1.9.3 Configuring Ksplice Offline Clients

Once you have set up a local ULN mirror that can act as a Ksplice mirror, you can configure your other systems to receive yum and Ksplice updates.

To configure a system as a Ksplice offline client:

  1. Import the GPG key:

    # rpm --import /usr/share/rhn/RPM-GPG-KEY
  2. In the /etc/yum.repos.d directory, edit the existing repository file, such as public-yum-ol6.repo or ULN-base.repo, and disable all entries by setting enabled=0.

  3. In the /etc/yum.repos.d directory, create the file local-yum.repo, which contains entries such as the following for an Oracle Linux 6 yum client:

    [local_ol6_x86_64_ksplice]
    name=Ksplice for Oracle Linux $releasever - $basearch
    baseurl=http://local_uln_mirror/yum/OracleLinux/OL6/ksplice/$basearch/
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY
    gpgcheck=1
    enabled=1
    
    [local_ol6_latest]
    name=Oracle Linux $releasever - $basearch - latest
    baseurl=http://local_uln_mirror/yum/OracleLinux/OL6/latest/$basearch/
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY
    gpgcheck=1
    enabled=1
    
    [local_ol6_UEKR3_latest]
    name=Unbreakable Enterprise Kernel Release 3 for Oracle Linux $releasever - $basearch - latest
    baseurl=http://local_uln_mirror/yum/OracleLinux/OL6/UEKR3/latest/$basearch/
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY
    gpgcheck=1
    enabled=1
    
    [local_ol6_addons]
    name=Oracle Linux $releasever - $basearch - addons
    baseurl=http://local_uln_mirror/yum/OracleLinux/OL6/addons/$basearch/
    gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY
    gpgcheck=1
    enabled=1

    To distinguish the local repositories from the ULN repositories, prefix the labels of their entries with a string such as local_.

    Replace local_uln_mirror with the IP address or resolvable host name of the local ULN mirror.

    The example configuration enables the local_ol6_x86_64_ksplice, local_ol6_latest, local_ol6_UEKR3_latest, and local_ol6_addons channels. Note that the Ksplice offline client package is unable to install user-space updates, so you should not enable any *_userspace_ksplice channels unless you intend to use the offline version of the enhanced Ksplice client.

  4. Install the Ksplice offline client package:

    # yum -y install uptrack-offline
  5. To test the configuration:

    1. Clear the yum metadata cache:

      # yum clean metadata
    2. Use yum repolist to verify the configuration, for example:

      # yum repolist
       Loaded plugins: rhnplugin, security
       This system is receiving updates from ULN. 
      0 packages excluded due to repository protections
      repo id                         repo name                                    status
      local_ol6_addons                Oracle Linux 6 - x86_64 - latest             112
      local_ol6_x86_64_ksplice        Ksplice for Oracle Linux 6 - x86_64          961
      local_ol6_x86_64_latest         Oracle Linux 6 - x86_64 - latest             17,976
      local_ol6_x86_64_UEKR3_latest   Unbreakable Enterprise Kernel Release 3 
                                      for Oracle Linux 6 - x86_64 - latest         41

      If yum cannot connect to the local ULN mirror, check that the firewall settings on the local ULN mirror server allow incoming TCP connections to the HTTP port (usually, port 80).

  6. Install the Ksplice updates that are available for the kernel.

    For an Oracle Linux 5 client, use this command:

    # yum -y install uptrack-updates-`uname -r`.`uname -m`

    For an Oracle Linux 6 or Oracle Linux 7 client, use this command:

    # yum -y install uptrack-updates-`uname -r`

    As new Ksplice updates are made available, you can use this command to pick up these updates and apply them. It is recommended that you set up an anacron script to perform this task. For example, the following script named uptrack-updates in /etc/cron.daily on an Oracle Linux 6 system would run once every day:

    #!/bin/sh
    yum -y install uptrack-updates-`uname -r`
    exit 0

    Note

    The script must be executable and be owned by root. It is important to include the -y option for the yum command if you intend to script this, as the command hangs and waits for user input if this option is not used.

To display information about Ksplice updates, use the rpm -qa | grep uptrack-updates and uptrack-show commands.