HP-UX: Managing patches and updates

Today we are going to speak of as to manage and to install patches/bundles in HP-UX 11.23 Itanium with the tool swa. I have discovered the above mentioned command recently due to the urgent need to update the systems of the work.

The truth is that it had never heard after nobody used the above mentioned tool, most of managers of HP-UX that I have seen, only they were applying the necessary patches to install the software that was going to run on the machine (p.e. Oracle, Weblogic …).

To start it is necessary to make sure that the servant has access FTP to the HP repositories, in our platform, we have enabled the exit of a servant of development and later we share the patches/bundles directory for NFS.

Once have we verified the exit for FTP, start … and with what? we will generate a report to see the quantity of patches/bunbles to apply:

# swa report
.....
ERROR: Certificate issued to VeriSign Class 3 Secure Server CA was not signed by the same certificate as the certificate revocation list (CRL) "http://crl.verisign.com/RSASecureServer.crl", specified by the "crl_url" extended option.
It may be necessary to disable the CRL checking with the "crl_check" option.

If we receive this error, it is not necessary to worry, has a small problem on having verified the certificate SSL of the web where it lowers the updates catalog: How do we solve it?:

# vi /etc/opt/swa/swa.conf

And we add:

crl_check = false

Now if we repeat the action to generate the report, it should not to us fail. This time will show us if we have some bundle and the list of patches to be applied. The following step is to unload them: El siguiente paso es descargarlos:

# swa get -t patchsess -x swcache=/repo/patches

Depending on the quantity of time that does that the system is not updated, it will take a some time. Having installed the machines about the summer 2008, I have had to go down to today some 2GiB.

After a some time, he alone generates to us the depot and a file of text where each of the patches details what it solves and actions to take (as they could be I begin again of services).

Once quite prepared, we happen to install it:

# swinstall -s /repo/patches/patchsess/ -x patch_match_target=true -x autoreboot=true

It is necessary to bear in mind that this the servant will begin again, therefore it is necessary to go carefully and to be sure that we can do it. As soon as the servant was begun again (if it was necessary), we would generate the initial report again to confirm that we already do not have listed any update apalicable:

# swa report -x inventory_max_age=0

The parameter that we spend this time to the swa, is so that it does not use the catalog that it has in cache if not that refreshes it again of Internet.

I can make sure you that with this tool, for me personally, HP-UX has gained some points that it had lost for time

There is not posts related.

Related posts brought to you by Yet Another Related Posts Plugin.

Tags: HP-UX, patches, swa, unix

This entry was posted on 2009/03/12 at 2009/03/12 and is filed under Operating systems, hp-ux. You dog follow any responses to this entry through the RSS 2.0 feed.