Checks firmware integrity.
fwverify [-s]
This hardware command checks if the firmware installed is corrupted or has been tampered with. The command first makes a comparison of the installed RPM packages to a predefined list of what RPM packages should be installed for the given firmware version. This list was generated at the time of the firmware image build. The fwverify command then performs a verification for each installed package using the rpm --verify command.
Use the –s option to perform a short check, requiring about a minute's time. Without the –s option, the fwverify command can take up to 20 minutes to perform an in-depth check of the firmware.
During an in-depth check, should the command find a missing, corrupt, or additional package or file, the command will display the package or file name, and its location in the filesystem. The conditions of the error are displayed as an 8-character string of flags, SM5DLUGT, where:
S – File size differs.
M – Mode (including permissions and file type) differs.
5 – MD5 sum differs.
D – Device major/minor number mis-match.
L – readlink(2) path mis-match.
U – User ownership differs.
G – Group ownership differs.
T – mtime differs.
. – Flag was not set (no error).
The fwverify command is available from the /SYS/Switch_Diag and /SYS/Fabric_Mgmt Linux shell targets of the Oracle ILOM CLI interface.
This example shows how to perform a quick verification with the fwverify -s command, with successful results.
FabMan@switch_name->fwverify -s Checking all present packages: ........................................................................................... ........................................................................................... ........................................................... OK Checking if any packages are missing: ........................................................................................... ........................................................................................... .......................................................... OK Checking FW Coreswitch: FW Version: 7.4.3002 OK PSID: SUN_NM2-36p_005 OK Verifying image integrity OK FabMan@switch_name->
This example shows how to perform an in-depth verification of the firmware integrity with the fwverify command.
FabMan@switch_name->fwverify Checking all present packages: ........................................................................................... ........................................................................................... ........................................................... OK Checking if any packages are missing: ........................................................................................... ........................................................................................... .......................................................... OK Verifying installed files: ....................................................................... FAILED * Package nm2-phs-2.2.2-6.i386: S.5....T /etc/init.d/dcs . . . FabMan@switch_name->
In this example, within the nm2-phs-2.2.2-6.i386 RPM package, the /etc/init.d/dcs file size differs, the MD5 sum differs, and the time differs
version Command (Hardware)
Linux Shells for Hardware Commands