6.6 Installing Oracle Ksplice Updates on Oracle VM Server

The Ksplice Enhanced Client can be used to apply updates and patches to the running Xen hypervisor, the running kernel, as well as certain Ksplice-aware user space libraries, including xen-tools. To install and manage the Ksplice patches on your system, use the ksplice command on the Oracle Linux command line.

To display the running user space, kernel and xen processes that the client can patch, use the ksplice all list-targets command. For each Ksplice-aware library, the command reports the running processes that would be affected by an update.

# ksplice all list-targets
User-space targets:
 
glibc-libpthread-2.12.1.209.0.3.ksplice1.el6_9.2:
 - multipathd (1582)
 - auditd (2077)
 - rsyslogd (2111)
 - rpcbind (2155)
[...]
 
glibc-libutil-2.12.1.209.0.3.ksplice1.el6_9.2:
 - sshd (2447)
 - xenconsoled (2533)
 - qemu-system-i38 (2537)
 - xend (2844)
[...]

xen-tools-tools_xenstore_xenstored-4.4.4.155.0.27.ksplice1.el6:
 - xenstored (2526)
 
xen-tools-tools_console_xenconsoled-4.4.4.155.0.27.ksplice1.el6:
 - xenconsoled (2533)
 
glibc-libm-2.12.1.209.0.3.ksplice1.el6_9.2:
 - multipathd (1582)
 - auditd (2077)
 - irqbalance (2126)
 - cupsd (2323)
 - ntpd (2460)
[...]
 
glibc-libnss_dns-2.12.1.209.0.3.ksplice1.el6_9.2:
 - ntpd (2460)
 - sshd (3975)
 - sshd (11292)

xen-tools-tools_libxc_libxenctrl.so.4.4.0-4.4.4.155.0.27.ksplice1.el6:
 - xenstored (2526)
 - xenconsoled (2533)
 - qemu-system-i38 (2537)
 - xend (2844)
[...]

openssl-libssl-1.0.1e.57.0.1.ksplice1.el6:
 - qemu-system-i38 (2537)
 - master (2706)
 - pickup (2736)
 - qmgr (2737)
 - xend (2844)
[...] 

xen-tools-tools_xenstore_libxenstore.so.3.0.3-4.4.4.155.0.27.ksplice1.el6:
 - xenconsoled (2533)
 - qemu-system-i38 (2537)
 - xend (2844)
[...] 
 
Kernel version: Linux/x86_64/4.1.12-124.14.5.el6uek.x86_64/#2 SMP Fri May 4 15:36:12 PDT 2018
xen/x86_64/4.4.4OVM/Fri May 11 20:21:05 PDT 2018

To display the updates that are available for installation, use the ksplice all show --available command. If you want to restrict the scope of the command to a particular category, use these alternatives instead:

  • To display the available user space updates: ksplice -n user upgrade

  • To display the available kernel updates: ksplice -n kernel upgrade

  • To display the available xen updates: ksplice -n xen upgrade

#  ksplice -n xen upgrade
The following steps will be taken:
Install [d71xqwov]: update.
Install [ion5usqz]: update 3.
Install [0323dejx]: update 2.

To install the available Ksplice updates, use the ksplice -y all upgrade command. If you want to restrict the scope of the command to a particular category, use these alternatives instead:

  • To install all user space updates: ksplice -y user upgrade

  • To install all kernel updates: ksplice -y kernel upgrade

  • To install all xen updates: ksplice -y xen upgrade

#  ksplice -y xen upgrade
The following steps will be taken:
Install [d71xqwov]: update.
Install [ion5usqz]: update 3.
Install [0323dejx]: update 2.
100% |###########################################################################################|
Done!
# ksplice -y user upgrade
Updating on-disk packages for new processes
Setting up Update Process
uln_mirror_ovm34_x86_64_ksplice                                              | 2.5 kB     00:00    
Resolving Dependencies
[...]
 
===================================================================================================================
 Package          Arch         Version                                  Repository                           Size
===================================================================================================================
Updating:
 glibc            i686         2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      4.4 M
 glibc            x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      3.8 M
 glibc-common     x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice       14 M
 glibc-devel      x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      992 k
 glibc-headers    x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      619 k
 nscd             x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      232 k
 openssl          x86_64       2:1.0.1e-57.0.1.ksplice1.el6             uln_mirror_ovm34_x86_64_ksplice      1.5 M
 xen-tools        x86_64       2:4.4.4-155.0.27.ksplice1.el6            uln_mirror_ovm34_x86_64_ksplice      8.7 M
Installing for dependencies:
 ksplice-helper   x86_64       1.0.32-1.el6                             uln_mirror_ovm34_x86_64_ksplice       17 k
 
Transaction Summary
====================================================================================================================
Install       1 Package(s)
Upgrade       8 Package(s)
 
Total download size: 34 M
Downloading Packages:
(1/9): glibc-2.12-1.209.0.3.ksplice1.el6_9.2.i686.rpm                                            | 4.4 MB     00:00    
(2/9): glibc-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                          | 3.8 MB     00:00    
(3/9): glibc-common-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                   |  14 MB     00:00    
(4/9): glibc-devel-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                    | 992 kB     00:00    
(5/9): glibc-headers-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                  | 619 kB     00:00    
(6/9): ksplice-helper-1.0.32-1.el6.x86_64.rpm                                                    |  17 kB     00:00    
(7/9): nscd-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                           | 232 kB     00:00    
(8/9): openssl-1.0.1e-57.0.1.ksplice1.el6.x86_64.rpm                                             | 1.5 MB     00:00    
(9/9): xen-tools-4.4.4-155.0.27.ksplice1.el6.x86_64.rpm                                          | 8.7 MB     00:00    
---------------------------------------------------------------------------------------------------------------------
Total                                                                                       MB/s |  34 MB     00:00    
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
[...]
Complete!

To display the updates that have been applied to the system, use the ksplice all show command. If you want to restrict the scope of the command to a particular category, specify user, kernel or xen instead of all.

# ksplice all show

Ksplice user-space updates:
No Ksplice user-space updates installed
 
Ksplice kernel updates:
Installed updates:
None
 
Effective kernel version is 4.1.12-124.14.5.el6uek

Ksplice xen updates installed:
[ion5usqz]: update 3.
[0323dejx]: update 2.
[d71xqwov]: update.
Note

After Ksplice has applied updates to a running kernel, the kernel has an effective version that is different from the original boot version displayed by the uname -a command. Use the ksplice kernel uname -r command to display the effective version of the kernel.

To remove Ksplice updates from the system, use the remove subcommand. You can choose to remove Ksplice updates for the category user, kernel or xen.

# ksplice -y xen remove --all
The following steps will be taken:
Remove [d71xqwov]: update.
Remove [ion5usqz]: update 3.
Remove [0323dejx]: update 2.
100% |############################################################################################|
Done!

For more information about using the ksplice command, see the ksplice(8) manual page.