Managing Unsigned Solaris Patches (Task Map)

Displaying Information About Unsigned Solaris Patches

Before installing patches, you might want to know more about patches that have previously been installed. The following table describes commands that provide useful information about patches that are already installed on a system.

How to Display Information About Solaris Patches

Use the patchadd -p command to display information about patches installed on your system.

$ patchadd -p

Use the following command to verify whether a specific patch is installed on your system. For example:

$ patchadd -p | grep 111879

Adding an Unsigned Solaris Patch

You can use the patchadd command to add unsigned patches to servers or standalone systems. If you need to add a patch to a diskless client system, see Patching Diskless Client OS Services.

When you add a patch, the patchadd command calls the pkgadd command to install the patch packages from the patch directory to a local system's disk. More specifically, the patchadd command:

• Determines the Solaris version number of the managing host and the target host

• Updates the patch package's pkginfo file with information about patches obsoleted by the patch being installed, other patches required by this patch, and patches incompatible with this patch

During patch installation, the patchadd command keeps a log of the patch installation in the /var/sadm/patch/patch-ID/log file for current Solaris versions.

The patchadd command will not install a patch under the following conditions:

• The package is not fully installed on the host.

• The patch packages architecture differs from the system's architecture.

• The patch packages version does not match the installed package's version.

• A patch with the same base code and a higher version number is already installed.

• The patch is incompatible with another, already installed patch. Each installed patch keeps this information in its pkginfo file.

• The patch being installed requires another patch that is not installed

How to Download an Unsigned Solaris Patch

1. (Optional) Log in to the system where the patch will be applied.

   Or, you can download the patch and use the ftp command to copy the patch to the target system.

2. Open a web browser and go to the SunSolve Online web site:

   http://sunsolve.Sun.COM/pub-cgi/show.pl?target=patches/patch-access

3. Determine if you are going to download a specific patch or patch cluster. Then select one of the following:

   1. Type the patch number (patch-ID) in the “Find Patch” search field. Then, click on Find Patch.

      Entering patch-ID downloads the latest patch revision.

      If this patch is freely available, the patch README is displayed. If this patch is not freely available, an ACCESS DENIED message is displayed.

      There are different patch numbers for SPARC and x86 systems, which are listed in the displayed patch README. Make sure you install the patch that matches your system architecture.

   2. Click on a recommended patch cluster based on the Solaris release running on the system to be patched.

4. Click the Download Patch (n bytes) HTTP or FTP button.

   After the patch or patches are downloaded successfully, close the web browser.

5. Change to the directory that contains the downloaded patch package, if necessary.

6. Unzip the patch package.

   % unzip patch-ID-revision

How to Add a Unsigned Solaris Patch

1. Become superuser.

2. Add the patch or patches.

   # patchadd patch-ID-revision

3. Verify that the patch was added successfully.

   # patchadd -p | grep patch-ID-revision

Example—Adding an Unsigned Solaris Patch

In the following example, the Solaris 8 patch, 111879–01, is added to the system. The patch had already been downloaded to the system previously.

# patchadd /export/Sol8patch/111879-01

Checking installed patches...
Verifying sufficient filesystem capacity (dry run method)...
Installing patch packages...

Patch number 111879-01 has been successfully installed.
See /var/sadm/patch/111879-01/log for details

Patch packages installed:
  SUNWwsr
# patchadd -p | grep 111879-01
Patch: 111879-01 Obsoletes:  Requires:  Incompatibles:  Packages: SUNWwsr

Removing an Unsigned Solaris Patch

When you back out a patch, the patchrm command restores all files modified by that patch, unless:

• The patch was installed with the patchadd -d option, which instructs patchadd to not save copies of files being updated or replaced.

• The patch has been obsoleted by a later patch.

• The patch is required by another patch.

The patchrm command calls the pkgadd command to restore packages that were saved from the initial patch installation.

During the patch removal process, patchrm keeps a log of the back out process in /tmp/backoutlog.process_id. This log file is removed if the patch backs out successfully.

How to Remove an Unsigned Solaris Patch

Use the patchrm command if you need to remove an unsigned Solaris patch.

1. Become superuser.

2. Remove the patch.

   # patchrm patch-ID-revision

3. Verify that the patch was removed.

   # patchadd -p | grep patch-ID-revision

Example—Removing an Unsigned Solaris Patch

The following example shows how to remove the Solaris 8 patch, 111879–01.

# patchrm 111879-01

Checking installed patches...

Backing out patch 111879-01...

Patch 111874-02 has been backed out.

# showrev -p | grep 111879-01
#