Zones and patching

Hi, I'm fairly new to Solaris so sorry for possible dumb question.
When I do patch OS in global zone are those changed reflected in sub-zones as well ? I do assume they are not, right ?
Thanks for an reply
Petr R.

Hi, I'm fairly new to Solaris so sorry for possible
dumb question.
When I do patch OS in global zone are those changed
reflected in sub-zones as well ? I do assume they are
not, right ?Actually, they usually are. If the patch doesn't apply to another zone (usually due to package differences), then it won't be applied. Otherwise it is. In a few cases, you can patch a non-global zone, but only if the packages allow it.
The docs have quite a bit of information on this.
http://docs.sun.com/app/docs/doc/817-1592/6mhahuoqn?a=view
Darren

Similar Messages

Whole root or sparse root zones and patching

Hi all,
A while back, I did some cluster patching tests on a system with only sparse root zones, and one with whole root zones...and I seem to recall that the patch time was about equal which surprised me. I had thought the sparse root model mainly is patching the global zone, and even though patchadd may need to run through the sparse NGZ's...that it isn't doing much other than updating /var/sadm info in the NGZ's.
Has anyone seen this to be true or if there are major patching improvements using a "sparse" root NGZ model over a "whole" root model?
thanks much.

My testing showed the same results and I was a bit surprised as well. As I dug into it further my understanding was that the majority of the patch application time goes into figuring out what to patch, not actually copying files around. That work must be done for the sparse zones in the same way as for the full root zones, we just save the few milliseconds of actually backing up and replacing the file.
I suspect there is a large amount of slack that could be optimized in the patching process (both with and without zones), but I don't understand it nearly well enough to say that with any authority.

Few zone and diffrent patch level

I make two small zones, detach one of this zone and patching all system and I have some questions.
root@Solek # zoneadm list -cv
ID NAME             STATUS     PATH                           BRAND    IP
   0 global           running    /                              native   shared
   1 zone1            running    /zone/zone1                    native   shared
   - zone2            configured /zone/zone2                    native   shared
root@Solek # zoneadm -z zone2 attach
These packages installed on this system were not installed on the source system:
        SUNWinstall-patch-utils-root (11.10,REV=2005.01.09.23.05)
        SUNWbindr (11.10.0,REV=2005.01.08.05.16)
These patches installed on this system were not installed on the source
system:
        126538
        126419
        120011
      .....and this is ok, but how can I "patch" this zone?
I know this is small zone and it use file in global zone (which is patched), but what can I do to correct information in zone2 about all install patches?
i attach this zone with "-F"
root@Solek # showrev -p | grep 126538
Patch: 126538-01 Obsoletes: 121901-02 Requires: 119042-09
root@Solek # zoneadm -z zone2 attach -F
root@Solek # zoneadm -z zone2 boot
root@Solek # zlogin -C zone2
root@zone2 #showrev -p | grep 126538
[Connection to zone 'zone2' console closed]
root@Solek # zoneadm -z zone2 halt
root@Solek # zoneadm -z zone2 deatach
root@Solek # zoneadm -z zone2 attachWhy now I detach/attach this zone whithout any error?

and this is ok, but how can I "patch" this zone? You need a system at the same patchlevel as the zone,
then attach the zone to this system.
You could now detach your zones, remove the patches, attach
your unpatched zone, patch system, attach all other zones.
Why now I detach/attach this zone whithout any error?This is a sun design issue. They compare the patchlevel of the
source and target system, not the patchlevel of the zone!
After the attach -F the zone patchlevel is different, but zoneadm
doesn't care ...
Best regards,
Marcel

Is it possible to patch Global Zone and only specific Non-Global Zones?

Hi Champs,
Is it possible to patch Global Zone and only specific Non-Global Zones? Idea is to patch DEV-zones only on the system & test applications and then patch only the STG-zones on same server!
Not sure if it is possible but just throwing a question...
Cheers,
Nitin

M10vir wrote:
Yes, if you have branded (non-sparse) zone!Branded zones and sparse zones don't have the relation that you imply. In Solaris 10, native zones can be sparse or whole-root (non-sparse, as you say). Zones that are not native zones are branded zones. Branded zones on Solaris 10 include Solaris Legacy Containers, previously known as Solaris 8 Containers and Solaris 9 Containers. That add-on product allows you to run Solaris 8 and Solaris 9 application environments under a thin layer of virtualization provided by the brands framework. solaris8 and solaris9 branded zones can be patched independently of each other and of the global zone.
Solaris 11 has no "native zones" - all zones use the brands framework. The "solaris" brand does no emulation and in that respect is very similar to native zones on Solaris 10. Solaris 11 also provides Solaris 10 Zones via the solaris10 brand. This allows zones or the global zone from a Solaris 10 system to be transferred to a Solaris 11 system and run as solaris10 zones. When running on Solaris 11, solaris10 zones can each be patched independently from each other and the Solaris 11 global zone. Technically, Solaris 11 doesn't have patches - it just has newer versions of packages to which the system is updated.

We can able to add package and patch in Non-Golbel zone?

Hi Sun Gurus,
We have V890 server and it's configered zones.We are facing problem with package and Patch adding in Non-Golbel zone.
I want to confirm whether we can able to add package and patch in Non-Golbel zone?
Thanks in advance
Raja

If their sparse root zones, then you have to install the package and patch in the global zone. The non global zones will all pick them up automatically.
If you need to be able to install packages in only specific zones then you need to make them whole root zones.

To break out of a non-global zone and become root user in the global zone

Hi folks
"to break out of a non-global zone and become root user in the global zone through a kernel bug exploit"
Is this possible and has SUN allready a fix/workaround/patch for that?
Cheers

Is it possible there's a bug in the kernel? Sure.
Someone would need to find and identify such a bug before it could be fixed. I've not heard of the discovery of a bug like this. You could check the bug database at www.opensolaris.org.
Darren

Non-Global zones and Live Upgrade

Good afternoon,
Trying to find an answer for a question that I have.
Currently we have (2) T5140 servers. One of them is our production Sun Messaging Server and the other is the backup. The zones are SAN-attached disks(currently running on the Production server) and each server is "aware" of them. They are only mounted on one server at a time. My question is, I can do a LiveUpgrade on the backup server (from Solaris10u10 to Solaris10u11) and then detach/export the NGZ from the production system and use "update on attach" to upgrade the NGZ to Solaris10u11. If I don't upgrade the Production Box(Global) to u11 and have to move my NGZ back to it, will "update on attach" rollback the NGZs back to u10?
We have a test system that we will be working through to test using LiveUpgrade without detaching the zones. But wanted to see the feasibility of doing this the way I have it mention in the above paragraph.
Thanks in advance for your help!!
Doug

Found my answer: BigAdmin Feature Article: The Zones Update on Attach Feature and Patching in the Solaris 10 OS</title><meta nam…

Live upgrade, zones and separate mount points

Hi,
We have a quite large zone environment based on Solaris zones located on VxVM/VxFS. I know this is a doubtful configuration but the choice was made before i got here and now we need to upgrade the environment. Veritas guides says its fine to locate zones on Veritas, but i am not sure Sun would approve.
Anyway, sine all zones are located on a separate volume i want to create a new one for every zonepath, something like:
lucreate -n upgrade -m /:/dev/dsk/c2t1d0s0:ufs -m /zones/zone01:/dev/vx/dsk/zone01/zone01_root02:ufs
This works fine for a while after integration of 6620317 in 121430-23, but when the new environment is to be activated i get errors, see below[1]. If i look at the command executed by lucreate i see that the global root is mounted, but by zoneroot does not seem to have been mounted before the call to zoneadmd[2]. While this might not be a supported configuration, VxVM seems to be supported and i think that there are a few people out there with zonepaths on separate disks. Live upgrade probably has no issues with the files moved from the VxFS filesystem, that parts has been done, but the new filesystems does not seem to get mounted correctly.
Anyone tried something similar or has any idea on how to solve this?
The system is a s10s_u4 with kernel 127111-10 and Live upgrade patches 121430-25, 121428-10.
1:
Integrity check OK.
Populating contents of mount point </>.
Populating contents of mount point </zones/zone01>.
Copying.
Creating shared file system mount points.
Copying root of zone <zone01>.
Creating compare databases for boot environment <upgrade>.
Creating compare database for file system </zones/zone01>.
Creating compare database for file system </>.
Updating compare databases on boot environment <upgrade>.
Making boot environment <upgrade> bootable.
ERROR: unable to mount zones:
zoneadm: zone 'zone01': can't stat /.alt.upgrade/zones/zone01/root: No such file or directory
zoneadm: zone 'zone01': call to zoneadmd failed
ERROR: unable to mount zone <zone01> in </.alt.upgrade>
ERROR: unmounting partially mounted boot environment file systems
ERROR: umount: warning: /dev/dsk/c2t1d0s0 not in mnttab
umount: /dev/dsk/c2t1d0s0 not mounted
ERROR: cannot unmount </dev/dsk/c2t1d0s0>
ERROR: cannot mount boot environment by name <upgrade>
ERROR: Unable to determine the configuration of the target boot environment <upgrade>.
ERROR: Update of loader failed.
ERROR: Unable to umount ABE <upgrade>: cannot make ABE bootable.
Making the ABE <upgrade> bootable FAILED.
ERROR: Unable to make boot environment <upgrade> bootable.
ERROR: Unable to populate file systems on boot environment <upgrade>.
ERROR: Cannot make file systems for boot environment <upgrade>.
2:
0 21191 21113 /usr/lib/lu/lumount -f upgrade
0 21192 21191 /etc/lib/lu/plugins/lupi_bebasic plugin
0 21193 21191 /etc/lib/lu/plugins/lupi_svmio plugin
0 21194 21191 /etc/lib/lu/plugins/lupi_zones plugin
0 21195 21192 mount /dev/dsk/c2t1d0s0 /.alt.upgrade
0 21195 21192 mount /dev/dsk/c2t1d0s0 /.alt.upgrade
0 21196 21192 mount -F tmpfs swap /.alt.upgrade/var/run
0 21196 21192 mount swap /.alt.upgrade/var/run
0 21197 21192 mount -F tmpfs swap /.alt.upgrade/tmp
0 21197 21192 mount swap /.alt.upgrade/tmp
0 21198 21192 /bin/sh /usr/lib/lu/lumount_zones -- /.alt.upgrade
0 21199 21198 /bin/expr 2 - 1
0 21200 21198 egrep -v ^(#|global:) /.alt.upgrade/etc/zones/index
0 21201 21198 /usr/sbin/zonecfg -R /.alt.upgrade -z test exit
0 21202 21198 false
0 21205 21204 /usr/sbin/zoneadm -R /.alt.upgrade list -i -p
0 21206 21204 sed s/\([^\]\)::/\1:-:/
0 21207 21203 zoneadm -R /.alt.upgrade -z zone01 mount
0 21208 21207 zoneadmd -z zone01 -R /.alt.upgrade
0 21210 21203 false
0 21211 21203 gettext unable to mount zone <%s> in <%s>
0 21212 21203 /etc/lib/lu/luprintf -Eelp2 unable to mount zone <%s> in <%s> zone01 /.alt.up
Edited by: henrikj_ on Sep 8, 2008 11:55 AM Added Solaris release and patch information.

I updated my manual pages got a reminder of the zonename field for the -m option of lucreate. But i still have no success, if i have the root filesystem for the zone in vfstab it tries to mount it the current root into the alternate BE:
# lucreate -u upgrade -m /:/dev/dsk/c2t1d0s0:ufs -m /:/dev/vx/dsk/zone01/zone01_rootvol02:ufs:zone01
<snip>
Creating file systems on boot environment <upgrade>.
Creating <ufs> file system for </> in zone <global> on </dev/dsk/c2t1d0s0>.
Creating <ufs> file system for </> in zone <zone01> on </dev/vx/dsk/zone01/zone01_rootvol02>.
Mounting file systems for boot environment <upgrade>.
ERROR: UX:vxfs mount: ERROR: V-3-21264: /dev/vx/dsk/zone01/zone01_rootvol is already mounted, /.alt.tmp.b-gQg.mnt/zones/zone01 is busy,
allowable number of mount points exceeded
ERROR: cannot mount mount point </.alt.tmp.b-gQg.mnt/zones/zone01> device </dev/vx/dsk/zone01/zone01_rootvol>
ERROR: failed to mount file system </dev/vx/dsk/zone01/zone01_rootvol> on </.alt.tmp.b-gQg.mnt/zones/zone01>
ERROR: unmounting partially mounted boot environment file systems
If i tried to do the same but with the filesystem removed from vfstab, then i get another error:
<snip>
Creating boot environment <upgrade>.
Creating file systems on boot environment <upgrade>.
Creating <ufs> file system for </> in zone <global> on </dev/dsk/c2t1d0s0>.
Creating <ufs> file system for </> in zone <zone01> on </dev/vx/dsk/zone01/zone01_upgrade>.
Mounting file systems for boot environment <upgrade>.
Calculating required sizes of file systems for boot environment <upgrade>.
Populating file systems on boot environment <upgrade>.
Checking selection integrity.
Integrity check OK.
Populating contents of mount point </>.
Populating contents of mountED.
ERROR: Unable to make boot environment <upgrade> bootable.
ERROR: Unable to populate file systems on boot environment <upgrade>.
ERROR: Cannot make file systems for boot environment <upgrade>.
If i let lucreate copy the zonepath to the same slice as the OS, the creation of the BE works fine:
# lucreate -n upgrade -m /:/dev/dsk/c2t1d0s0:ufs

HT1657 I downloaded a movie from iTunes on my iPhone 4S, went out of the wifi zone and now my movie is no where to be found. I can't find it on my iPhone, Mac or iPad. Where is it?

I downloaded a movie from iTunes on my iPhone 4S, went out of the wifi zone and now my movie is no where to be found. I can't find it on my iPhone, Mac or iPad. Where is it?

Sounds like the movie didn't finish downloading before the Wi-Fi signal dropping ...
Try re downloading. You won't be charged again.
Downloading past purchases from the App Store, iBookstore, and iTunes Store

How to find out the IPS and DS Service Pack and patch levels in windows server.

Hi,
I have installed the Information Platform Services 4.0 and Data services 4.0 in windows QA system, now we need to install the same version of IPS & DS in windows PRD system for this how could we find out the exact version of IPS & DS ( Service pack and patch levels ) and where we can find the same.
Many Thanks,
Sudheer

Hi Sudheer,
On a Windows Operating Systems you can check the “Programs and Features” in control panel.You can see a list of both the Name and Version number of SAP BusinessObjects that is installed.
option 2:
Open CMC go to Settings. In the properties, you will find the Product Version.
Please check below SAP notes for more information.
http://service.sap.com/sap/support/notes/1602088
Regards,
Pavan

Firm Zone and Trade off Zone in Scheduling Agreement

Dear All
Please explain in detailed the concept of Firm Zone and Trade off Zone in Scheduling Agreement, and it's effects in MRP run, i.e. If i take a MRP run for a material whci is having firm zone as 30 days and trade off zone as 60 days then what will be the result of MRP. The Material MRP type is VB
Thanks and Regards
Manoj

Hi,
Firm zone is the time frame in which you cannot change your orders (schedule lines) that you have ordered from a vendor in any way (Date change nor quantity change).
Trade off zone is time frame within which you can make changes to your procurement proposals, these changes are acceptable from vendor's side.
These time frames are agreed with the Vendor and then inserted for each scheduling agreement in 'Additional data'.
For your example if you take firm zone 30 days and trade-off zone 60 days, the check starts from current day on which MRP runs. For exampe current day is 1st Oct, all the procurement proposals with delivery date within 30 days that is till 1st September are firm orders, which MRP will not change in any case (You can find such orders with * in front of them in MD04 list). Beyond 1st september they are in trade off zone, in which MRP can modify them.
MRP types (VB in your case) have no correlation with these zones.
Amit G

I'm trying to burn a dvd from idvd but I keep getting error message, broken assets, but when I check my drop zones and their content there's no error messages on any of them?

I'm trying to burn a dvd from idvd but I keep getting error message, broken assets, but when I check my drop zones and their content there's no error messages on any of them?

Hi
And if You change view - in main "window/view field" so that You see the box-plot structure.
No exclamation marks there either ?
and non at the front page ?
iDVD do not copy Your material - only points to where it is stored. So if on any external hard disks, USB-memories, CDs or DVDs are missing - assetts are broken.
Or if You changed location of any material or directed iPhoto or iTunes or GarageBand to a new Library - Then iMovie/iDVD also get's lost.
Yours Bengt W

Difference between service pack and Patch in XI

What is the difference between Service Pack(SP) AND Patch ??
e.g SP12, Patch8.
Is it like that when there is a major change they will issue SP and
for a small change they will issue patch ?? or after number of patches
they will issue SP combining all the patches ??
Service Pack level can be seen from SAP gui system..>status.
But Patch level where can we see ?? what is the Tcode for that ?? or just we got
to go through below links ??
http://<host>:<j2ee_http_port>/sap/monitoring/ComponentInfo
also
http://<host>:<j2ee_http_port>/sap/monitoring/SystemInfo for core system info (J2EE or JVM patch level, etc.)
thanks
kumar

Hello,
A service pack (in short SP) is a collection of updates, fixes and/or enhancements to a software program delivered in the form of a single installable package. Service packs are usually numbered, and thus shortly referred to as SP1, SP2, etc. It is notable that they may bring, besides bug fixes, entirely new features
A patch (sometimes called a "fix") is a quick-repair job for a piece of programming. During a software product's beta test distribution or try-out period and later after the product is formally released, problems (called bug) will almost invariably be found. A patch is the immediate solution that is provided to users; it can sometimes be downloaded from the software maker's Web site. The patch is not necessarily the best solution for the problem and the product developers often find a better solution to provide when they package the product for its next release.

Update and Patch download errors (CC 2014)

Hi all, this was initially meant to be a customer support chat, but it seems to be unavailable currently, so I'll ask on here instead.
The issue is happening on Creative Cloud (1.7.1.418)
I am running Mac OSX Mavericks (version 10.9.4), early 2011 model, 2GHz Intel Core i7 Processor, 4 GB 1333 MHz DDR3 Memory
The Creative Cloud app is showing 6 updates. The updates are as follows...
Premier Pro CC (2014) : Adobe Premier Pro CC 2014.0.1 Update
Photoshop CC (2014) : Photoshop Camera Raw 8.5 (CC)
InDesign CC (2014) : DPS Desktop Tools CC2014 31.0.1 Update
Flash Professional CC and Mobile Device Packaging (2014) : Flash Professional CC Update - July 2014, as well as Photoshop Camera Raw 8.5(CC)
Media Encoder CC (2014) : Adobe Media Encoder CC (2014.0.1)
After Effects CC (2014) : Photoshop Camera Raw 8.5(CC)
When I click the update button on any of these updates, I almost instantly receive an 'Update Failed' message.
Upon clicking the 'Learn More' option, it reads 'Update Failed - Download Error. Press Retry to try again or contact customer support.(49).
When Retrying, the same happens every time.
It also affects newly installed apps. This morning when installing Bridge CC, the app itself downloaded fine, but an error message saying 'Instillation Succeeded, but a patch failed - Download Error. Press Retry to try again or contact customer support.(49).' appeared.
It has been doing this for a fair few months now, having hoped upgrading from the CC apps to the new CC 2014 apps would fix it.. These updates themselves are also quite sporadic in their appearance. When I shut down my Mac and restart it, the updates often disappear, with an 'all apps are up to date' message in their place. They only then reappear when downloading a new app, or a more up-to-date update becomes available.
I have tried uninstalling and reinstalling the apps multiple times, but nothing changes. In the past, I have tried manually downloading and installing the updates and patches through the website, though that too gave me an error message. I have switched off my firewall on occasion, as well as allowed all Adobe apps to be allowed through, though this does not seem to have any effect. I have tried it in multiple locations, being connected to multiple routers, so I do not believe it is a router issue. I am a student, so not connected to any companies that may be blocking access. I have also had a brief look at install logs in the past, though I am not particularly tech savvy when It comes to that sort of thing. I have also seen people recommend trying to update in root user mode, though I am not particularly comfortable with that, as I have been told It's not a good idea to mess about as a root user when you don't really know what you're doing
Any help would be greatly appreciated
Cheers
James

Creative Cloud chat support (all Creative Cloud customer service issues)
http://helpx.adobe.com/x-productkb/global/service-ccm.html

ISW 6.0 and patch 119214 (NSS/NSPR/JSS) will it ever be solved

I am just wondering if the problem with ISW 6 and patch 119214-19 and higher will ever be fixed.
Sun bugid: 6862663
Synopsis: ISW core install breaks dsadm
ld.si.1: libnss3.so: version NSS_3.12 not found (require by file /var/mps/serverroot/lib/libss13.so)
I have al always got over the problem by not install the patch and staying at version -17, but version -19 is installed by default on the latest version of Solaris.
Setup is:
Solaris 10 10/09
DSEE 7.0
ISW 6
The who installation completly fails since patch 119214-19 is installed. I guess this software (ISW) must be EOL since it would not pass the default install testers..
I have fixed the problem by coping files from an older installationed and putting the files back after the ISW installtion finished..
Come on we need a fix or release ISW 6.3....
Thanks
Andrew

And the corresponding patches for Solaris 9 SPARC, 119211-xx, continue to break DS5.2 :(

Zones and patching

Similar Messages

Maybe you are looking for