3.7.1 Configuring Ksplice Uptrack Clients for Offline Mode

Prior to configuring a Ksplice Offline client, you must set up a local ULN mirror that can act as a Ksplice mirror. See Section 1.3.4, “Configuring a Local ULN Mirror to Act as a Ksplice Mirror”. After you set up a local ULN mirror that can act as a Ksplice mirror, you can configure your other systems to receive yum and Ksplice updates.

You can also configure Ksplice Offline Clients by creating software channels in Spacewalk that can act as a Ksplice mirror. For instructions, see Chapter 12 of the Spacewalk 2.7 for Oracle Linux Client Life Cycle Management Guide.

To configure a system as a Ksplice Offline client by setting up a local ULN mirror, do the following:

  1. Import the GPG key:

    # rpm --import /usr/share/rhn/RPM-GPG-KEY
  2. Set up a local ULN mirror:

    • Disable any existing yum repositories configured in the /etc/yum.repos.d directory. You can either edit any existing repository files and disable all entries by setting enabled=0 or you can use yum-config-manager:

      # yum-config-manager --disable \*

      Alternately, you can rename any of the files in this directory so that they do not use the .repo suffix. This causes yum to ignore these entries. For example:

      # cd /etc/yum.repos.d
      # for i in *.repo; do mv $i $i.disabled; done
    • In the /etc/yum.repos.d directory, create the file local-yum.repo, which contains entries such as the following for an Oracle Linux 7 yum client:

      [local_ol7_x86_64_ksplice]
      name=Ksplice for Oracle Linux $releasever - $basearch
      baseurl=http://local_uln_mirror/yum/OracleLinux/OL7/ksplice/$basearch/
      gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY
      gpgcheck=1
      enabled=1
      
      [local_ol7_latest]
      name=Oracle Linux $releasever - $basearch - latest
      baseurl=http://local_uln_mirror/yum/OracleLinux/OL7/latest/$basearch/
      gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY
      gpgcheck=1
      enabled=1
      
      [local_ol7_UEKR5_latest]
      name=Unbreakable Enterprise Kernel Release 5 for Oracle Linux $releasever - $basearch - latest
      baseurl=http://local_uln_mirror/yum/OracleLinux/OL7/UEKR5/latest/$basearch/
      gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY
      gpgcheck=1
      enabled=1
      
      [local_ol7_addons]
      name=Oracle Linux $releasever - $basearch - addons
      baseurl=http://local_uln_mirror/yum/OracleLinux/OL7/addons/$basearch/
      gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY
      gpgcheck=1
      enabled=1
      • To distinguish the local repositories from the ULN repositories, prefix the labels of their entries with a string such as local_.

      • Replace local_uln_mirror with the IP address or resolvable host name of the local ULN mirror.

      • The example configuration enables the local_ol7_x86_64_ksplice, local_ol7_latest, local_ol7_UEKR5_latest, and local_ol7_addons channels. Note that the Ksplice Offline client package is unable to install user-space updates, so you should not enable any *_userspace_ksplice channels unless you intend to use the offline version of the Ksplice Enhanced client.

  3. Install the Ksplice Offline client package:

    # yum -y install uptrack-offline
  4. Test the configuration:

    1. Clear the yum metadata cache.

      # yum clean metadata
    2. Verify the configuration.

      # yum repolist
      Note

      If the yum command cannot connect to the local ULN mirror, check that the firewall settings on the local ULN mirror server allow incoming TCP connections to the HTTP port (usually, port 80).

  5. Install the Ksplice updates that are available for the kernel.

    # yum -y install uptrack-updates-`uname -r`

    For Oracle Linux 5, you would use the following command:

    # yum -y install uptrack-updates-`uname -r`.`uname -m`

    As new Ksplice updates are made available, use the same command to pick up and apply these updates. You should set up an anacron script to perform this task. For example, the following script named uptrack-updates in /etc/cron.daily would run one time daily:

    #!/bin/sh
    yum -y install uptrack-updates-`uname -r`
    exit 0
    Important

    The script must be executable and be owned by root. Also, you must include the -y option with the yum command when using a script; otherwise, the command hangs and waits for user input.

To display information about Ksplice updates, use the rpm -qa | grep uptrack-updates and uptrack-show commands.