System Administration Guide: Basic Administration

Managing Patches by Using the patchadd Command (Task Map)

Task 

Description 

For Instructions 

2. (Optional) Specify a web proxy. 

If your system is behind a firewall with a web proxy, you must specify the web proxy to obtain patches from the patch server. 

How to Specify a Web Proxy

3. Download and apply a patch. 

You can download and apply a patch to your system by using the patchadd command.

How to Download and Apply a Patch

4. (Optional) Display information about patches that have been applied to your system. 

If you want information about the patches that have already been applied to your system, use the patchadd, showrev, or pkgparam command.

How to Display Information About Patches

5. (Optional) Remove a patch from your system. 

If necessary, remove a patch from your system by using the patchrm command.

How to Remove a Patch by Using the patchrm Command

ProcedureHow to Specify a Web Proxy

If your system is behind a firewall with a web proxy, you must specify the web proxy to use patchadd to apply a patch.

  1. Become superuser or assume an equivalent role.

  2. Use one of the following methods to specify a web proxy:

    • Specify the web proxy by using the http_proxy, HTTPPROXY, or HTTPPROXYPORT environment variable.

      For example:


      # setenv http_proxy http://mycache.domain:8080
      

      Or, specify one of the following:


      # setenv HTTPPROXY mycache.domain
      # setenv HTTPPROXYPORT 8080
      
    • Specify the web proxy on the patchadd command line.

      For example:


      # patchadd -x mycache.domain:8080 \
      -M http://www.sun.com/solaris/patches/latest 101223-02 102323-02
      

Restrictions on Using patchadd -R to Create an Alternate root Path

On systems that are running an Oracle Solaris release that is not zones aware, using the patchadd command, or any command that accepts the -R option to specify an alternate root path for a global zone that has non-global zones installed, does not work.

You can use of the -R option to add and remove software packages and patches, if the alternate boot environment has configured non-global zones, but no installed non-global zones.

To avoid a potential problem, restrict the use of the -R option for the creation of an alternate root path.

If you are running Oracle Solaris 10, you can alternately choose one of the following methods:

For more information, see the patchadd(1M), patchrm(1M), pkgadd(1M), and pkgrm(1M) man pages.

ProcedureHow to Download and Apply a Patch

Use this procedure to download an unsigned Solaris patch and then apply it to your system.

If you want to apply signed patches, you must first set up the package keystore. For more information, go to http://download.oracle.com/docs/cd/E17476_01/javase/1.4.2/docs/tooldocs/solaris/keytool.html.

  1. Gain access to the system in one of the following ways:

    • Log in to the system where you want to apply the patch.

    • Download the patch and use the ftp command to copy the patch to the target system.

  2. Start a web browser and go to the SunSolve Online Patch Portal at http://sunsolve.Sun.COM.

  3. Determine whether to download a specific patch or a patch cluster, then do one of the following:

    • Type the patch number (patch-id) in the Find Patch search field, then click Find Patch.

      Entering patch-id downloads the latest patch revision.

      If this patch is freely available, the patch README appears. If this patch is not freely available, an ACCESS DENIED message appears.

      Note that patch numbers for SPARC based and x86 based systems are different. The patch IDs are listed in the patch README. Ensure that you apply the patch that matches your system architecture.

    • Select the Recommended Patch Cluster that matches the Oracle Solaris release that is running on the system that you want to patch.

  4. Download the patch by following these instructions:

    • To download a copy of the signed patch, click the Download Signed Patch (n bytes) button.

    • To download an unsigned patch, click the Download Patch ( n bytes) button.

    When the patch or patches are successfully downloaded, close the web browser.

  5. Change to the directory that contains the downloaded patch.

  6. Become superuser or assume an equivalent role.

  7. (Unsigned patch) If you downloaded an unsigned patch, unzip the patch.


    # unzip patch-id
    
  8. Apply the signed or unsigned patch.

    For example:


    # patchadd /tmp/111879-01
    
    • If you downloaded a signed patch, apply it.

      For example:


      # patchadd /tmp/111879-01.jar
      
    • If you downloaded an unsigned patch, apply it.

      For example:


      # patchadd /tmp/111879-01
      
  9. Verify that the patch has been successfully applied.

    For example:


    # patchadd -p | grep 111879
    Patch: 111879-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWwsr

ProcedureHow to Display Information About Patches

Before applying patches, you might want to know more about patches that have been previously applied.

The following commands provide useful information about patches that are already applied to a system.

  1. Use one of the following patchadd command lines to display information about patches that have been applied to your system.

    • To obtain information about all patches that have been applied to your system, type:


      $ patchadd -p
      
    • To verify whether a particular patch has been applied to your system, type, for example:


      $ patchadd -p | grep 111879
      

ProcedureHow to Remove a Patch by Using the patchrm Command

  1. Become superuser.

  2. Remove the patch.


    # patchrm 111879-01
    Checking installed patches...
    
    Backing out patch 111879-01...
    
    Patch 111879-01 has been backed out.
  3. Verify that the patch was removed.


    # patchadd -p | grep 111879
    #