t en"ir+n#ent
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * .% of 88
<*fs01> c+ntains a l+g +f the upgrade +perati+n)
DN<43%5D4N: 5he file "ar!sad#!s6ste#!data!upgrade_cleanup +n ?++t
en"ir+n#ent <*fs01> c+ntains a l+g +f cleanup +perati+ns reBuired)
DN<43%5D4N: 3e"ie/ the files listed a?+"e) 3e#e#?er that all +f the files
are l+cated +n ?++t en"ir+n#ent <*fs01>)
0ef+re 6+u acti"ate ?++t en"ir+n#ent <*fs01>F deter#ine if an6 additi+nal
s6ste# #aintenance is reBuired +r if additi+nal #edia +f the s+ft/are
distri?uti+n #ust ?e installed)
5he S+laris upgrade +f the ?++t en"ir+n#ent <*fs01> is c+#plete)
5he ne/ ?++t en"ir+n#ent can ?e acti"ated an6ti#e after it is created)
<+r #+re inf+r#ati+n +n upgrading an alternate G<S ?++t en"ir+n#entF see
H,reating a 0++t 1n"ir+n#ent f+r G<S 3++t P++lsH in the S+laris 9- 9-!-;
Dnstallati+n Iuide: S+laris Ai"e Upgrade and Upgrade Planning)
& Closer #oo/ at the luupgrade Command for "pgrading
+he follo"ing is the luupgrade command for upgrading1
# luupgrade -u -n BE_name -s os_image_path
See belo" for an e'planation of each part of the command1
-u
$pgrades an alternate boot enironment%
-n BE_name
Specifies the name of the alternate boot enironment
that is to be upgraded%
-s os_image_path
Specifies the path name of a directory that contains an
installation image%
TM
Co&right 200, Sun Micros&ste!s) -nc$ *ll Rights Reser'ed$ Sun Ser'ices) Re'ision * .. of 88
Topic 2: &cti$ate an &lternate -oot Cn$ironment
1$er$ie' of &cti$ating an &lternate -oot
Cn$ironment
9hen actiating an alternate boot enironment for
the first time& remember the follo"ing tips1
-ctiating an alternate boot enironment makes it
bootable on the ne't restart of the system%
Iou can s"itch back *uickly to the original primary
boot enironment if a problem occurs on booting the
ne"ly actiated boot enironment%
+he first time you boot from a ne"ly actiated
alternate boot enironment& the Solaris #ie $pgrade
soft"are synchroni(es the ne"ly actiated alternate
boot enironment "ith the primary boot enironment%
Note1 During synchroni(ation& certain critical system
files and directories are copied from the primary boot
enironment to the alternate boot enironment%
+id 4ou Kno'
)or more information on synchroni(ation& see ;Synchroni(ing )iles .et"een .oot 3nironments< in the
Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning.
&cti$ating an 829based System
+hings to keep in mind "hen actiating an '45-based
system1
+he first time you actiate an alternate boot
enironment& you must use the luactiate command%
+hereafter& you can s"itch to this boot enironment
by selecting the appropriate entry in the =R$. menu%
)iles are not synchroni(ed "hen you s"itch bet"een
boot enironments "ith the =R$. menu%
)or more information on ho" to actiate "ith the
=R$. menu& see ;'451 -ctiating a .oot
3nironment 9ith the =R$. /enu< in the Solaris
10 10/08 Installation Guide: Solaris Live Upgrade and
Upgrade Planning.
+id 4ou Kno'5
If an alternate boot enironment "as created "ith the Solaris 4& A& or 10 ?F0D release& the boot enironment
must al"ays be actiated "ith the luacti"ate command% +hese older boot enironments do not display on
the =R$. menu%
TM
EeHuirements and #imitations for &cti$ating
an &lternate -oot Cn$ironment
+o successfully actiate an alternate boot
enironment& that boot enironment must meet the
follo"ing conditions1
+he alternate boot enironment must hae a status of
;complete%<
Note: If the alternate boot enironment does
not hae a ,complete, status& run ludelete and
then rerun lucreate
+he alternate boot enironment that you "ant to
actiate cannot be inoled in a comparison
operation%
TM
+id 4ou Kno'5
+he luc+#pare command is used to check for differences bet"een the primary boot enironment and other
boot enironments% +he luc+#pare command generates a comparison of boot enironments that includes
the contents of any non-global (ones% +he specified boot enironment cannot hae any partitions that are
mounted "ith lu#+unt or #+unt0
+o make a comparison& the alternate boot enironment must be in a complete state and cannot hae a copy 0ob
that is pending% )or instructions on ho" to run the lucompare command& see ,Displaying the Status of -ll .oot
3nironments< in the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning.
eHui$alent role0
G Step 2: &cti$ate the alternate boot
en$ironment:
# s$inluactivate -s BE_name
Bote: +he -s forces a synchroni(ation of files
bet"een the primary boot enironment and the
&cti$ating an &lternate >DS -oot Cn$ironment
TM
+o actiate an alternate boot enironments in Z)S using Solaris #ie $pgrade& use the follo"ing command1
# luactivate ne&-zfsBE
-fter you receie notification that the actiation of the boot enironment has been successful& you can restart
the system to the Z)S boot enironment by entering the follo"ing command1
# init '
)or more information on actiating an alternate Z)S boot enironment& see ,2reating a .oot 3nironment for
Z)S Root Pools, in the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning.
G Step 3: Eestart
# init '
C&"T81B: $se only the init or shutd+/n commands to restart% If you use the re?++tF haltF or
uad#in commands& the system does not s"itch boot enironments% +he primary boot enironment is booted
again% +he time it takes for the restart to complete "ill ary depending on your system configuration and setup%
2onse*uently& you should complete this step during a maintenance "indo" "hen the system is not being
heaily used%
-fter the restart is complete& the original primary boot enironment automatically becomes an alternate boot
enironment
TM
Module 7: *l&ing Pac%ages and Patches to an *lternate Boot 9n'iron!ent
Topic 1: &pply Pac/ages and Patches to an &lternate -oot Cn$ironment
1$er$ie' of &pplying Pac/ages and Patches
to an &lternate -oot Cn$ironment using
Solaris #i$e "pgrade
+hings you should kno" before you apply packages
and patches to an alternate root boot enironment1
9hen you use Solaris #ie $pgrade& the only
do"ntime the system incurs is that of a reboot%
+he luupgrade command is used to add
packages and patches to the alternate boot
enironment%
Solaris #ie $pgrade re*uires packages or
patches that comply "ith the SHRE adanced
packaging guidelines%
)or more information about packaging re*uirements&
see -ppendi' .& ;-dditional SHRE Packaging
Re*uirements 6Reference8< in the Solaris 10 10/08
Installation Guide: Solaris Live Upgrade and Upgrade
Planning.
Prepare to &pply Pac/ages and Patches
+o prepare to apply packages and patches1
1$#og in to sunsole%sun%com%
2$-ccept the Soft"are #icense -greement%
/$2lick Patches and $pdates on SunSole:s main page%
5$#ocate and do"nload the appropriate packages and patches%
0$Sae the files to a directory on the primary boot enironment%
8$$n(ip the files%
TM
&dd a Pac/age to an &lternate -oot
Cn$ironment
eHui$alent role0
99 Step 2: &dd the pac/age
# luupgrade -p -n BE_name -s
/path-to-packaes packae-name
& Closer #oo/ at the luupgrade Command for &dding Pac/ages
+he follo"ing definitions describe each part of the command used to add a package to an alternate boot
enironment%
-p
Indicates to add packages to the alternate boot
enironment
-n BE_name
"here the package is to be added
-s path-to-packaes
Specifies the path to a directory that contains the
package or packages that are to be added
packae-name
Specifies the names of the package or packages to be
added% Separate multiple package names "ith a space
TM
99 Step 3: Chec/ the integrity of the ne'ly
installed pac/age
# luupgrade -, -n BE_name -4 H-
"H packae-name
& Closer #oo/ at the luupgrade Command for Chec/ing Pac/age 8ntegrity
+he follo"ing definitions describe each part of the command used to check package integrity on an alternate
boot enironment%
-,
Indicates to run the pkgchk command on the named
packages
-n BE_name
Specifies the name of the boot enironment "here the
check is to be performed
-4
Passes the options directly to the pkgchk command
H-"H
Specifies to run the command in erbose mode
packae-name
Specifies the names of the packages to be checked%
Separate multiple package names "ith spaces% If
package names are omitted& the check is done on all
packages in the specified boot enironment%
TM
Eemo$e a Pac/age Drom an &lternate -oot
Cn$ironment
+o remoe a package from an alternate boot
enironment1
# luupgrade -P -n BE_name
packae-name
&dd a Patch to an &lternate -oot
Cn$ironment
eHui$alent role0
99Step 2: &dd the patch:
# luupgrade -t -n BE_name -s
/path-to-patches patch-name
&dd a patch cluster:
luupgrade -n
<inacti"e_?++t_en"ir+n#ent_na#e
> ( -s
<path_t+_direct+r6_c+ntaining_p
atches> (
-t Jcat patch_+rderJ
& Closer #oo/ at the luupgrade Command for &dding Patches
+he follo"ing definitions describe each part of the command used to add a patch to an alternate boot
enironment%
-t
Indicates to add patches to the alternate boot
enironment
-n BE_name
"here the patch is to be added
-s path-to-patches
Specifies the path to a directory that contains the
patches that are to be added
patch-name
Specifies the names of the patch or patches that are to
be added% Separate multiple patch names "ith a space%
TM
Eemo$e a Patch Drom an &lternate -oot
Cn$ironment
+o remoe a patch from an alternate boot enironment1
# luupgrade -5 -n BE_name
patch_name
Topic 2: &cti$ate an &lternate -oot Cn$ironment
1$er$ie' of &cti$ating an &lternate -oot
Cn$ironment
9hen actiating an alternate boot enironment for the
first time& remember this1
-ctiating an alternate boot enironment
makes it bootable on the ne't restart of the
system%
Iou can s"itch back *uickly to the original
primary boot enironment if a problem occurs
on booting the ne"ly actiated boot
enironment%
+he first time you boot from a ne"ly actiated
alternate boot enironment& the Solaris #ie
$pgrade soft"are synchroni(es the ne"ly
actiated alternate boot enironment "ith the
primary boot enironment%
Note1 During synchroni(ation& certain critical
system files and directories are copied from
the primary boot enironment to the alternate
boot enironment%
TM
+id 4ou Kno'5
;Synchroni(e< means that certain critical system files and directories are copied from the primary boot
enironment to the alternate boot enironment that is being booted% Solaris #ie $pgrade does not perform this
synchroni(ation after the initial boot& unless you force synchroni(ation "ith the luacti"ate command and
the -s option$
)or more information on synchroni(ation& see ;Synchroni(ing )iles .et"een .oot 3nironments< in the
Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning%
&cti$ating an 829based System
+hings to keep in mind "hen actiating an '45-based
system1
+he first time you actiate an alternate boot
enironment& you must use the luacti"ate
command$
+hereafter& you can s"itch to this boot
enironment by selecting the appropriate entry
in the =R$. menu%
)iles are not synchroni(ed "hen you s"itch
bet"een boot enironments "ith the =R$.
menu%
)or more information on ho" to actiate "ith the
=R$. menu& see ;'451 -ctiating a .oot
3nironment 9ith the =R$. /enu< in the Solaris 10
10/08 Installation Guide: Solaris Live Upgrade and
Upgrade Planning %
+id 4ou Kno'5
If an alternate boot enironment "as created "ith the Solaris 4& A& or 10 ?F0D release& the boot enironment
must al"ays be actiated "ith the luacti"ate command% +hese older boot enironments do not display on
the =R$. menu%
TM
EeHuirements and #imitations for &cti$ating
an &lternate -oot Cn$ironment
+o successfully actiate an alternate boot enironment&
that boot enironment must meet the follo"ing
conditions1
+he alternate boot enironment must hae a
status of ;complete%<
!ote1 If the alternate boot enironment does
not hae a ,complete, status& run ludelete
and then rerun lucreate$
+he alternate boot enironment that you "ant
to actiate cannot be inoled in a comparison
operation%
+id 4ou Kno'5
+he luc+#pare command is used to check for differences bet"een the primary boot enironment and other
boot enironments% +he luc+#pare command generates a comparison of boot enironments that includes the
contents of any non-global (ones% +he specified boot enironment cannot hae any partitions that are mounted
"ith lu#+unt or #+unt$
+o make a comparison& the alternate boot enironment must be in a complete state and cannot hae a copy 0ob
that is pending% )or instructions on ho" to run the luc+#pare command& see ,Displaying the Status of -ll
.oot 3nironments< in the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning .
TM
eHui$alent role0
9Step 2 : &cti$ate the alternate boot
en$ironment:
# !s?in!luacti"ate -s BE_name
Bote: +he -s forces a synchroni(ation of files
bet"een the primary boot enironment and the
+id 4ou Kno'
+o actiate an alternate boot enironments in Z)S using Solaris #ie $pgrade& use the follo"ing command1
# luacti"ate ne/-*fs01
-fter you receie notification that the actiation of the boot enironment has been successful& you can restart
the system to the Z)S boot enironment by entering the follo"ing command1
# init :
)or more information on actiating an alternate Z)S boot enironment& see ,2reating a .oot 3nironment for
Z)S Root Pools, in the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade Planning.
TM
9 Step 3: Eestart
# init :
C&"T81B
$se only the init or shutd+/n commands to restart% If you use the re?++t& halt& or uad#in
commands& the system does not s"itch boot enironments% +he primary boot enironment is booted again%
+he time it takes for the restart to complete "ill ary depending on your system configuration and setup%
2onse*uently& you should complete this step during a maintenance "indo" "hen the system is not being
heaily used%
TM
Module ;: Maintaining Solaris 6i'e 7grade Boot 9n'iron!ents
Topic 1: Dour Keys of an Cffecti$e Faintenance Strategy
The Dour Clements of a Solaris #i$e "pgrade Faintenance Strategy
+he Solaris #ie $pgrade Planning Process
Step 11 Prepare the system for Solaris #ie $pgrade%
Step C1 2reate an alternate boot bnironment%
Step ?1 $pgrade or update the alternate boot enironment%
Step E1 -ctiate the alternate boot enironment%
Step D1 /aintain the alternate boot enironment%
"se Solaris #i$e "pgrade
+he goal of a proactie maintenance strategy
is to preent issues "hile minimi(ing risk%
.est Practice R11 $se Solaris #ie $pgrade
TM
"pgrade to the #atest Solaris 10 "pdate
Eelease
.est Practice RC1-l"ays upgrade to the latest
Solaris 10 $pdate release during the ne't
ma0or maintenance "indo"%
If you can:t upgrade& do"nload the latest
patch bundle to receie the essential patches
"ithout the upgraded system functionality%
"se Sun &lerts
.est Practice R?1 $se the Sun -lerts
Plan to apply the patch according to the
seriousness of the issue%
-pply all the patches "ithin a Sun -lert%
Reie" recent Sun -lerts at the Sun -lert
9iki
"se a Test Cn$ironment
.est Practice RE1 $se a test enironment%
2onduct pre-deployment testing in a test
enironment that accurately replicates the
production enironment and includes good
functional test coerage and peak load testing
TM
Ee$ie'
2ontinue to use Solaris #ie $pgrade to
minimi(e do"ntime and risk%
-l"ays upgrade the system to the latest
Solaris 10 $pdate release
$se Sun -lerts to patch issues that could
affect our system aailability& security& or data
loss%
$se a test enironment to see ho" the updates
"ill "ork "ith our current system
configuration%
Topic 2: Creating a Faintenance Plan
The 8mportance of a Solaris #i$e "pgrade
Faintenance Plan ;continued<
+he Solaris #ie $pgrade maintenance plan takes the
broad strategic goals of the #ie $pgrade maintenance
strategy and puts them into a format "here they can be
scheduled and tracked%
TM
Planning Eesources
3'cellent Solaris #ie $pgrade maintenance
planning resources include1
+he Patch /anagement .est Practices
document
+he Patch 2orner .log
+he Solaris 10 10F04 Installation =uide1
Solaris #ie $pgrade and $pgrade Planning
Topic 3: Performing Solaris #i$e "pgrade Faintenance Tas/s
The Jie' Status Command
+o ie" the status of the boot enironments on a
Solaris 10 system& use the lustatus command plus
the name of the boot enironment "e "ant to see%
+o display the status for all the boot enironments in
the system& omit the name of the boot enironment%
TM
+id 4ou Kno'5
+he follo"ing fields are displayed "hen the lustatus command is used%
Name S!ame of each boot enironment%
&omplete S Indicates that no copy or create operations are in progress% -lso& the boot enironment can
be booted% -ny current actiity or failure in a create or upgrade operation causes a boot enironment to
be incomplete% )or e'ample& if a copy operation is in process or scheduled for a boot enironment& that
boot enironment is considered incomplete%
"ctive S Indicates if this is the actie boot enironment%
"ctive'n(eboot S Indicates if the boot enironment becomes actie on ne't reboot of the system%
&opyStatus S Indicates if the creation or copy of the boot enironment is scheduled& actie& or in the
process of being upgraded% - status of S2Q3D$#3D preents you from performing lie upgrade
copy& rename& or upgrade operations%
The Compare Command
+o compare different boot enironments& simply use the luc+#pare command$ +his command "ill allo"
you to ie" all the differences bet"een t"o boot enironments and should help you make sure that you "on:t
lose any ital files "hen you delete an old boot enironment%
The +elete Command
+o delete an alternate boot enironment& reie" the
status of the alternate boot enironment to make sure
that it meets the follo"ing re*uirements1
UIou can:t delete the actie boot enironment or the
boot enironment that is actiated on the ne't reboot%
U+he boot enironment to be deleted must be
complete% - complete boot enironment is not
participating in an operation that "ill change its
status%
UIou cannot delete a boot enironment that has file
systems mounted "ith lu#+unt%
+id 4ou Kno'5
TM
)or '45 systems1 Starting "ith the Solaris 10 1F05 release& you cannot delete a boot enironment that contains
the actie =R$. menu% $se the lumake or luupgrade commands to reuse the boot enironment%
+his issue "as addressed in Solaris #ie $pgrade patch 1C1E?1-C@ and =R$. patch 1?444E-01%
+o determine "hich boot enironment contains the actie =R$. menu& see 2hapter 1?& ;/anaging the
Solaris .oot -rchies 6+asks8 in the Solaris 10 10/08 Installation Guide: Solaris Live Upgrade and Upgrade
Planning %
The +elete Command ;continued<
+o delete an alternate boot enironment& use the
ludelete command plus the name of the alternate
boot enironment you "ant to delete%
)or e'ample& to delete the s10uDGbe boot
enironment& you "ould type1
ludelete s9-u=_?e)
7nce you:e entered the correct command& you must
follo" up "ith the lustatus command to make
sure that the alternate boot enironment "as deleted%
Ee$ie'
.est Practices for Solaris #ie $pgrade /aintenance
2ontinue to use #ie $pgrade to minimi(e
do"ntime and risk%
-l"ays upgrade the system to the latest
Solaris 10 update release
$se Sun -lerts to patch issues that could
affect our system aailability& security& or data
loss%
$se a test enironment to see ho" the updates
"ill "ork "ith our current system
configuration%
TM
Module ,: -ntroduction to >eferred *cti'ation Patching
Topic 1: @hat is +eferred &cti$ation Patching5
+eferred &cti$ation Patching
Deferred -ctiation Patching 6D-P8 "as initially
deliered in the Solaris 10 patch utility patch 11ACDE-
EC for SP-R2 and 11ACDD-EC for '45 to ensure
system consistency during patching of an actie boot
enironment%
The Problem 'ith Patching a #i$e -oot
Cn$ironment
+he problem "ith patching a lie boot enironment1
Some of the changes deliered in a patch& such
as shared ob0ects& may be inoked by
processes as soon as they are applied to the
lie boot enironment%
7ther ob0ects "ill only be actiated "hen the
system is rebooted%
The 8nconsistent State Problem
Problems can occur "here the scope of the change
applied is ery large compared to that "hich is running
on the lie boot enironment%
!e" ob0ects that are inoked may be
incompatible "ith the old ob0ects running in
memory% +his can cause the lie boot
enironment to get into an inconsistent state
during patching%
+he problem is most acute on a system running
(ones& because the patch utilities need to
inoke the (ones utilities during patching to
patch the non-global (ones%
TM
The 8ssue of Comple Patch Scripting and the
8nitial Solution
2omple' patch scripting "as re*uired for kernel
patches during the patch installation process to aoid
the inconsistency issues bet"een the ob0ects the patch
"as deliering and the running system%
Sun introduced a solution to the patching issue that no
longer re*uired comple' patch scripting%
#oopback file system mounts& or #7)S& "ere
used to oerlay the patched ob0ects "ith the
original ersions that "ere present on the
system%
+he system remained in a consistent state
during the application of the patch%
- forced reboot "as re*uired before any
further operation could be performed&
including the application of any other patches%
The +eferred &cti$ation Patching Solution
+he loopback file system& or #7)S& is used to
ensure the stability of the running system%
+he #7)S preseres stability during the
patching process%
+he re*uired reboot actiates the changes
made by the #7)S%
+eferred9&cti$ation Patches
7nly a limited number of patches need to be
designated as a deferred-actiation patch%
+ypically a deferred-actiation patch is a
kernel patch associated "ith a Solaris 10
$pdate release%
- deferred-actiation patch has the ariable
S$!9GP-+2QGS-)3G/7D3 set to ,true,
in the pkginfo file%
TM
+id 4ou Kno'5
2urrently& the only patches that specify application in Deferred -ctiation Patching mode are as follo"s1
>ernel patch 1C0011-1E 6SP-R28 F 1C001C-1E 6'458 6"hich is included in Solaris 10 04F0@ $pdate E8
>ernel patch 1C@1C@-11 6SP-R28 F 1C@1C4-11 6'458 6"hich is included in Solaris 10 0DF04 $pdate D8
>ernel patch 1?@1?@-0A 6SP-R28 F 1?@1?4-0A 6'458 6"hich is included in Solaris 10 10F04 $pdate 58
>ernel patch 1?ADDD-04 6SP-R28 F 1?ADD5-04 6'458 6"hich is included in Solaris 10 DF0A $pdate @8
)uture kernel patches included in future Solaris 10 $pdate releases are the likely candidates re*uiring
application using Deferred -ctiation Patching%
8nstalling Bon +eferred9&cti$ation Patches
Patches not designated as deferred-actiation patches
continue to install as before%
Bote: - reboot is re*uired after installing patches
1144??-?5 6SP-R28 F 1144DD-?5 6'458 to the lie
boot enironment before other patches can be
installed%
+id 4ou Kno'5
+he only other circumstance "here a reboot is re*uired before further patching can be performed is for '45&
"here a potential inconsistency e'ists bet"een kernel patches belo" 1144EE-1E running in memory and libc
changes deliered in patch 1C1C04-0C and -0?& and 1144DD-'' "hich obsoletes it% 2ode in the scripts of these
patches ensures that a later kernel patch& for e'ample& 1144EE-C0& must be actie before these patches can be
applied%
TM
+eferred &cti$ation Patching Eecap
Primary difference bet"een deferred-actiation
patches and non deferred-actiation kernel patches1
9ith deferred-actiation patches the reboot is
deferred until all patching operations are
completed%
9ith non deferred-actiation kernel patches& a
forced reboot is re*uired after installing before
other patches can be applied%
Topic 2: Lo' +eferred &cti$ation Patching @or/s
+eferred &cti$ation Patching and the Patch
"tilities Patch
It is important to hae the latest patch utilities patches
installed before installing one of the deferred-
actiation kernel patches%
Deferred -ctiation Patching "as initially deliered in
the Solaris 10 patch utility patch 11ACDE-EC 6SP-R28 F
11ACDD-EC 6'458%
In this patch utility patch& the patch installation
utilities& patchadd and patchrm& hae been
modified to change the "ay that certain
patches deliering features are handled%
+he patch utilities patches address bugs in the
Deferred -ctiation Patching feature and
proide bug fi'es and feature enhancements to
other features of the patch utilities%
TM
The +eferred &cti$ation Patching Process
+o apply a deferred-actiation patch1
1$ Do"nload the patch%
2$ $n(ip the patch%
/$ Read the R3-D/3 file%
!ote1 Pay special attention to the ,Installation
Re*uirements, and ,Special Install
Instructions, sections%
5$ Run the patchadd command%
+he deferred-actiation patch is applied
using Deferred -ctiation Patching%
Subse*uent patches that re*uire the
deferred-actiation patch are automatically
installed in Deferred -ctiation Patching
mode%
0$ Reboot the system to actiate the patches$
+id 4ou Kno'5
If you are running non-global (ones& consider these points "hen installing deferred-actiation patches1
-ll non-global (ones must be in a halted state for this patch operation% Iou must halt the non-global
(one before applying the patch%
Deferred -ctiation Patching re*uires the loopback file system 6#7)S8 in order to complete safely%
Deferred -ctiation Patching re*uires the loopback file system 6#7)S8 in order to complete safely% 9ith the
Solaris 10 ersion of Sun 2luster ?%1 and ?%C soft"are the #7)S capability is not disabled by default% Qo"eer&
if you hae Q- for !)S configured on a highly aailable local file s&ste! and are running the
aut+#+untd daemon& you might hae disabled #7)S to aoid hangs% If this is the case& you "ill need to
reenable #7)S before installing a deferred-actiation patch%
+o reenable #7)S you "ill need to either disable the automountd daemon or e'clude from the automounter
map all files that are part of the highly aailable local file system that is e'ported by Sun 2luster Q- for !)S%
Refer to the Sun *luster Software Installation Guide for Solaris +S for instructions on ho" to complete these
options$
TM
Topic 3: +ifference -et'een +eferred &cti$ation Patching and Solaris #i$e
"pgrade
8nitial Comparison of +eferred &cti$ation
Patching and Solaris #i$e "pgrade
Deferred -ctiation Patching is performed on the
actie primary boot enironment%
Solaris #ie $pgrade is used on an inactie alternate
boot enironment%
+eferred &cti$ation Patching and the 8ssues
'ith &pplying Patches to a #i$e -oot
Cn$ironment
Issues "ith Patching a #ie .oot 3nironment
+he problems "ith the system entering into an
inconsistent state during patching can only
occur "hen patching a lie boot enironment%
Patching a lie boot enironment takes time
and does not offer a fallback option%
&d$antages of "sing Solaris #i$e "pgrade to &pply Patches
-dantages of $sing Solaris #ie $pgrade
$sing Solaris #ie $pgrade dramatically reduces the risk and do"ntime associated "ith patching%
Note1 Patches may contain Special Install Instructions in their R3-D/3 files that users must follo"
"hen patching a lie boot enironment to aoid issues% /ost of these do not apply to patching an
alternate 6inactie8 boot enironment% +herefore& Solaris #ie $pgrade reduces the number of manual
steps needed to maintain a system& thereby reducing maintenance time and costs%
+he inconsistency issues do not apply "hen patching an alternate boot enironment because there is no
interaction bet"een the ob0ects being patched and the processes running in memory%
-ll that is re*uired to s"itch the alternate boot enironment into the primary boot enironment is a
single reboot%
If a problem arises "ith the ne" boot enironment& you can fall back into the old boot enironment to
enable production to resume and resole the issues "ith the alternate boot enironment later%
TM
Module 10: -ntroduction to the =ernal Patch
Topic 1: 1$er$ie' of the Kernel Patch
@hat is a Kernel Patch
- kernel patch1
Is a generally-aailable standard patch
2hanges the Solaris kernel and related core Solaris functionality
The Solaris 10 "pdate Eelease Kernel Patch
7erie" of Solaris 10 $pdate Release >ernel Patch
+here is at least one kernel patch associated
"ith each Solaris 10 $pdate release%
+he kernel update patch tends to be large in
si(e and comple'%
+he kernel patch contains significant feature
code changes and bug fi'es%
Note1 .et"een Solaris 10 $pdate releases smaller and
less comple' kernel patches might be released% +he
kernel patch is the single greatest source of patching
issues%
TM
Fost Common Causes of Kernel Patch
8nstallation 8ssues
+he most common causes of kernel patch installation
issues1
Incompletely added patches
Qaing a boot archie that is not updated
+he end result of a kernel patch not installing correctly
could be a non bootable system%
>ernel patches hae been kno"n to break system
customi(ations%
Lo' to &$oid Kernel Patch 8ssues
+o aoid kernel patch issues1
Pay attention to the ,Installation
Re*uirements, and ,Special Install
Instructions, sections in the kernel patch
R3-D/3 file%
$se Solaris #ie $pgrade to install the kernel
patch%
3nsure latest Solaris #ie $pgrade
soft"are packages hae been installed%
3nsure latest re*uired patches hae been
installed% See Infodoc C054EE1 Solaris
+/

#ie $pgrade Soft"are1 Patch
Re*uirements for the list of re*uired
patches1
6http1FFsunsole%sun%comFsearchFdocument%
doLassetkeyM1-51-C054EE-1 %8
TM
+id 4ou Kno'5
Regressions and other issues 6often in corner case configurations8 introduced by ne" features in >ernel
patches can also cause kernel patch installation issues% >no"n issues "ill typically be noted in the ,Special
Install Instructions, of the patch R3-D/3 file%
.ecause the ,Special Install Instructions, continue to be updated post-release as ne" issues are found& it is
al"ays a good idea to check the on-line patch R3-D/3s for any updates%
- Sun -lert "ill be issued for Security& Data 2orruption& or System -ailability issues as "ell; therefore& it is
also a good practice to subscribe to the "eekly Sun -lert Report to keep abreast of the latest deelopments%
!ote1 -s Security& Data 2orruption& or System -ailability issues are fi'ed and the resultant patches are
included in the Recommended and Sun -lert patch clusters& the patches "ill be ordered for installation in the
patchGorder file in the clusters in such a "ay as to aoid hitting the issues% $sing the cluster patchGorder file as
a starting point for customi(ed clusters is a good idea in order to leerage the optimal patch install order%
Topic 2: 1$er$ie' of Kernel Patch 8nstallation
Key Points
+hings you should remember "hen installing a kernel
patch1
-l"ays reie" the R3-D/3 file before
installing the patch% Pay special attention to the
,Installation Re*uirements< and ;Special
Install Instructions< sections%
Due to their si(e kernel patches take longer to
install%
TM
8nstalling a Kernel Patch
To install a kernel patch associated "ith Solaris 10
11F05 6$pdate ?8 or earlier& use single-user mode%
!ote1 -pplying a kernel patch in multiuser mode&
significantly increases the risk of the system
e'periencing an inconsistent state%
+he kernel patches associated "ith later releases of
Solaris 10 6Solaris 10 04F0@ $pdate E and later8 are
installed using the Deferred -ctiation Patching
utility%
Sun /icrosystems recommends using Solaris #ie
$pgrade to install kernel patches%
-oid potential issues encountered "hen
installing a kernel patch on a lie boot
enironment%
7ption of falling back to the original boot
enironment if something should go "rong
"ith the installation
+id 4ou Kno'5
- patch that is installed using the Deferred -ctiation Patching utility is designated as a deferred-actiation
patch% - deferred-actiation patch has the ariable S$!9GP-+2QGS-)3G/7D3 set to ,true, in the pkginfo
file%
Preiously& comple' scripting "as re*uired to install kernel patches% Some of these patches also re*uired
interim reboots prior to applying subse*uent patches% +he kernel patches that are installed using Deferred
-ctiation Patching use the loop back file system& or #7)S& to maintain the stability of the system during
patch installation% +he reboot is deferred until all the patches hae been applied%
)or more information on Deferred -ctiation Patching& see the Introduction to Deferred -ctiation Patching
lesson 6.ook 118%
TM
Eebooting the Kernel Patch
-fter a kernel patch installation has completed& a
reboot is re*uired to actiate the ne" kernel ersion%
+his includes deferred-actiation patches%
Note1 If a ,rec+nfigre?++t, is re*uired& the
reconfigure reboot is triggered automatically%
Refer to the ;Special Install Instructions< section in the
R3-D/3 file to find out "hat type of reboot is
re*uired%
Topic 3: Patch Ee3u$enation and the Kernel Patch
@hat is Patch Ee3u$enation5
Patch re0uenation is the process of taking large&
comple' patches and free(ing the code so that their
comple'ity is not further propagated%
@hy Patch Ee3u$enation is "sed
Patch re0uenation is used because it1
Reduces re*uired do"ntime for large patch installs and reisions
Decreases the chance of encountering issues during patch installation
TM
-rief 1$er$ie' of Patch Ee3u$enation
Process
9hen a patch is re0uenated& no more
reisions of the patch are created%
)urther code changes are deliered in a series
of ne"& smaller& and simpler patches called
child patches%
+he child patches depend upon and re*uire the
re0uenated patch%
Starting "ith the Solaris 10 11F05 release
6$pdate ?8& the kernel patch is re0uenated
"ith each Solaris 10 $pdate release%
Note1 +he kernel patches used to build each Solaris
$pdate proide stepping stones to key functionality&
such as Z)S Root support& as "ell as contain a
significant number of accumulated bug fi'es% +he
smaller child patches in bet"een Solaris $pdates
proides more discreet leels of change& primarily bug
fi'es%
+id 4ou Kno'5
Patch re0uenation1
Splits non-core kernel functionality "hich has been accumulated into kernel patches through code
dependencies out of future kernel patches and back into separate non-kernel patches going for"ard so
that future fi'es to the non-kernel functionality can be applied independent of future kernel patches%
Reduces the si(e of subse*uent child patches& including future >ernel patches& to aid faster do"nload
and installation%
Reduces the comple'ity of subse*uent child patches& including future kernel patches& thereby& reducing
the need to propagate ,Special Install Instructions, into future patches and decreasing the chance of re-
encountering issues during the installation of future patches%
+id 4ou Kno'5
)or more information on the patch re0uenation process& see the SunSole Patch Re0uenation +echnical
Instruction C0A?D4 at http1FFsunsole%sun%comFsearchFdocument%doLassetkeyM1-A-45E41-1%
See also the -pril 15& C004 ;Solaris 10 >ernel PatchID Se*uence< blog on Patch 2orner .log at
http1FFblogs%sun%comFpatchFentryFsolarisG10GkernelGpatchidGprogression%
TM
Dor Fore 8nformation
Qere are additional Sun resources%
Product documentation at http1FFdocs%sun%com and the Documentation 2enter
6http1FF"""%sun%comFdocumentationF8
Sun do"nload site1 http1FF"""%sun%comFdo"nloadF
Sun training courses "eb site1 http1FF"""%sun%comFtrainingF
Discussions& such as Sun forums 6http1FFforums%sun%comFinde'%0spa8 and the .ig-dmin Discussions
collection 6http1FF"""%sun%comFbigadminFdiscussionsF8
Sun "ikis& such as the Sun .luePrints "iki 6http1FF"ikis%sun%comFdisplayF.luePrintsF/ain8 and the
.ig-dmin "iki 6http1FF"ikis%sun%comFdisplayF.ig-dminFQome8
Support1
Register your Sun gear1 https1FFinentory%sun%comFinentoryF
Serices1 http1FF"""%sun%comFsericeFinde'%0sp
SunSole
S/
1 http1FFsunsole%sun%com
TM
Copyright 2009 Sun Microsystems, Inc., 4150 Network Circe, S!nt! C!r!, C!i"orni! 95054, #.S.$. $ rights reser%e&.
#.S. 'o%ernment (ights ) Commerci! so"tw!re. 'o%ernment users !re su*+ect to the Sun Microsystems, Inc. st!n&!r&
icense !greement !n& !ppic!*e pro%isions o" the ,$( !n& its suppements. #se is su*+ect to icense terms. -his
&istri*ution m!y incu&e m!teri!s &e%eope& *y thir& p!rties.
.!rts o" the pro&uct m!y *e &eri%e& "rom /erkeey /S0 systems, icense& "rom the #ni%ersity o" C!i"orni!. #NI1 is !
registere& tr!&em!rk in the #.S. !n& in other countries, e2cusi%ey icense& through 134pen Comp!ny, 5t&. 134pen is !
registere& tr!&em!rk o" 134pen Comp!ny, 5t&.
Sun, Sun Microsystems, the Sun ogo, So!ris, SunSo%e, !n& 6,S !re tr!&em!rks or registere& tr!&em!rks o" Sun
Microsystems, Inc. or its su*si&i!ries in the #nite& St!tes !n& other countries.
$ S.$(C tr!&em!rks !re use& un&er icense !n& !re tr!&em!rks or registere& tr!&em!rks o" S.$(C Intern!tion!, Inc. in
the #.S. !n& other countries. .ro&ucts *e!ring S.$(C tr!&em!rks !re *!se& upon !n !rchitecture &e%eope& *y Sun
Microsystems, Inc.
-his pro&uct is co%ere& !n& controe& *y #.S. 72port Contro !ws !n& m!y *e su*+ect to the e2port or import !ws in other
countries. Nuce!r, missie, chemic! *ioogic! we!pons or nuce!r m!ritime en& uses or en& users, whether &irect or
in&irect, !re stricty prohi*ite&. 72port or ree2port to countries su*+ect to #.S. em*!rgo or to entities i&enti"ie& on #.S. e2port
e2cusion ists, incu&ing, *ut not imite& to, the &enie& persons !n& speci!y &esign!te& n!tion!s ists is stricty prohi*ite&.
04C#M7N-$-I4N IS .(48I070 9$S IS9 $N0 $55 71.(7SS 4( IM.5I70 C4N0I-I4NS, (7.(7S7N-$-I4NS $N0
:$(($N-I7S, INC5#0IN' $N; IM.5I70 :$(($N-; 4, M7(C<$N-$/I5I-;, ,I-N7SS ,4( $ .$(-IC#5$(
.#(.4S7 4( N4N)IN,(IN'7M7N-, $(7 0ISC5$IM70, 71C7.- -4 -<7 71-7N- -<$- S#C< 0ISC5$IM7(S $(7
<750 -4 /7 57'$55; IN8$5I0.
TM

Patching Best Practices PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Patching Best Practices PDF

Uploaded by

Copyright:

Available Formats

WS-2700-S10: Solaris

You might also like