Chapter 6 Updating Oracle VM Server with Oracle Ksplice
Oracle VM Premier Support customers can use Oracle Ksplice to update Oracle VM Server with kernel, Xen, and user space patches. Oracle Ksplice allows you to apply security updates and bug fixes for your systems' kernel, the hypervisor, and certain user space libraries without having to schedule downtime and reboot machines.
Ksplice is freely available for Oracle customers who subscribe to Oracle Linux Premier Support, and to Oracle Cloud Infrastructure services. If you are an Oracle Linux Basic, Basic Limited, or Network Support subscriber, contact your sales representatives to discuss a potential upgrade of your subscription to a Premier Support plan.
Regular updates to the Oracle VM Servers are performed through Oracle VM Manager. However, the execution of Ksplice operations has not been integrated into Oracle VM Manager. Part of the Ksplice setup, such as configuring Server Update Repositories, does occur through Oracle VM Manager. Please review and understand the steps below before proceeding.
This chapter explains how to access the appropriate channels on ULN (Unbreakable Linux Network), set up the Ksplice client, and install Ksplice updates and patches on your Oracle VM Servers.
6.1 What Is Oracle Ksplice?
Linux kernels typically receive security updates and bug fixes on a regular basis. Applying these critical updates to your systems normally requires scheduled downtime, which is a costly operation because hosted services and applications become temporarily unavailable.
With Oracle Ksplice, however, systems can be updated without rebooting. As a result, access to services and applications is not interrupted, and your systems remain secure and up to date. Oracle Ksplice downloads patch updates from Oracle and applies these patches directly to running processes in memory. This provides an update to the running process without requiring it to restart. After this has been done, the package containing the binary update can be updated using the Unbreakable Linux Network (ULN) so that if the process is restarted later, the update is already applied.
Oracle Ksplice is available to customers with an Oracle Premier Support account, who have registered their systems with ULN. For additional information, refer to the Oracle Linux Ksplice User's Guide.
Use the Oracle Linux Ksplice User's Guide only as a reference for comprehensive background information about what Ksplice is and how it works. The instructions apply to generic Oracle Linux installations, while the procedures described in this Oracle VM Administrator's Guide contain different steps specific to Oracle VM Server. Use only the procedures in this Oracle VM Administrator's Guide to install and configure Ksplice for Oracle VM Server."
Ksplice updates are applied using a client application. Because Oracle VM Server takes advantage of user space updates as well as kernel updates, it requires the Ksplice Enhanced Client. Do not use the Ksplice Uptrack Client on Oracle VM Server. For additional information, refer to Working With the Ksplice Enhanced Client in the Oracle Linux Ksplice User's Guide.
6.2 Prerequisites for Ksplice on Oracle VM Server
Ksplice is available for Oracle Premier Support customers. You require a valid Customer Support Identifier (CSI) to be able to install and use Ksplice for Oracle VM Server.
Starting with release 3.4.5 (build 1919), Oracle VM Server can use Ksplice to update the Xen hypervisor, the kernel and any user space packages. If your servers are running an earlier version of Oracle VM Server, you must upgrade and reboot first. To qualify for hypervisor patching, the servers must be running Xen 4.4.4-196 or newer.
To make sure that your servers meet the prerequisites for Ksplice, run the following checks:
-
Log in to the server.
-
From the Oracle Linux command line, check the current version of Oracle VM Server. It must be release 3.4.5 build 1919 or newer.
# cat /etc/ovs-info | head -n 4 OVS summary release: 3.4.5 date: 201805301526 build: 1919
-
From the Oracle Linux command line, check the current version of Xen. It must be version 4.4.4-196 or newer.
# rpm -qa | grep "xen.*4.4.4" xen-4.4.4-196.el6.x86_64 xen-tools-4.4.4-196.el6.x86_64
-
If the current versions of Oracle VM Server or Xen do not meet the minimum requirements, upgrade to the latest version of Oracle VM 3.4 before proceeding.
-
Repeat these steps on all Oracle VM Servers with which you intend to use Ksplice.
6.3 Accessing ULN Channels
The packages that are required to use Ksplice are hosted on ULN. However, because Oracle VM Server does not provide the tools that are required for ULN registration, it cannot connect to ULN by using Internet access. To install the required packages you must set up a local ULN Mirror that Oracle VM Servers can use to obtain the packages.
Because Ksplice updates are cumulative, you can configure your
local ULN mirror to store only the latest packages, which can
improve synchronization time and storage requirements
dramatically. To ensure that your local ULN mirror stores only
the latest packages, edit the
/etc/sysconfig/uln-yum-mirror
file and
set the ALL_PKGS
parameter to 0
(ALL_PKGS=0
). For more information, refer
to
ULN
Mirror Configuration in the
Oracle Linux
Ksplice User's Guide.
The ULN Mirror can also be used to provide access to the most recent package updates so that patches can also be applied to on-disk binaries, as well as the processes that are patched in-memory by Ksplice.
The system hosting the mirrored ULN channels requires ULN registration and should be installed on a standard Oracle Linux 6 or Oracle Linux 7 host. You can install the ULN mirror on the same host as Oracle VM Manager.
Generic instructions to set up a local ULN mirror, and also configure it as a Ksplice mirror, are available in the following documentation resources:
When registering the system to be configured as ULN mirror, you must subscribe to the channels listed below, and make sure that the mirror provides the Oracle VM Servers access to those mirrored channels.
-
Oracle VM 3.4 Latest (x86_64):
ovm34_x86_64_latest
-
Ksplice client and user space updates for Oracle VM (x86_64):
ovm34_x86_64_ksplice
-
Ksplice for Oracle Linux 6 (x86_64):
ol6_x86_64_ksplice
6.4 Configuring Yum for Oracle Ksplice
To install the Ksplice Enhanced Client, and obtain the updates and patches for your environment, you need to configure Yum through Oracle VM Manager to enable access to the appropriate server update repositories. Provided you use the global server update settings, all discovered Oracle VM Servers take over the Yum repository configuration defined through the Oracle VM Manager.
The instructions in this section are based on the Oracle VM Manager Command Line Interface. For background information, usage instructions, and the command reference, consult the Oracle VM Manager Command Line Interface User's Guide.
Set up the server update repositories in Oracle VM Manager as follows:
-
Log in to the Oracle VM Manager Command Line Interface.
$ ssh -l admin
ovmmgr.example.com
-p 10000 admin@ovmmgr.example.com
's password: OVM> -
Verify that you are running Oracle VM Manager release 3.4.5 (build 1919) or newer.
OVM> showversion 3.4.5.1919
-
Discover any Oracle VM Servers that have not yet been discovered with which you intend to use Ksplice, and take ownership of them.
The example shows the CLI command and output using
ovmsvr01
. Execute this command for each of your servers, using either the fully qualified domain name or IP address.NoteThe password parameter is the Oracle VM Agent password on the Oracle VM Server in question. It is a required parameter for the
discoverServer
command.OVM> discoverServer ipAddress=
ovmsvr01.example.com
password=******** takeOwnership=yes Command: discoverServer ipAddress=ovmsvr01.example.com
password=***** takeOwnership=yes Status: Success Time: 2018-06-03 19:46:20,633 PDT JobId: 1528080367491 -
Add these server update repositories to the Yum configuration:
-
uln_mirror_ovm34_x86_64_latest
-
uln_mirror_ovm34_x86_64_ksplice
-
uln_mirror_ol6_x86_64_ksplice
NoteFor the
create serverupdaterepository
command, the following parameters are required:-
the package signature key (GPG key)
-
the path to they GPG key file
-
the Yum repository URL
OVM> create serverupdaterepository repositoryname=uln_mirror_ovm34_x86_64_latest enabled=yes pkgsignaturetype=GPG \ pkgsignaturekey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY name=uln_mirror_ovm34_x86_64_latest \ url=http://
ulnmirror.example.com
/yum/OracleVM/OVM34/latest/$basearch/ \ on serverupdategroup name=GlobalX86ServerUpdateConfiguration Command: create serverupdaterepository repositoryname=uln_mirror_ovm34_x86_64_latest enabled=yes [...] Status: Success Time: 2018-06-03 19:47:43,093 PDT JobId: 1528080450197 Data: id:0004fb0000310000e12a4dfe28933022 name:uln_mirror_ovm34_x86_64_latest OVM> create serverupdaterepository repositoryname=uln_mirror_ovm34_x86_64_ksplice enabled=yes pkgsignaturetype=GPG \ pkgsignaturekey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY name=uln_mirror_ovm34_x86_64_ksplice \ url=http://ulnmirror.example.com
/yum/OracleVM/OVM34/ksplice/$basearch/ \ on serverupdategroup name=GlobalX86ServerUpdateConfiguration Command: create serverupdaterepository repositoryname=uln_mirror_ovm34_x86_64_ksplice enabled=yes [...] Status: Success Time: 2018-06-03 19:47:52,880 PDT JobId: 1528080465622 Data: id:0004fb0000310000f522e7d0ee1911dc name:uln_mirror_ovm34_x86_64_ksplice OVM> create serverupdaterepository repositoryname=uln_mirror_ol6_x86_64_ksplice enabled=yes pkgsignaturetype=GPG \ pkgsignaturekey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY name=uln_mirror_ol6_x86_64_ksplice \ url=http://ulnmirror.example.com
/yum/OracleLinux/OL6/ksplice/x86_64/ \ on serverupdategroup name=GlobalX86ServerUpdateConfiguration Command: create serverupdaterepository repositoryname=uln_mirror_ol6_x86_64_ksplice enabled=yes [...] Status: Success Time: 2018-06-13 23:36:54,637 PDT JobId: 1528958205006 Data: id:0004fb00003100003c4d3d4c252ee126 name:uln_mirror_ol6_x86_64_ksplice -
-
Verify the Yum repository configuration on the Oracle VM Servers.
-
Log in to the server.
-
From the Oracle Linux command line, check the content of the directory
/etc/yum.repos.d
.# cat /etc/yum.repos.d/ovm.repo [uln_mirror_ovm34_x86_64_latest] gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY gpgcheck = 1 baseurl = http://
ulnmirror.example.com
/yum/OracleVM/OVM34/latest/$basearch/ name = uln_mirror_ovm34_x86_64_latest enabled = 1 [uln_mirror_ovm34_x86_64_ksplice] gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY gpgcheck = 1 baseurl = http://ulnmirror.example.com
/yum/OracleVM/OVM34/ksplice/$basearch/ name = uln_mirror_ovm34_x86_64_ksplice enabled = 1 [uln_mirror_ol6_x86_64_ksplice] gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY gpgcheck = 1 baseurl = http://ulnmirror.example.com
/yum/OracleLinux/OL6/ksplice/x86_64/ name = uln_mirror_ol6_x86_64_ksplice enabled = 1 -
Run this check on all Oracle VM Servers with which you intend to use Ksplice.
-
6.5 Installing the Ksplice Enhanced Client
To update Oracle VM Server using Ksplice, you must use the Ksplice
Enhanced Client. It is capable of updating certain shared
libraries for user space processes – such as
glibc
, openssl
and
xen-tools
– in addition to the Xen hypervisor
and kernel updates.
The Ksplice Enhanced Client requires a direct connection to the Internet, so that it is able to connect to the Oracle Ksplice update server at https://updates-ksplice.oracle.com/uptrack. If your Oracle VM Servers are unable to connect directly to the Internet or your security policy restricts access, you can consider using an offline version of the client to apply updates from your locally configured ULN mirror. See Using the Ksplice Offline Enhanced Client for more information.
Since the Ksplice Enhanced Client package and its dependencies are only available on ULN and ULN registration is not possible on current versions of Oracle VM Server, the Oracle VM Servers on which you install the Ksplice Enhanced Client must have access to a host that is running a local ULN mirror, and to the ULN channels residing on that mirror. See Section 6.3, “Accessing ULN Channels” and Section 6.4, “Configuring Yum for Oracle Ksplice” for more information.
If you have configured a ULN Mirror and set up your yum
configuration within Oracle VM Manager according to the instructions
provided at Section 6.4, “Configuring Yum for Oracle Ksplice”, the Ksplice
Enhanced Client and Ksplice-aware user space packages for Oracle VM Server
are available in the ULN channel
uln_mirror_ovm34_x86_64_ksplice
.
To install the Ksplice Enhanced Client, proceed as follows:
-
Log in to the Oracle VM Server as root.
-
Revert all prelinked binaries and dependent libraries to their original state, then use the yum command to remove the
prelink
package.# prelink -au # yum remove -y prelink
-
Install the
ksplice
package.# yum install -y ksplice Setting up Install Process [...] Dependencies Resolved =============================================================================================================== Package Arch Version Repository Size =============================================================================================================== Installing: ksplice x86_64 1.0.32-1.el6 uln_mirror_ovm34_x86_64_ksplice 5.5 k Installing for dependencies: boost-filesystem x86_64 1.41.0-28.el6 uln_mirror_ovm34_x86_64_latest 46 k boost-python x86_64 1.41.0-28.el6 uln_mirror_ovm34_x86_64_latest 120 k boost-regex x86_64 1.41.0-28.el6 uln_mirror_ovm34_x86_64_latest 477 k ksplice-core0 x86_64 1.0.32-1.el6 uln_mirror_ovm34_x86_64_ksplice 254 k ksplice-tools x86_64 1.0.32-1.el6 uln_mirror_ovm34_x86_64_ksplice 102 k uptrack noarch 1.2.47-0.el6 uln_mirror_ovm34_x86_64_ksplice 501 k uptrack-PyYAML x86_64 3.08-4.el6 uln_mirror_ovm34_x86_64_ksplice 143 k uptrack-libyaml x86_64 0.1.3-1.el6 uln_mirror_ovm34_x86_64_ksplice 49 k Transaction Summary =============================================================================================================== Install 9 Package(s) Total download size: 1.7 M Installed size: 6.0 M Downloading Packages: [...] Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY Importing GPG key 0xEC551F03: Userid :
customer_user_id
<customer@example.com
> Package: ovs-release-3.4-7.773.23.el6.x86_64 (@anaconda-OracleVMServer-201805301600.x86_64/3.4.5) From : /etc/pki/rpm-gpg/RPM-GPG-KEY [...] Installed: ksplice.x86_64 0:1.0.32-1.el6 Dependency Installed: boost-filesystem.x86_64 0:1.41.0-28.el6 boost-python.x86_64 0:1.41.0-28.el6 boost-regex.x86_64 0:1.41.0-28.el6 ksplice-core0.x86_64 0:1.0.32-1.el6 ksplice-tools.x86_64 0:1.0.30-1.el6 uptrack.noarch 0:1.2.47-0.el6 uptrack-PyYAML.x86_64 0:3.08-4.el6 uptrack-libyaml.x86_64 0:0.1.3-1.el6 Complete! -
Edit
/etc/uptrack/uptrack.conf
to provide the client with the label of the local user space channel. If you followed the instructions in Section 6.4, “Configuring Yum for Oracle Ksplice” the channel should have the labeluln_mirror_ovm34_x86_64_ksplice
. Edit the file to include the lines:[User] yum_userspace_ksplice_repo_name = uln_mirror_ovm34_x86_64_ksplice
Also edit to add any other required configuration options. For example, to enable automatic installation updates, change the
autoinstall
option fromno
toyes
:autoinstall = yes
For more information on these options, see Configuring a Ksplice Client in the Oracle Linux Ksplice User's Guide at https://docs.oracle.com/cd/E37670_01/E39380/html/ol_ksplice_config.html.
Note that some options, such as
upgrade_on_reboot
may not apply to user space packages. -
Update the system to install the Ksplice-aware versions of user space libraries. For example:
# yum update
-
Reboot the system so that it uses the new user space libraries.
# reboot
Using the Ksplice Offline Enhanced Client
If your Oracle VM environment resides in a highly secure
data center where it is not possible to maintain a permanent
Internet connection for the Oracle VM Servers that you wish to patch for
security updates, you can use the Ksplice Offline Enhanced
Client (ksplice-offline
) as an alternative.
Ksplice kernel, user space and Xen updates are bundled into RPM
packages, specific for a particular version, and are updated
within 48 hours after a new Ksplice patch becomes available.
These updates are made available on ULN.
At regular intervals, you download the latest Ksplice update packages for your systems, and update your local ULN mirror. Once the Ksplice Offline Enhanced Client is installed on your Oracle VM Servers, they can connect to the local ULN mirror to retrieve updates.
The disadvantages of using the offline client include the delay after a patch becomes available and the requirement to manage and refresh the ULN mirror. However, since the ULN mirror must be maintained to apply on-disk binary updates for the Ksplice packages and other patch updates, this may be the preferred approach. Although there is a delay in patching, this delay also offers some further assurance of stability and further testing.
For installation, configuration, and usage instructions, refer to Installing and Configuring the Ksplice Offline Enhanced Client in the Oracle Linux Ksplice User's Guide. Note that the instructions provided in the Oracle Linux Ksplice User's Guide are generic Oracle Linux instructions.
If you want to switch between the online and offline version of the Ksplice Enhanced Client, you must first remove the installed Ksplice client software, and then install the new Ksplice client version. For example, to switch from the online client to the offline client, run the following commands:
# yum remove ksplice # yum install ksplice-offline
To install and configure for Oracle VM Server:
-
Configure the ULN mirror as described in Section 6.3, “Accessing ULN Channels”
-
Configure the required yum repositories within Oracle VM Manager, as described in Section 6.4, “Configuring Yum for Oracle Ksplice”.
-
On each Oracle VM Server, revert prelinked binaries and remove prelink:
# prelink -au # yum remove prelink
-
On each Oracle VM Server, install the Ksplice Offline Enhanced Client:
# yum install ksplice-offline
-
On each Oracle VM Server, edit the
/etc/uptrack/uptrack.conf
file to provide the client with the label of the local user space channel. If you followed the instructions in Section 6.4, “Configuring Yum for Oracle Ksplice” the channel should have the labeluln_mirror_ovm34_x86_64_ksplice
. Edit the file to include the lines:[User] yum_userspace_ksplice_repo_name = uln_mirror_ovm34_x86_64_ksplice
Also edit to add any other required configuration options. For example, to enable automatic installation updates, change the
autoinstall
option fromno
toyes
:autoinstall = yes
For more information on these options, see Configuring a Ksplice Client in the Oracle Linux Ksplice User's Guide at https://docs.oracle.com/cd/E37670_01/E39380/html/ol_ksplice_config.html.
Note that some options, such as
upgrade_on_reboot
may not apply to user space packages. -
To install offline update packages, you must install the relevant packages for your system. When installing offline update packages you must specify the release in the command. For example, if you are installing the offline updates package for the Xen hypervisor, specify the release in the command as follows.
# yum install ksplice-updates-xen-
$RELEASE
where
$RELEASE
is the update package that corresponds to the version of the hypervisor that is currently running, as shown in this example:# yum install ksplice-updates-xen-4.4.4-196.0.10.el6
-
From this point, the Ksplice Offline Enhanced Client behaves similarly to the standard online version of the Ksplice Enhanced Client.
6.6 Installing Oracle Ksplice Updates on Oracle VM Server
The Ksplice Enhanced Client can be used to apply updates and
patches to the running Xen hypervisor, the running kernel, as well
as certain Ksplice-aware user space libraries, including
xen-tools
. To install and manage the Ksplice
patches on your system, use the ksplice command
on the Oracle Linux command line.
To display the running user space, kernel and xen processes that the client can patch, use the ksplice all list-targets command. For each Ksplice-aware library, the command reports the running processes that would be affected by an update.
# ksplice all list-targets User-space targets: glibc-libpthread-2.12.1.209.0.3.ksplice1.el6_9.2: - multipathd (1582) - auditd (2077) - rsyslogd (2111) - rpcbind (2155) [...] glibc-libutil-2.12.1.209.0.3.ksplice1.el6_9.2: - sshd (2447) - xenconsoled (2533) - qemu-system-i38 (2537) - xend (2844) [...] xen-tools-tools_xenstore_xenstored-4.4.4.155.0.27.ksplice1.el6: - xenstored (2526) xen-tools-tools_console_xenconsoled-4.4.4.155.0.27.ksplice1.el6: - xenconsoled (2533) glibc-libm-2.12.1.209.0.3.ksplice1.el6_9.2: - multipathd (1582) - auditd (2077) - irqbalance (2126) - cupsd (2323) - ntpd (2460) [...] glibc-libnss_dns-2.12.1.209.0.3.ksplice1.el6_9.2: - ntpd (2460) - sshd (3975) - sshd (11292) xen-tools-tools_libxc_libxenctrl.so.4.4.0-4.4.4.155.0.27.ksplice1.el6: - xenstored (2526) - xenconsoled (2533) - qemu-system-i38 (2537) - xend (2844) [...] openssl-libssl-1.0.1e.57.0.1.ksplice1.el6: - qemu-system-i38 (2537) - master (2706) - pickup (2736) - qmgr (2737) - xend (2844) [...] xen-tools-tools_xenstore_libxenstore.so.3.0.3-4.4.4.155.0.27.ksplice1.el6: - xenconsoled (2533) - qemu-system-i38 (2537) - xend (2844) [...] Kernel version: Linux/x86_64/4.1.12-124.14.5.el6uek.x86_64/#2 SMP Fri May 4 15:36:12 PDT 2018 xen/x86_64/4.4.4OVM/Fri May 11 20:21:05 PDT 2018
To display the updates that are available for installation, use the ksplice all show --available command. If you want to restrict the scope of the command to a particular category, use these alternatives instead:
-
To display the available user space updates: ksplice -n user upgrade
-
To display the available kernel updates: ksplice -n kernel upgrade
-
To display the available xen updates: ksplice -n xen upgrade
# ksplice -n xen upgrade The following steps will be taken: Install [d71xqwov]: update. Install [ion5usqz]: update 3. Install [0323dejx]: update 2.
To install the available Ksplice updates, use the ksplice -y all upgrade command. If you want to restrict the scope of the command to a particular category, use these alternatives instead:
-
To install all user space updates: ksplice -y user upgrade
-
To install all kernel updates: ksplice -y kernel upgrade
-
To install all xen updates: ksplice -y xen upgrade
# ksplice -y xen upgrade The following steps will be taken: Install [d71xqwov]: update. Install [ion5usqz]: update 3. Install [0323dejx]: update 2. 100% |###########################################################################################| Done!
# ksplice -y user upgrade Updating on-disk packages for new processes Setting up Update Process uln_mirror_ovm34_x86_64_ksplice | 2.5 kB 00:00 Resolving Dependencies [...] =================================================================================================================== Package Arch Version Repository Size =================================================================================================================== Updating: glibc i686 2:2.12-1.209.0.3.ksplice1.el6_9.2 uln_mirror_ovm34_x86_64_ksplice 4.4 M glibc x86_64 2:2.12-1.209.0.3.ksplice1.el6_9.2 uln_mirror_ovm34_x86_64_ksplice 3.8 M glibc-common x86_64 2:2.12-1.209.0.3.ksplice1.el6_9.2 uln_mirror_ovm34_x86_64_ksplice 14 M glibc-devel x86_64 2:2.12-1.209.0.3.ksplice1.el6_9.2 uln_mirror_ovm34_x86_64_ksplice 992 k glibc-headers x86_64 2:2.12-1.209.0.3.ksplice1.el6_9.2 uln_mirror_ovm34_x86_64_ksplice 619 k nscd x86_64 2:2.12-1.209.0.3.ksplice1.el6_9.2 uln_mirror_ovm34_x86_64_ksplice 232 k openssl x86_64 2:1.0.1e-57.0.1.ksplice1.el6 uln_mirror_ovm34_x86_64_ksplice 1.5 M xen-tools x86_64 2:4.4.4-155.0.27.ksplice1.el6 uln_mirror_ovm34_x86_64_ksplice 8.7 M Installing for dependencies: ksplice-helper x86_64 1.0.32-1.el6 uln_mirror_ovm34_x86_64_ksplice 17 k Transaction Summary ==================================================================================================================== Install 1 Package(s) Upgrade 8 Package(s) Total download size: 34 M Downloading Packages: (1/9): glibc-2.12-1.209.0.3.ksplice1.el6_9.2.i686.rpm | 4.4 MB 00:00 (2/9): glibc-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm | 3.8 MB 00:00 (3/9): glibc-common-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm | 14 MB 00:00 (4/9): glibc-devel-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm | 992 kB 00:00 (5/9): glibc-headers-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm | 619 kB 00:00 (6/9): ksplice-helper-1.0.32-1.el6.x86_64.rpm | 17 kB 00:00 (7/9): nscd-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm | 232 kB 00:00 (8/9): openssl-1.0.1e-57.0.1.ksplice1.el6.x86_64.rpm | 1.5 MB 00:00 (9/9): xen-tools-4.4.4-155.0.27.ksplice1.el6.x86_64.rpm | 8.7 MB 00:00 --------------------------------------------------------------------------------------------------------------------- Total MB/s | 34 MB 00:00 Running rpm_check_debug Running Transaction Test Transaction Test Succeeded Running Transaction [...] Complete!
To display the updates that have been applied to the system, use the ksplice all show command. If you want to restrict the scope of the command to a particular category, specify user, kernel or xen instead of all.
# ksplice all show Ksplice user-space updates: No Ksplice user-space updates installed Ksplice kernel updates: Installed updates: None Effective kernel version is 4.1.12-124.14.5.el6uek Ksplice xen updates installed: [ion5usqz]: update 3. [0323dejx]: update 2. [d71xqwov]: update.
After Ksplice has applied updates to a running kernel, the
kernel has an effective version that is different from the
original boot version displayed by the uname
-a
command. Use the ksplice kernel uname
-r command to display the effective version of the
kernel.
To remove Ksplice updates from the system, use the remove subcommand. You can choose to remove Ksplice updates for the category user, kernel or xen.
# ksplice -y xen remove --all The following steps will be taken: Remove [d71xqwov]: update. Remove [ion5usqz]: update 3. Remove [0323dejx]: update 2. 100% |############################################################################################| Done!
For more information about using the ksplice
command, see the ksplice(8)
manual page.