The best way to patch

[David Burgess]

I've just finished setting up my Ignite-UX server and have configured the patches to be applied at the end by setting the load order in QPK1100_cfg.

Is this the best way or should I be using a script to supply -x options for swinstall to make sure the patches are matched correctly for the software already installed?

QPK1100_cfg :-

#########################################################
## Software Sources
#########################################################

sw_source "/var/opt/ignite/depots/Rel_B.11.00/QPK1100" {
source_type = "NET"
sd_server = "192.168.101.101"
sd_depot_dir = "/var/opt/ignite/depots/Rel_B.11.00/QPK1100"
source_format = SD
load_order=99
}



######################################################
## Other Software
#####################################################

sw_sel "QPK1100" {
description = "Quality Pack for HP-UX 11.00, March 2003"
sw_source = "/var/opt/ignite/depots/Rel_B.11.00/QPK1100"
sw_category = "HPUXAdditions"
sd_software_list = "QPK1100,r=B.11.00.60.4,a=HP-UX_B.11.00_32/64,v=HP"
(_hp_os_bitness == "32") {
impacts = "/usr" 554864Kb
impacts = "/var" 769304Kb
impacts = "/sbin" 11904Kb
impacts = "/opt" 194264Kb
impacts = "/etc" 192Kb
impacts = "/" 8080Kb
}
(_hp_os_bitness == "64") {
impacts = "/usr" 572448Kb
impacts = "/var" 794696Kb
impacts = "/sbin" 11904Kb
impacts = "/opt" 194440Kb
impacts = "/etc" 192Kb
impacts = "/" 15712Kb
}
}

Regards,

Dave.

[Mark Greene_1]

I've never tried it the way you are doing. I always use the GUI version and take almost all the default settings, which includes the dependancy and disk space checks. The only option I change is the mount all file systems.

mark

[David Burgess]

Mark,

Before adding the load_order, the patches were getting put on before all the applications were installed so I was not patching the applications and therefore missing patches. Also the install failed and the GUI showed a red icon. Did you not run the make_depots and make_config commands to set up your Ignite server?

Eg.

# make_depots -r B.11.00 -s /SD_CDROM/QPK1100

Create _cfg files :-

# make_config -r B.11.00

Regards,

Dave.

[Mark Greene_1]

No, don't user either of the make commands because I'm either loading the depot's off cd, or downloading patches en masse from the HP patch home; in doing so I also get scripts from HP which makes a depot of all the patches in the bundle, so I avoid a bit of work and a lot of potential nastiness that way.

mark

[Steven E. Protter]

If it works:

Its production.

I have not seen a need to do this.

I have taken an golden image of vg00 on one server and replicated it on others.

I think your approach is innovative.

As to whether its better or not, thats subjective.

SEP

[Simon Lowther]

you can get patch_match_target into the sw_source using the sd_command_line option

sd_command_line += "-x patch_match_target=true"

details in instl_adm(4)

[John Carr_2]

Hi Dave

im not sure really what the answer to the question is but for patching the system to the latest recommended level I would use the hp tool cpm_collect.sh which gathers info from your system into a file called hostnam.fs you can then upload this to the hp web site and be given a list of required patches in one depot for download to your system

have a look at this thread
http://www4.itrc.hp.com/service/patch/assessSystemsPage.do?BC=patch.breadcrumb.main|

John.

[David Burgess]

Thanks for all your help.

So am I doing this whole Ignite server stuff wrong? I'm on page 30 of the Ignite-UX Admin Guide for 11 and 11i. part no. B2355-90829 edition 12 Sept 2003 which explains about the make_depots, make_config etc. I haven't got as far as playing with golden images and make_net_recovery yet. Having set up jumpstart on solaris I guessed this was the best way forward. Although with that I patched with a finish script.

I was expecting to need :-

sd_command_line += "-x patch_match_target=true"

in the config file.

With golden images can you specify newer patch bundles. It would make sense to be able to take the image and add later patches as they became available rather than patching and cutting a new image each time, or would it?

Once this is done life is going to be so much easier. I should have done it years ago!

Regards,

Dave.

[Leigh Reamy]

Where might one go to get the cpm_collect.sh script. I searched the itrc but found nothing. thanks in advance.

leigh

[John Carr_2]

Leigh

its rtight here step 1.

http://www5.itrc.hp.com/service/patch/addUpdateSystemsPage.do?BC=patch.breadcrumb.main|patch.breadcrumb.assess|

John.