Signed Patches Administration Guide for PatchPro 2.2

Downloading and Applying Signed Patches to a Solaris System (Task Map)

Use this task map to identify the tasks that are used to manage signed patches. Perform the tasks in the order shown.

Task 

Description 

For Instructions 

1. Perform the signed patches preparation tasks. 

Perform the required and optional signed patches preparation tasks: 

  • Verify package requirements for Solaris patch management tools.

  • Download and install your Solaris patch management tool.

  • Set up your system for applying signed patches.

See Downloading and Installing the Patch Management Tools (Task Map).

2. (Optional) Analyze the system to identify the recommended patches. 

Analyze the system to identify recommended patches by using the smpatch analyze command.

See How to Analyze Your System to Identify the Recommended Patches.

3. Download and apply a signed patch or patches. 

Download and apply one or more signed patches by using the smpatch command. The download step also performs an analysis of the system.

See How to Download and Apply a Signed Patch to a Solaris System.

4. (Optional) Remove a signed patch. 

If necessary, remove a signed patch from your system. 

See How to Remove a Signed Patch From a Solaris System.


Note –

Be aware of these disk space considerations when using the smpatch command to download and apply signed patches:


How to Analyze Your System to Identify the Recommended Patches

Ensure that you have completed the preparation tasks before analyzing your system. For more information, see Downloading and Installing the Patch Management Tools (Task Map).

  1. Become superuser.

  2. Analyze the system.


    # smpatch analyze
    Assessing required patches for machine "venus/172.20.27.26" . Please wait...
    
    110453-04 SunOS 5.8: admintool Patch
    109318-33 SunOS 5.8: suninstall Patch
    112396-02 SunOS 5.8: /usr/bin/fgrep patch
    ...

Now, you can download and apply these patches to your system. See How to Download and Apply a Signed Patch to a Solaris System. Notice that the smpatch download command also performs the analysis step before downloading the patches to your system.

How to Download and Apply a Signed Patch to a Solaris System

Ensure that you have completed the preparation tasks before downloading and applying a signed patch to your system. For more information, see Downloading and Installing the Patch Management Tools (Task Map).

To download and apply a signed patch on a Solaris system, follow this procedure. Following the procedure are examples.

  1. Become superuser.

  2. Download one or more signed patches from the SunSolve Web site to your local system.


    # smpatch download -i patch-ID -i patch-ID ...
    
    Requested patches:
    
        patch-ID
        patch-ID
        ...
    
    Downloading the requested patches
    
    /var/sadm/spool/patch-ID.jar has been validated.
    /var/sadm/spool/patch-ID.jar has been validated.
    ...
    
    For downloaded patch(es) see /var/sadm/spool

    This command also analyzes the system to determine the list of recommended patches to download.

  3. Apply the signed patches.


    # smpatch add -i patch-ID -i patch-ID
    

Example—Downloading and Applying a Signed Patch That Has No Dependencies

This example shows how to download and apply patch 105407-01 by using the smpatch command on a Solaris 2.6 system.


# smpatch download -i 105407-01

Requested patches:

    105407-01

Downloading the requested patches



/var/sadm/spool/105407-01.jar has been validated.

For downloaded patch(es) see /var/sadm/spool
# smpatch add -i 105407-01

On machine "earth/172.20.27.27" ...


Installing patch 105407-01 ...
Purging /var/sadm/spool/105407-01
/var/sadm/spool/README.txt has been moved to 
/var/sadm/spool/patchproSequester

Example—Downloading and Applying a Signed Patch That Has Dependencies

This example shows how to download and apply patch 107081-45 by using the smpatch command on a Solaris 7 system or a Solaris 8 system. This patch has two patch dependencies, which are automatically downloaded and verified.


# smpatch download -i 107081-45

Requested patches:

    107081-45

Downloading the requested patches

The following patches were added due to patch dependencies:
    108376-37
    107656-09

/var/sadm/spool/108376-37.jar has been validated.

/var/sadm/spool/107656-09.jar has been validated.

/var/sadm/spool/107081-45.jar has been validated.

For downloaded patch(es) see /var/sadm/spool
# smpatch add -i 108376-37 -i 107656-09 -i 107081-45

On machine "venus/172.20.27.26" ...

Installing patch 108376-37 ...
Installing patch 107656-09 ...
Installing patch 107081-45 ...
Purging /var/sadm/spool/108376-37
Purging /var/sadm/spool/107656-09
Purging /var/sadm/spool/107081-45

Example—Downloading and Applying a Signed Patch That Has No Dependencies to a Solaris 9 System

This example shows how to download and apply a signed patch by using the smpatch command on a Solaris 9 system.


# /usr/sadm/bin/smpatch download -i 111711-01
Authenticating as user: root

Type /? for help, pressing <enter> accepts the default denoted by [ ]
Please enter a string value for: password :: xxx
Loading Tool: com.sun.admin.patchmgr.cli.PatchMgrCli from starbug
Login to starbug as user root was successful.
Download of com.sun.admin.patchmgr.cli.PatchMgrCli from starbug was 
successful.


        Requested patches:
                111711-01

        Downloading the requested patches ...


For downloaded patch(es) see /var/sadm/spool.
# smpatch add -i 111711-01
Authenticating as user: root

Type /? for help, pressing <enter> accepts the default denoted by [ ]
Please enter a string value for: password :: xxx
Loading Tool: com.sun.admin.patchmgr.cli.PatchMgrCli from starbug
Login to starbug as user root was successful.
Download of com.sun.admin.patchmgr.cli.PatchMgrCli from starbug was 
successful.

        On machine starbug ...
                Installing patch 111711-01

Example—Downloading and Applying a Signed Patch That Has Dependencies to a Solaris 9 System

This example shows how to download and apply patch 113434-06 by using the smpatch command on a Solaris 9 system. This patch has a patch dependency, which is automatically downloaded and verified.


# smpatch download -i 113434-06
Authenticating as user: root

Type /? for help, pressing <enter> accepts the default denoted by [ ]
Please enter a string value for: password :: xxx
Loading Tool: com.sun.admin.patchmgr.cli.PatchMgrCli from starbug
Login to starbug as user root was successful.
Download of com.sun.admin.patchmgr.cli.PatchMgrCli from starbug was
successful.


Requested patches:
	113434-06

Downloading the requested patches


The following patches were added due to patch dependencies:
	114482-02


For downloaded patch(es) see /var/sadm/spool.
# smpatch add -1 114482-02 -i 113434-06  
Authenticating as user: root

Type /? for help, pressing <enter> accepts the default denoted by [ ]
Please enter a string value for: password :: xxx
Loading Tool: com.sun.admin.patchmgr.cli.PatchMgrCli from starbug
Login to starbug as user root was successful.
Download of com.sun.admin.patchmgr.cli.PatchMgrCli from starbug was
successful.

	On machine starbug ...
		Installing patch 114482-02
		Installing patch 113434-06

Example—Downloading and Applying a Signed Patch by Using ftp

This example shows how to use the ftp command to get a signed Solaris 8 patch from the SunSolve Online site. Then, the example shows how to use the smpatch add command to apply the signed patch to the system.


# ftp sunsolve.sun.com
Connected to sunsolve.sun.com.
220-
220-Welcome to the SunSolve Online FTP server.
220-
220-Public users may log in as anonymous. 
...
Name (sunsolve.sun.com:root): anonymous
331 Guest login ok, send your complete e-mail address as password.
Password: xxx
230-
230-SUN MICROSYSTEMS, INC.
...
230 Guest login ok, access restrictions apply.
ftp> cd signed_patches
250 CWD command successful.
ftp> get 112846-01.jar /var/sadm/spool/112846-01.jar
200 PORT command successful.
150 Opening ASCII mode data connection for 112846-01.jar (22524 bytes).
226 Transfer complete.
local: /var/sadm/spool/112846-01 remote: 112846-01.jar
22613 bytes received in 0.065 seconds (341.70 Kbytes/s)
ftp> quit
# smpatch add -i 112846-01
On machine "earth/172.20.27.27" ...


Installing patch 112846-01 ...
Purging /var/sadm/spool/112846-01

How to Remove a Signed Patch From a Solaris System


Note –

If the patch you want to remove is required by one or more of the patches that have already been applied to the system, an error is issued and the patch is not removed.


  1. Become superuser.

  2. Remove the signed patch.


    # smpatch remove -i patch-ID
    

    You can remove only one patch at a time.

Example—Removing a Signed Patch From a Solaris 2.6 System


# smpatch remove -i 105407-01

On machine "earth/172.20.27.27" ...

Removing patch 105407-01

Checking installed patches...

Backing out patch 105407-01...

Patch 105407-01 has been backed out.

Example—Removing a Signed Patch From a Solaris 9 System


# /usr/sadm/bin/smpatch remove -i 111711-01
Authenticating as user: root

Type /? for help, pressing <enter> accepts the default denoted by [ ]
Please enter a string value for: password :: 
Loading Tool: com.sun.admin.patchmgr.cli.PatchMgrCli from starbug
Login to starbug as user root was successful.
Download of com.sun.admin.patchmgr.cli.PatchMgrCli from starbug was 
successful.

          On machine starbug ...
                Removing patch 111711-01