[pca] PCA not reporting on patches that may need to be re-installed
Norman Lyon
norman.lyon at gmail.com
Tue Mar 24 20:16:43 CET 2009
I see what you see in S9 and S10. I don't care about S8, but the
story is a tad more complex with more than just 2 architectures
(sun4[dmu]).
BUT, what I'm seeing, at least in 9 and 10, is that (at least with the
patches in the EIS bundles), if different architectures share a common
package version and package name, the patches that apply to the
package is updated for both architectures (I'm ignoring x86 here,
since that has only 1 arch type, so I don't foresee an issue....).
Therefore if I have a particular version identifier for a package, and
the patch patches that package:version, it'll patch it, regardless of
architecture.
So, my current question for you is, do you have any more info on the
problems you had?
Quoting Martin Paul <martin at par.univie.ac.at>:
> Norman Lyon wrote:
>> Wait.... Can't we just drop the '.$ARCH' concern and look at the REV=
>> part of the VERSION? From my initial checking, I'm seeing that the
>> multiple package names are showing up with different versions.......
>
> Seems as if we're getting to the very core of the problem. You are
> right, in your example one could ignore ARCH, as the VERSION is
> enough to differ between the packages; I had not noticed that yet.
> It's not valid for all packages, though.
>
> I looked up the problem reports I got back in 2008/09 when I had
> added recognition of partly installed patches to pca, and it was
> exactly the packages which have the same VERSION for all *.ARCH
> packages which caused problems. Unfortunately this mostly affected
> kernel patches, so pca started trying to re-install those which made
> me retract the code quickly.
>
> I've grep'ed for "VERSION" in Product/*.*/pkginfo now for Solaris 9
> 9/05 and 10 10/08 now on my jumpstart server. Here's a list of
> affected packages for Solaris 10 (the one for Solaris 9 is longer):
>
> FJSVvplr.u/pkginfo:VERSION=11.10.0,REV=2005.01.20.17.25
> FJSVvplr.us/pkginfo:VERSION=11.10.0,REV=2005.01.20.17.25
> FJSVvplu.u/pkginfo:VERSION=11.10.0,REV=2005.01.20.17.25
> FJSVvplu.us/pkginfo:VERSION=11.10.0,REV=2005.01.20.17.25
> SUNWiopc.u/pkginfo:VERSION=11.10.0,REV=2006.07.11.11.28
> SUNWiopc.v/pkginfo:VERSION=11.10.0,REV=2006.07.11.11.28
> SUNWnxge.u/pkginfo:VERSION=11.10.0,REV=2007.07.08.17.44
> SUNWnxge.v/pkginfo:VERSION=11.10.0,REV=2007.07.08.17.44
>
> There are no problems when a patch includes e.g. both SUNWnxge.u and
> SUNWnxge.v, as then on both sun4u and sun4v the package will be
> patched.
>
> The problem is e.g. 120011-14, which includes only SUNWiopc.v. So
> installing the patch on sun4u, SUNWiopc will not be patched, and the
> routine to find unpatched packages shows a false positive, as
> SUNWiopc:11.10.0,REV=2006.07.11.11.28 is installed but not listed in
> "showrev -p".
>
> It's too bad - at the end, it's only a handful of patches which will
> break the detection routine for partly installed patches, but for
> those there's no standard way to identify them from xref data. Some
> kind of hard-coded whitelist would be necessary to ignore certain
> patches and/or packages, but it will be nearly impossible to really
> test this with a reasonable amount of time and effort.
>
> Still - if you decide to implement and use your local check script,
> please let me know how it works out.
>
> Martin.
>
>
More information about the pca
mailing list