Solaris 10 1/06: In this release, this chapter has been completely revised. This chapter documents current package and patch procedures on a system with installed non-global zones.
Solaris 10 6/06:A note was added to the procedure How to Add a Package to the Global Zone Only.
Solaris 10 8/07: A note was removed from the task How to Apply a Patch to the Global Zone Only.
For a complete listing of new Solaris 10 features and a description of Solaris releases, see Oracle Solaris 10 9/10 What’s New.
This chapter describes how to add and remove packages and patches on a system with zones installed. Other tasks associated with managing packages and patches, such as checking package parameter settings and obtaining package information, are also addressed. For an overview of patching and packaging concepts on a with zones installed, see Chapter 25, About Packages and Patches on a Solaris System With Zones Installed (Overview).
Task |
Description |
For Instructions |
---|---|---|
Add a package. |
Add a package on a system with zones installed. | |
Check package information. |
Check package information on a system with zones installed. |
Checking Package Information on a Solaris System With Zones Installed |
Remove a package. |
Remove a package on a system with zones installed. |
Removing a Package From a Solaris System With Zones Installed |
Apply a patch. |
Apply a patch on a system with zones installed. | |
Remove a patch. |
Remove a patch on a system with zones installed. | |
(Optional) Check the package parameter settings. |
When adding or removing packages, verify that the settings of the package parameters support the action you want to perform. |
Checking Package Parameter Settings on a System with Zones Installed |
You can use the pkgadd system utility described in the pkgadd(1M) man page to perform the following tasks:
Add a package to the global zone only
Add a package to both the global zone and all non-global zones
Add a package that is already installed in the global zone to the non-global zones
Add a package to a specified non-global zone only
The SUNW_PKG_ALLZONES and SUNW_PKG_HOLLOW package parameter settings must match the correct value, either true or false, to add packages. Otherwise, the desired result will not be achieved. For more information about the effect of these package parameter settings, see About Packages and Zones. For more information about how to check these package parameter settings, see Checking Package Parameter Settings on a System with Zones Installed.
To add a package to the global zone only, the SUNW_PKG_ALLZONES package parameter must be set to false.
You must be the global administrator in the global zone to perform this procedure.
Become superuser, or assume the Primary Administrator role.
To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.
While in the global zone, run the pkgadd -d command followed by the location of the package, the -G option, and then the package name.
If installing the package from a CD-ROM, type:
global# pkgadd -d /cdrom/cdrom0/directory -G package_name |
If installing the package from a directory to which it has been copied, type:
global# pkgadd -d disk1/image -G package_name |
where disk1 is the location where the package was copied.
If the pkgadd utility is run without the -G option and SUNW_PKG_THISZONE=true, then the specified package is added to the current (global) zone by default.
Do not use pkgadd option -G in this procedure.
You must be the global administrator in the global zone to perform this procedure.
Become superuser, or assume the Primary Administrator role.
To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.
While in the global zone, run the pkgadd -d command followed by the location of the package and then the package name.
If installing the package from a CD-ROM, type:
global# pkgadd -d /cdrom/cdrom0/directory package_name |
If installing the package from a directory to which it has been copied, type:
global# pkgadd -d disk1/image package_name |
where disk1 is the location where the package was copied.
You must be the global administrator in the global zone to perform this procedure.
Become superuser, or assume the Primary Administrator role.
To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.
In the global zone, use pkgrm to remove the package.
Add the package without using the -G option.
To add a package to a specified non-global zone only, the SUNW_PKG_ALLZONES package parameter must be set to false. Do not use the pkgadd option -G in this procedure or the operation fails.
You must be the zone administrator in the non-global zone to perform this procedure.
Log in to the non-global zone as the zone administrator.
While in the non-global zone, my-zone in this procedure, run the pkgadd -d command followed by the location of the package and then the package name.
If installing the package from a CD-ROM, type:
my-zone# pkgadd -d /cdrom/cdrom0/directory package_name |
If installing the package from a directory to which it has been copied, type:
my-zone# pkgadd -d disk1/image package_name |
where disk1 is the location where the package was copied.
You can query the software package database for the global zone and non-global zones by using the pkginfo command. See the pkginfo(1) man page for more information about this command.
To check the software package database for the global zone only, use pkginfo followed by the package name.
global% pkginfo package_name |
global% pkginfo SUNWcsr SUNWcsu system SUNWcsr Core Solaris, (Root) system SUNWcsu Core Solaris, (Usr) |
To check the software package database in a specific non-global zone, log into the non-global zone and use pkginfo followed by the package name.
my-zone% pkginfo package_name |
my-zone% pkginfo SUNWcsr SUNWcsu system SUNWcsr Core Solaris, (Root) system SUNWcsu Core Solaris, (Usr) |
You can use the pkgrm system utility described in the pkgrm(1M) man page to perform the following tasks:
Remove a package from the global zone and all non-global zones
Remove a package from a specified non-global zone only
The SUNW_PKG_ALLZONES and SUNW_PKG_HOLLOW package parameter settings must match the correct value, either true or false, to remove packages. Otherwise, the desired result will not be achieved. For more information about the effect of these package parameter settings, see About Packages and Zones. For more information about how to check these package parameter settings, see Checking Package Parameter Settings on a System with Zones Installed.
You must be the global administrator in the global zone to perform this procedure.
Become superuser, or assume the Primary Administrator role.
To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.
While in the global zone, run the pkgrm command followed by the package name.
global# pkgrm package_name |
To remove a package from a specified non-global zone only, the SUNW_PKG_ALLZONES package parameter must be set to false.
You must be the zone administrator in the non-global zone to perform this procedure.
Log in to the non-global zone as the zone administrator.
While in the non-global zone, my-zone in this procedure, run the pkgrm command followed by the package name.
my-zone# pkgrm package_name |
You can use the patchadd system utility described in the patchadd(1M) man page to perform the following tasks:
Apply a patch to the global zone only
Apply a patch to the global zone and all non-global zones
Apply a patch to specified non-global zone only
Solaris 10 3/05 through Solaris 10 11/06: If you are patching a package that was added by using the pkgadd command with the -G option, the package must be patched by using the patchadd command with the -G option. This restriction is removed in the Solaris 8/07 release.
You must be the global administrator in the global zone to perform this procedure.
Become superuser, or assume the Primary Administrator role.
To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.
Execute the patchadd command with the -Goption, followed by the patch ID.
global# patchadd -G patch_id |
You must be the global administrator in the global zone to perform this procedure.
Also see Solaris 10 10/09: Zones Parallel Patching to Reduce Patching Time and Solaris 10 10/09: How to Patch Non-Global Zones in Parallel.
Become superuser, or assume the Primary Administrator role.
To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.
Execute the patchadd command followed by the patch ID.
global# patchadd patch_id |
To apply a patch to a specified non-global zone only, the SUNW_PKG_ALLZONES package parameter for all packages in the patch set must be set to false.
You must be the zone administrator in the non-global zone to perform this procedure.
Log in to the non-global zone as the zone administrator.
While in the non-global zone, my-zone in this procedure, execute the patchadd command followed by the patch ID.
my-zone# patchadd patch_id |
Set the number of non-global zones that will be patched in parallel in the patchadd configuration file /etc/patch/pdo.conf. When patching in the global zone has finished, the number of non-global zones set in num_proc= are patched together.
If running a release prior to Solaris 10 10/09, download patch 119254-66 or later revision (SPARC) or 119255-66 or later revision (x86).
You must be the global administrator in the global zone to perform this procedure.
Become superuser, or assume the Primary Administrator role.
To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.
(Optional, for releases prior to Solaris 10 10/09 only) Download patch 119254-66 (SPARC) or 119255-66 (x86).
In the /etc/patch/pdo.conf file, set 6 non-global zones to be patched together in parallel on a system with 4 online CPUs.
num_proc=6 |
If there are more than six non-global zones on the system, the first six will be patched in parallel, then the remaining non-global zones will be patched as processes finish patching the first six non-global zones.
You can use the patchrm system utility described in the patchrm(1M) man page to perform the following task:
Remove a patch from the global zone and all non-global zones
Remove a patch from a specified non-global zone only
You must be the global administrator in the global zone to perform this procedure.
Become superuser, or assume the Primary Administrator role.
To create the role and assign the role to a user, see Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration.
Execute the patchrm command followed by the patch ID.
global# patchrm patch_id |
To remove a patch from a specified non-global zone only, the SUNW_PKG_ALLZONES package parameter for all packages in the patch set must be set to false.
You must be the zone administrator in the non-global zone to perform this procedure.
Log in to the non-global zone as the zone administrator.
While in the non-global zone, my-zone in this procedure, execute the patchrm command followed by the patch ID.
my-zone# patchrm patch_id |
Before you add or remove a software package, you can use the pkgparam command to check package parameter settings. This step is optional. This check also can be done when troubleshooting why a package is not added or removed as expected. For information about displaying package parameter values, see the pkgparam(1) man page.
To check the package parameter setting of a package that is already installed in a global or non-global zone, use pkgparam followed by the package name and the name of the parameter.
my-zone% pkgparam package_name SUNW_PKG_ALLZONES true my-zone% pkgparam package_name SUNW_PKG_HOLLOW false |
To check the package parameter setting of an uninstalled package in software located on a CD-ROM, use pkgparam -d with the path of the CD-ROM followed by the package name and the name of the parameter.
my-zone% pkgparam -d /cdrom/cdrom0/directory package_name SUNW_PKG_ALLZONES true my-zone% pkgparam -d /cdrom/cdrom0/directory package_name SUNW_PKG_HOLLOW false |