[pca] Packages and false patch information

Laurent Blume laurent at elanor.org
Mon Feb 8 09:06:07 CET 2010


Le 08/02/10 12:06, Dan Cook a écrit :
> Recently we patched some systems in our company. Several encountered
> this issue where a package from a later Update of Solaris 10 was
> applied. See this link for a short description:
> http://blogs.sun.com/patch/entry/do_not_apply_packages_from
>
> PCA did not seem to handle this situation well, and seemed to produce an
> unbootable system. The fault seems to be partially installed patches,
> introduced through previously added /later update packages/, and then
> reported through showrev -p. Presumably PCA then assumes that this patch
> is already applied and then continues applying patches, including those
> for which the partially installed patch is a pre-requisite.
>
> My query is, can PCA be changed to recognise this situation? I see both
> patchdiag.xref and showrev -p have package names associated with each of
> the patches.

Partially installed patches is a long-term flaw of SysV packaging. PCA 
is not a solution to those problems, that's supposed to be IPS.
If the system's own tools think it's fine to install patches when they 
should not, how can a 3rd party tool know better than SunOracle's own? 
PCA relies on the information given by those. If patchadd says a patch 
is installed, there's no practical way to doubt its word.
This and other SysV packages shortcomings have been discussed to death 
over the years, and AFAICT, there's simply no other solution than 
careful human intervention.

Laurent
-- 
/ Leader de Projet & Communauté    | I'm currently on leave from
\ G11N   http://fr.opensolaris.org | Bull Services http://www.bull.com
/ FOSUG  http://guses.org          |



More information about the pca mailing list