[pca] Patch xxxxxx-xx is for global zone only - cannot be installed on non-global zone.

Tue Jun 18 15:25:03 CEST 2013

Hi Neil,

Thank you for the reply.  I finally found the problem.  My colleague had attached the local zone with -F flag which is to force the zoneadm attach without installing the patches into the local zone.

As pca uses the showrev -p command to list the patches installed, he did not see that some patches have been install on the global zone and tries to install them again.

We will reschedule the change with our client, to attach the zone with -U flag, and let you know the result.

Merci et bonne journée
Thank you and have a good day

De : pca-bounces at lists.univie.ac.at [mailto:pca-bounces at lists.univie.ac.at] De la part de Brookins, Neil (Philadelphia)
Envoyé : 18 juin 2013 08:33
À : PCA (Patch Check Advanced) Discussion
Objet : Re: [pca] Patch xxxxxx-xx is for global zone only - cannot be installed on non-global zone.

I always patch my global zone first. Then I look on the non-global zones to see if any patches are still missing and usually they are not missing any. Occasionally I need to install one patch in the non-global zone due to an application that exists there which is not in the global zone, but that is not very often.  So, with this procedure I do not run into the errors that you are seeing below.

I'm confused by your list of patches below. Let me explain...
You state that the zone already has 148888-03 installed (This is seen on the line below that starts with "Host: ...")
According to the readme for 148888-03 it requires that you have 147147-26 already installed.
Yet, you are trying to install 147147-26... That doesn't make sense since that patch is already installed.
This line below shows that its not installed. That's impossible since 148888-03 is installed.
147147 -- < 26 RS- 131 SunOS 5.10: kernel patch

Also, since 147147-26 is a kernel patch and the non-global zone shares the same kernel with the global zone, it makes sense that this install would fail in a non-global zone.
In summary, only a subset of patches are possible to install in a non-global zone. And even then, this may depend on whether you are using whole root or sparse root zones.
The former will give you more flexibility to patch non-global to a different patch level than the latter will. If you don't want the non-global to be at a different patch level than the global, then its best to just patch the global zone and get both at once.
Patching the non-global is only necessary if you want it to be different than the global.

Neil G. Brookins
Identity and Authentication Solutions - IT Global Solutions
Towers Watson
1500 Market Street | Philadelphia, PA 19102
Phone: +1 215 246 6046
neil.brookins at towerswatson.com<mailto:neil.brookins at towerswatson.com>

From: pca-bounces at lists.univie.ac.at<mailto:pca-bounces at lists.univie.ac.at> [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Harvey, Dominic
Sent: Monday, June 17, 2013 7:55 PM
To: pca at lists.univie.ac.at<mailto:pca at lists.univie.ac.at>
Subject: [pca] Patch xxxxxx-xx is for global zone only - cannot be installed on non-global zone.

Why pca try to install patch for global zone, in local zone?

#grep "global zone only" Patches_installation_2013Q2.log
Patch 119764-08 is for global zone only - cannot be installed on non-global zone.
Patch 121430-86 is for global zone only - cannot be installed on non-global zone.
Patch 142373-03 is for global zone only - cannot be installed on non-global zone.
Patch 140912-02 is for global zone only - cannot be installed on non-global zone.
Patch 142088-03 is for global zone only - cannot be installed on non-global zone.
Patch 142543-02 is for global zone only - cannot be installed on non-global zone.
Patch 142933-05 is for global zone only - cannot be installed on non-global zone.
Patch 143643-08 is for global zone only - cannot be installed on non-global zone.
Patch 144742-02 is for global zone only - cannot be installed on non-global zone.
Patch 146694-02 is for global zone only - cannot be installed on non-global zone.
Patch 147442-01 is for global zone only - cannot be installed on non-global zone.
Patch 147147-26 is for global zone only - cannot be installed on non-global zone.
Patch 147143-17 is for global zone only - cannot be installed on non-global zone.
Patch 147793-07 is for global zone only - cannot be installed on non-global zone.
Patch 148023-03 is for global zone only - cannot be installed on non-global zone.
Patch 148027-04 is for global zone only - cannot be installed on non-global zone.
Patch 148029-01 is for global zone only - cannot be installed on non-global zone.
Patch 148035-06 is for global zone only - cannot be installed on non-global zone.
Patch 148043-02 is for global zone only - cannot be installed on non-global zone.
Patch 148071-10 is for global zone only - cannot be installed on non-global zone.
Patch 148112-02 is for global zone only - cannot be installed on non-global zone.
Patch 148223-02 is for global zone only - cannot be installed on non-global zone.
Patch 148237-01 is for global zone only - cannot be installed on non-global zone.
Patch 148309-03 is for global zone only - cannot be installed on non-global zone.
Patch 148322-07 is for global zone only - cannot be installed on non-global zone.
Patch 148328-03 is for global zone only - cannot be installed on non-global zone.
Patch 148336-01 is for global zone only - cannot be installed on non-global zone.
Patch 148342-06 is for global zone only - cannot be installed on non-global zone.
Patch 148381-02 is for global zone only - cannot be installed on non-global zone.
Patch 148383-01 is for global zone only - cannot be installed on non-global zone.
Patch 148415-02 is for global zone only - cannot be installed on non-global zone.
Patch 148419-03 is for global zone only - cannot be installed on non-global zone.
Patch 148423-01 is for global zone only - cannot be installed on non-global zone.
Patch 148559-07 is for global zone only - cannot be installed on non-global zone.
Patch 148565-01 is for global zone only - cannot be installed on non-global zone.
Patch 148571-01 is for global zone only - cannot be installed on non-global zone.
Patch 148768-01 is for global zone only - cannot be installed on non-global zone.
Patch 148881-01 is for global zone only - cannot be installed on non-global zone.
Patch 148888-03 is for global zone only - cannot be installed on non-global zone.
Patch 148975-01 is for global zone only - cannot be installed on non-global zone.
Patch 148985-01 is for global zone only - cannot be installed on non-global zone.
Patch 149057-01 is for global zone only - cannot be installed on non-global zone.
Patch 149163-01 is for global zone only - cannot be installed on non-global zone.
Patch 149165-01 is for global zone only - cannot be installed on non-global zone.
Patch 149173-03 is for global zone only - cannot be installed on non-global zone.
Patch 149175-02 is for global zone only - cannot be installed on non-global zone.
Patch 149277-01 is for global zone only - cannot be installed on non-global zone.
Patch 149622-01 is for global zone only - cannot be installed on non-global zone.
Patch 149895-01 is for global zone only - cannot be installed on non-global zone.
Patch 150117-01 is for global zone only - cannot be installed on non-global zone.
Patch 150123-01 is for global zone only - cannot be installed on non-global zone.
Patch 150125-01 is for global zone only - cannot be installed on non-global zone.
Patch 150157-01 is for global zone only - cannot be installed on non-global zone.

# /opt/cgi/scripts/pca --version
pca 20130502-01

# /opt/cgi/scripts/pca  -y -l  missingrs
Using /var/tmp/patchdiag.xref from Apr/30/13
Host: xxxxyyyyy (SunOS 5.10/Generic_148888-03/sparc/sun4v)
List: missingrs (55/6377)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- --- -------------------------------------------------------
119764 07 < 08 RS- 203 SunOS 5.10 : ipmitool patch
121430 83 < 86 RS-  98 SunOS 5.8 5.9 5.10: Live Upgrade Patch
142373 02 < 03 R--  67 SunOS 5.10: AST Graphics Patch
125719 47 < 49 RS-  67 X11 6.8.0: Xorg server patch
140912 01 < 02 R-- 116 SunOS 5.10: ufsrestore patch
142088 02 < 03 R--  87 SunOS 5.10: fp.so patch
142543 01 < 02 R--  49 SunOS 5.10: svc-snmpdx libssagent.so.1 mibiisa snmpdx snmpdx.xm pa
142933 04 < 05 R-- 131 SunOS 5.10: failsafe patch
143643 06 < 08 R-- 199 SunOS 5.10: libMPAPI.so libmpscsi_vhci.so libMPAPI.so.1 libmpscsi_
144742 -- < 02 R-- 221 SunOS 5.10: JPool.jar patch
146694 -- < 02 RS- 131 SunOS 5.10: cron patch
147442 -- < 01 R-- 131 SunOS 5.10: place holder patch
147147 -- < 26 RS- 131 SunOS 5.10: kernel patch
147143 -- < 17 RS- 119 SunOS 5.10: iSCSI patch
147793 -- < 07 RS-  90 SunOS 5.10: kerberos patch
148023 -- < 03 R-- 131 SunOS 5.10: bmc patch
148027 -- < 04 RS-  52 SunOS 5.10: compress cp cpio ln mv pack pax tar patch
148029 -- < 01 R-- 131 SunOS 5.10: ntp patch
148035 -- < 06 R-- 130 SunOS 5.10: igb patch
148043 -- < 02 R-- 131 SunOS 5.10: routed patch
148071 -- < 10 RS-  90 SunOS 5.10: openssl patch
148112 -- < 02 RS- 131 SunOS 5.10: root_archive patch
148223 -- < 02 R-- 131 SunOS 5.10: zonecfg patch
148237 -- < 01 R-- 131 SunOS 5.10: vold patch
148309 -- < 03 RS- 131 SunOS 5.10: dhcp patch
148322 -- < 07 R-- 105 SunOS 5.10: ixgbe patch
148328 -- < 03 R-- 102 SunOS 5.10: dladm patch
148336 -- < 01 R-- 131 SunOS 5.10: awk patch
148338 -- < 04 R--  52 SunOS 5.10: s9_brand patch
148342 -- < 06 R-- 131 SunOS 5.10: nxge patch
148381 -- < 02 R-- 131 SunOS 5.10: cdrw patch
148383 -- < 01 RS- 131 SunOS 5.10: IPv6 patch
148415 -- < 02 R--  98 SunOS 5.10: rdsv3 ibcm patch
148419 -- < 03 R--  91 SunOS 5.10: nss_dns patch
148423 -- < 01 RS- 131 SunOS 5.10: /usr/ccs/bin/error patch
148559 -- < 07 R--  52 SunOS 5.10: timezone patch
148565 -- < 01 RS- 131 SunOS 5.10: fdformat patch
148571 -- < 01 R-- 131 SunOS 5.10: fcinfo patch
148768 -- < 01 RS- 131 SunOS 5.10: calendar diff3 spell uupick patch
148881 -- < 01 RS- 131 SunOS 5.10: xntpd patch
148888 -- < 03 RS-  55 SunOS 5.10: kernel patch
148975 -- < 01 RS- 131 SunOS 5.10: in.rexecd patch
148985 -- < 01 RS- 131 SunOS 5.10: libgss patch
149057 -- < 01 R-- 131 SunOS 5.10: llc2 patch
149163 -- < 01 RS- 131 SunOS 5.10: rlmod patch
149165 -- < 01 RS- 131 SunOS 5.10: timod patch
149173 -- < 03 R-- 131 SunOS 5.10: emlxs driver patch
149175 -- < 02 R-- 131 SunOS 5.10: qlc patch
149277 -- < 01 R-- 131 SunOS 5.10: stmsboot patch
149622 -- < 01 R-- 131 SunOS 5.10: oce patch
149895 -- < 01 RS-  67 SunVTS 7.0 Patch Set 16 consolidation patch
150117 -- < 01 RS-  87 SunOS 5.10: mac patch
150123 -- < 01 RS-  90 SunOS 5.10: sharefs patch
150125 -- < 01 R-- 104 SunOS 5.10: ZFS patch
150157 -- < 01 RS-  87 SunOS 5.10: RPC patch

# zoneadm list -cv
  ID NAME             STATUS     PATH                           BRAND    IP
   1 xxxxyyyy         running    /                              native   shared

Merci et bonne journée
Thank you and have a good day

Notice of Confidentiality
This transmission contains information that may be confidential. It has been prepared for the sole and exclusive use of the intended recipient and on the basis agreed with that person. If you are not the intended recipient of the message (or authorized to receive it for the intended recipient), you should notify us immediately; you should delete it from your system and may not disclose its contents to anyone else.

This e-mail has come to you from Towers Watson Delaware Inc. or Towers Watson Pennsylvania Inc.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.univie.ac.at/pipermail/pca/attachments/20130618/c492e55b/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Dominic Harvey.vcf
Type: text/x-vcard
Size: 1728 bytes
Desc: Dominic Harvey.vcf
URL: <https://lists.univie.ac.at/pipermail/pca/attachments/20130618/c492e55b/attachment-0001.vcf>