[pca] pca Digest, Vol 19, Issue 20

[Techie]

On Fri, Aug 21, 2009 at 11:56 AM, Techie<techchavez at gmail.com> wrote:
> Ok I was hoping to create a BE and patch that BE with the required
> live upgrade patches from DOC 206844,  and then.. upgrade to u6 or u7
> from there.
> Would be nice. If I cannot do that then I will download the required
> liveupgrade patches and install those on the active BE first..
> What a bummer.
>
> GGR, is there a way around this..I was about to try what you wrote above. : )
> I have (SUNWluu, SUNWlur and SUNWlucfg) from U7 DVD(05/09) and the
> latest patches 121430-37 and 119254-67 installed already. I use only
> the default glogal zone or zones.
>
> Thanks a bunch guys.
>
> On Fri, Aug 21, 2009 at 10:04 AM, Don O'Malley<Don.Omalley at sun.com> wrote:
>> Hi,
>>
>> If you are planning to install patches on an alternate boot environment
>> should should first ensure that you have the minimum requirements on the
>> active boot environment met first.
>>
>> http://sunsolve.sun.com/search/document.do?assetkey=1-9-206844-1 outlines
>> the requirements for using Live Upgrade (i.e. patching an alternate boot
>> environment).
>>
>> Best,
>> -Don
>>
>> Rajiv Gunja wrote:
>>
>> Techie,
>> Those patches are just guide lines. PCA will download and install those
>> patches on your LU ABE without issues. Some of the patches SUN have added in
>> that list, example 120011-14 is an obsoleted patch and LU will not install
>> it. But PCA has built in logic to install it last year when SUN created this
>> cyclic redundent obsoleted patches.
>>
>> You do not need to install these patches to make LU work. All you need is a
>> LU packages(SUNWluu, SUNWlur and SUNWlucfg) from U6 DVD and one of their
>> latest patches 121430-35 or revision 37 if you do not mind the latest and
>> greatest from SUN.
>>
>> Another note about 119254-67, the 1st patch in that list, it is a patch
>> utility patch and should always be installed before any patching process.
>>
>> I have tested LU and have been using LU on all versions of Solaris 10 (U1 to
>> U5) and I just let PCA install patches on the ABE.
>>
>> 119254-66 and later revisions supports multiple patching or parallel
>> patching of Zones. So if you have zones, you might want to look into the
>> readme of that patch and change the values in /etc/patch/pdo.conf
>>
>> With the SUN recomended method you will need to reboot your server twice,
>> once after installing the pre-requisites. By using PCA, you can install all
>> the patches in 1 shot, then reboot to the newly patched ABE.
>>
>> Let me know if you need more details as we use this on all our dev and prod
>> server at our office.
>>
>> -GGR
>>
>> --
>> Rajiv G Gunja
>> Blog: http://ossrocks.blogspot.com
>>
>>
>> 2009/8/21 Martin Paul <martin at par.univie.ac.at>
>>>
>>> Techie wrote:
>>>>
>>>> Will the  pca -y -d -a -t 4 command download every patch? Or do i
>>>> specify the patches i want?
>>>
>>> It will download all missing patches by default, just like "pca -si" will
>>> install all missing patches by default. But you can specify a list of
>>> patches both with the "pca -d" and the "pca -si" command to download or
>>> install only a subset of patches.
>>>
>>> Martin.
>>>
>>
>>
>

Martin,
Any idea what these error messages mean? Can these safely be ignored.
They reference the same file /etc/security/audit_event.

Thank you

127127 -- < 11 RS- 483 SunOS 5.10: kernel patch

Looking for 127127-11 (20/29)
Found patch file

Installing 127127-11 (20/29)
Unzipping patch
Checking files for safe patch installation
failed file verification:

ERROR: /a/etc/security/audit_event
    file size <20740> expected <20708> actual
    file cksum <12226> expected <9728> actual

137137 -- < 09 RS- 284 SunOS 5.10: kernel patch

Looking for 137137-09 (23/29)
Found patch file

Installing 137137-09 (23/29)
Unzipping patch
Checking files for safe patch installation
failed file verification:

ERROR: /a/etc/security/audit_event
    file size <20740> expected <20708> actual
    file cksum <12226> expected <9728> actual