JavaScript must be enabled to correctly display this content

Chapter 6 Updating Oracle VM Server with Oracle Ksplice

Oracle VM Premier Support customers can use Oracle Ksplice to update Oracle VM Server with kernel, Xen, and user space patches. Oracle Ksplice allows you to apply security updates and bug fixes for your systems' kernel, the hypervisor, and certain user space libraries without having to schedule downtime and reboot machines.

Ksplice is freely available for Oracle customers who subscribe to Oracle Linux Premier Support, and to Oracle Cloud Infrastructure services. If you are an Oracle Linux Basic, Basic Limited, or Network Support subscriber, contact your sales representatives to discuss a potential upgrade of your subscription to a Premier Support plan.

Regular updates to the Oracle VM Servers are performed through Oracle VM Manager. However, the execution of Ksplice operations has not been integrated into Oracle VM Manager. Part of the Ksplice setup, such as configuring Server Update Repositories, does occur through Oracle VM Manager. Please review and understand the steps below before proceeding.

This chapter explains how to access the appropriate channels on ULN (Unbreakable Linux Network), set up the Ksplice client, and install Ksplice updates and patches on your Oracle VM Servers.

6.1 What Is Oracle Ksplice?

Linux kernels typically receive security updates and bug fixes on a regular basis. Applying these critical updates to your systems normally requires scheduled downtime, which is a costly operation because hosted services and applications become temporarily unavailable.

With Oracle Ksplice, however, systems can be updated without rebooting. As a result, access to services and applications is not interrupted, and your systems remain secure and up to date. Oracle Ksplice downloads patch updates from Oracle and applies these patches directly to running processes in memory. This provides an update to the running process without requiring it to restart. After this has been done, the package containing the binary update can be updated using the Unbreakable Linux Network (ULN) so that if the process is restarted later, the update is already applied.

Oracle Ksplice is available to customers with an Oracle Premier Support account, who have registered their systems with ULN. For additional information, refer to the Oracle Linux Ksplice User's Guide.

Warning

Use the Oracle Linux Ksplice User's Guide only as a reference for comprehensive background information about what Ksplice is and how it works. The instructions apply to generic Oracle Linux installations, while the procedures described in this Oracle VM Administrator's Guide contain different steps specific to Oracle VM Server. Use only the procedures in this Oracle VM Administrator's Guide to install and configure Ksplice for Oracle VM Server."

Ksplice updates are applied using a client application. Because Oracle VM Server takes advantage of user space updates as well as kernel updates, it requires the Ksplice Enhanced Client. Do not use the Ksplice Uptrack Client on Oracle VM Server. For additional information, refer to Working With the Ksplice Enhanced Client in the Oracle Linux Ksplice User's Guide.

6.2 Prerequisites for Ksplice on Oracle VM Server

Important

Ksplice is available for Oracle Premier Support customers. You require a valid Customer Support Identifier (CSI) to be able to install and use Ksplice for Oracle VM Server.

Starting with release 3.4.5 (build 1919), Oracle VM Server can use Ksplice to update the Xen hypervisor, the kernel and any user space packages. If your servers are running an earlier version of Oracle VM Server, you must upgrade and reboot first. To qualify for hypervisor patching, the servers must be running Xen 4.4.4-196 or newer.

To make sure that your servers meet the prerequisites for Ksplice, run the following checks:

Log in to the server.
From the Oracle Linux command line, check the current version of Oracle VM Server. It must be release 3.4.5 build 1919 or newer.
```
# cat /etc/ovs-info | head -n 4
OVS summary
release: 3.4.5
date: 201805301526
build: 1919
```
From the Oracle Linux command line, check the current version of Xen. It must be version 4.4.4-196 or newer.
```
# rpm -qa | grep "xen.*4.4.4"
xen-4.4.4-196.el6.x86_64
xen-tools-4.4.4-196.el6.x86_64
```
If the current versions of Oracle VM Server or Xen do not meet the minimum requirements, upgrade to the latest version of Oracle VM 3.4 before proceeding.
Repeat these steps on all Oracle VM Servers with which you intend to use Ksplice.

6.3 Accessing ULN Channels

The packages that are required to use Ksplice are hosted on ULN. However, because Oracle VM Server does not provide the tools that are required for ULN registration, it cannot connect to ULN by using Internet access. To install the required packages you must set up a local ULN Mirror that Oracle VM Servers can use to obtain the packages.

Note

Because Ksplice updates are cumulative, you can configure your local ULN mirror to store only the latest packages, which can improve synchronization time and storage requirements dramatically. To ensure that your local ULN mirror stores only the latest packages, edit the /etc/sysconfig/uln-yum-mirror file and set the ALL_PKGS parameter to 0 (ALL_PKGS=0). For more information, refer to ULN Mirror Configuration in the Oracle Linux Ksplice User's Guide.

The ULN Mirror can also be used to provide access to the most recent package updates so that patches can also be applied to on-disk binaries, as well as the processes that are patched in-memory by Ksplice.

The system hosting the mirrored ULN channels requires ULN registration and should be installed on a standard Oracle Linux 6 or Oracle Linux 7 host. You can install the ULN mirror on the same host as Oracle VM Manager.

Generic instructions to set up a local ULN mirror, and also configure it as a Ksplice mirror, are available in the following documentation resources:

When registering the system to be configured as ULN mirror, you must subscribe to the channels listed below, and make sure that the mirror provides the Oracle VM Servers access to those mirrored channels.

Oracle VM 3.4 Latest (x86_64): ovm34_x86_64_latest
Ksplice client and user space updates for Oracle VM (x86_64): ovm34_x86_64_ksplice
Ksplice for Oracle Linux 6 (x86_64): ol6_x86_64_ksplice

6.4 Configuring Yum for Oracle Ksplice

To install the Ksplice Enhanced Client, and obtain the updates and patches for your environment, you need to configure Yum through Oracle VM Manager to enable access to the appropriate server update repositories. Provided you use the global server update settings, all discovered Oracle VM Servers take over the Yum repository configuration defined through the Oracle VM Manager.

The instructions in this section are based on the Oracle VM Manager Command Line Interface. For background information, usage instructions, and the command reference, consult the Oracle VM Manager Command Line Interface User's Guide.

Set up the server update repositories in Oracle VM Manager as follows:

$ ssh -l admin ovmmgr.example.com -p 10000
admin@ovmmgr.example.com's password: 
OVM>

Verify that you are running Oracle VM Manager release 3.4.5 (build 1919) or newer.
```
OVM> showversion
3.4.5.1919
```
Discover any Oracle VM Servers that have not yet been discovered with which you intend to use Ksplice, and take ownership of them.

The example shows the CLI command and output using ovmsvr01. Execute this command for each of your servers, using either the fully qualified domain name or IP address.

Note

The password parameter is the Oracle VM Agent password on the Oracle VM Server in question. It is a required parameter for the discoverServer command.
```
OVM> discoverServer ipAddress=ovmsvr01.example.com password=******** takeOwnership=yes
Command: discoverServer ipAddress=ovmsvr01.example.com password=***** takeOwnership=yes
Status: Success
Time: 2018-06-03 19:46:20,633 PDT
JobId: 1528080367491
```

Add these server update repositories to the Yum configuration:

uln_mirror_ovm34_x86_64_latest
uln_mirror_ovm34_x86_64_ksplice
uln_mirror_ol6_x86_64_ksplice

Note

For the create serverupdaterepository command, the following parameters are required:

the package signature key (GPG key)
the path to they GPG key file
the Yum repository URL

OVM> create serverupdaterepository repositoryname=uln_mirror_ovm34_x86_64_latest enabled=yes pkgsignaturetype=GPG \
pkgsignaturekey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY name=uln_mirror_ovm34_x86_64_latest \
url=http://ulnmirror.example.com/yum/OracleVM/OVM34/latest/$basearch/ \
on serverupdategroup name=GlobalX86ServerUpdateConfiguration

Command: create serverupdaterepository repositoryname=uln_mirror_ovm34_x86_64_latest enabled=yes [...]
Status: Success
Time: 2018-06-03 19:47:43,093 PDT
JobId: 1528080450197
Data:
  id:0004fb0000310000e12a4dfe28933022  name:uln_mirror_ovm34_x86_64_latest

OVM> create serverupdaterepository repositoryname=uln_mirror_ovm34_x86_64_ksplice enabled=yes pkgsignaturetype=GPG \
pkgsignaturekey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY name=uln_mirror_ovm34_x86_64_ksplice \
url=http://ulnmirror.example.com/yum/OracleVM/OVM34/ksplice/$basearch/ \
on serverupdategroup name=GlobalX86ServerUpdateConfiguration

Command: create serverupdaterepository repositoryname=uln_mirror_ovm34_x86_64_ksplice enabled=yes [...]
Status: Success
Time: 2018-06-03 19:47:52,880 PDT
JobId: 1528080465622
Data:
  id:0004fb0000310000f522e7d0ee1911dc  name:uln_mirror_ovm34_x86_64_ksplice

OVM> create serverupdaterepository repositoryname=uln_mirror_ol6_x86_64_ksplice enabled=yes pkgsignaturetype=GPG \
pkgsignaturekey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY name=uln_mirror_ol6_x86_64_ksplice \
url=http://ulnmirror.example.com/yum/OracleLinux/OL6/ksplice/x86_64/ \
on serverupdategroup name=GlobalX86ServerUpdateConfiguration

Command: create serverupdaterepository repositoryname=uln_mirror_ol6_x86_64_ksplice enabled=yes [...]
Status: Success
Time: 2018-06-13 23:36:54,637 PDT
JobId: 1528958205006
Data:
  id:0004fb00003100003c4d3d4c252ee126  name:uln_mirror_ol6_x86_64_ksplice

Verify the Yum repository configuration on the Oracle VM Servers.

From the Oracle Linux command line, check the content of the directory /etc/yum.repos.d.

# cat /etc/yum.repos.d/ovm.repo

[uln_mirror_ovm34_x86_64_latest]
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY
gpgcheck = 1
baseurl = http://ulnmirror.example.com/yum/OracleVM/OVM34/latest/$basearch/
name = uln_mirror_ovm34_x86_64_latest
enabled = 1

[uln_mirror_ovm34_x86_64_ksplice]
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY
gpgcheck = 1
baseurl = http://ulnmirror.example.com/yum/OracleVM/OVM34/ksplice/$basearch/
name = uln_mirror_ovm34_x86_64_ksplice
enabled = 1


[uln_mirror_ol6_x86_64_ksplice]
gpgkey = file:///etc/pki/rpm-gpg/RPM-GPG-KEY
gpgcheck = 1
baseurl = http://ulnmirror.example.com/yum/OracleLinux/OL6/ksplice/x86_64/
name = uln_mirror_ol6_x86_64_ksplice
enabled = 1

Run this check on all Oracle VM Servers with which you intend to use Ksplice.

6.5 Installing the Ksplice Enhanced Client

To update Oracle VM Server using Ksplice, you must use the Ksplice Enhanced Client. It is capable of updating certain shared libraries for user space processes – such as glibc, openssl and xen-tools – in addition to the Xen hypervisor and kernel updates.

The Ksplice Enhanced Client requires a direct connection to the Internet, so that it is able to connect to the Oracle Ksplice update server at https://updates-ksplice.oracle.com/uptrack. If your Oracle VM Servers are unable to connect directly to the Internet or your security policy restricts access, you can consider using an offline version of the client to apply updates from your locally configured ULN mirror. See Using the Ksplice Offline Enhanced Client for more information.

Since the Ksplice Enhanced Client package and its dependencies are only available on ULN and ULN registration is not possible on current versions of Oracle VM Server, the Oracle VM Servers on which you install the Ksplice Enhanced Client must have access to a host that is running a local ULN mirror, and to the ULN channels residing on that mirror. See Section 6.3, “Accessing ULN Channels” and Section 6.4, “Configuring Yum for Oracle Ksplice” for more information.

If you have configured a ULN Mirror and set up your yum configuration within Oracle VM Manager according to the instructions provided at Section 6.4, “Configuring Yum for Oracle Ksplice”, the Ksplice Enhanced Client and Ksplice-aware user space packages for Oracle VM Server are available in the ULN channel uln_mirror_ovm34_x86_64_ksplice.

To install the Ksplice Enhanced Client, proceed as follows:

Log in to the Oracle VM Server as root.
Revert all prelinked binaries and dependent libraries to their original state, then use the yum command to remove the prelink package.
```
# prelink -au
# yum remove -y prelink
```

Install the ksplice package.

# yum install -y ksplice
Setting up Install Process
[...]
Dependencies Resolved
 
===============================================================================================================
 Package                       Arch        Version               Repository                               Size
===============================================================================================================
Installing:
 ksplice                       x86_64      1.0.32-1.el6          uln_mirror_ovm34_x86_64_ksplice         5.5 k
Installing for dependencies:
 boost-filesystem              x86_64      1.41.0-28.el6         uln_mirror_ovm34_x86_64_latest           46 k
 boost-python                  x86_64      1.41.0-28.el6         uln_mirror_ovm34_x86_64_latest          120 k
 boost-regex                   x86_64      1.41.0-28.el6         uln_mirror_ovm34_x86_64_latest          477 k
 ksplice-core0                 x86_64      1.0.32-1.el6          uln_mirror_ovm34_x86_64_ksplice         254 k
 ksplice-tools                 x86_64      1.0.32-1.el6          uln_mirror_ovm34_x86_64_ksplice         102 k
 uptrack                       noarch      1.2.47-0.el6          uln_mirror_ovm34_x86_64_ksplice         501 k
 uptrack-PyYAML                x86_64      3.08-4.el6            uln_mirror_ovm34_x86_64_ksplice         143 k
 uptrack-libyaml               x86_64      0.1.3-1.el6           uln_mirror_ovm34_x86_64_ksplice          49 k
 
Transaction Summary
===============================================================================================================
Install       9 Package(s)

Total download size: 1.7 M
Installed size: 6.0 M
Downloading Packages:
[...]
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY
Importing GPG key 0xEC551F03:
 Userid : customer_user_id <customer@example.com>
 Package: ovs-release-3.4-7.773.23.el6.x86_64 (@anaconda-OracleVMServer-201805301600.x86_64/3.4.5)
 From   : /etc/pki/rpm-gpg/RPM-GPG-KEY
[...]
Installed:
  ksplice.x86_64 0:1.0.32-1.el6                                                                               
 
Dependency Installed:
  boost-filesystem.x86_64 0:1.41.0-28.el6       boost-python.x86_64 0:1.41.0-28.el6             
  boost-regex.x86_64 0:1.41.0-28.el6            ksplice-core0.x86_64 0:1.0.32-1.el6 
  ksplice-tools.x86_64 0:1.0.30-1.el6           uptrack.noarch 0:1.2.47-0.el6          
  uptrack-PyYAML.x86_64 0:3.08-4.el6            uptrack-libyaml.x86_64 0:0.1.3-1.el6     
 
Complete!

Edit /etc/uptrack/uptrack.conf to provide the client with the label of the local user space channel. If you followed the instructions in Section 6.4, “Configuring Yum for Oracle Ksplice” the channel should have the label uln_mirror_ovm34_x86_64_ksplice. Edit the file to include the lines:
```
[User]
yum_userspace_ksplice_repo_name = uln_mirror_ovm34_x86_64_ksplice
```
Also edit to add any other required configuration options. For example, to enable automatic installation updates, change the autoinstall option from no to yes:
```
autoinstall = yes
```
For more information on these options, see Configuring a Ksplice Client in the Oracle Linux Ksplice User's Guide at https://docs.oracle.com/cd/E37670_01/E39380/html/ol_ksplice_config.html.

Note that some options, such as upgrade_on_reboot may not apply to user space packages.
Update the system to install the Ksplice-aware versions of user space libraries. For example:
```
# yum update
```
Reboot the system so that it uses the new user space libraries.
```
# reboot
```

Using the Ksplice Offline Enhanced Client

If your Oracle VM environment resides in a highly secure data center where it is not possible to maintain a permanent Internet connection for the Oracle VM Servers that you wish to patch for security updates, you can use the Ksplice Offline Enhanced Client (ksplice-offline) as an alternative. Ksplice kernel, user space and Xen updates are bundled into RPM packages, specific for a particular version, and are updated within 48 hours after a new Ksplice patch becomes available. These updates are made available on ULN.

At regular intervals, you download the latest Ksplice update packages for your systems, and update your local ULN mirror. Once the Ksplice Offline Enhanced Client is installed on your Oracle VM Servers, they can connect to the local ULN mirror to retrieve updates.

The disadvantages of using the offline client include the delay after a patch becomes available and the requirement to manage and refresh the ULN mirror. However, since the ULN mirror must be maintained to apply on-disk binary updates for the Ksplice packages and other patch updates, this may be the preferred approach. Although there is a delay in patching, this delay also offers some further assurance of stability and further testing.

For installation, configuration, and usage instructions, refer to Installing and Configuring the Ksplice Offline Enhanced Client in the Oracle Linux Ksplice User's Guide. Note that the instructions provided in the Oracle Linux Ksplice User's Guide are generic Oracle Linux instructions.

Caution

If you want to switch between the online and offline version of the Ksplice Enhanced Client, you must first remove the installed Ksplice client software, and then install the new Ksplice client version. For example, to switch from the online client to the offline client, run the following commands:

# yum remove ksplice
# yum install ksplice-offline

To install and configure for Oracle VM Server:

Configure the ULN mirror as described in Section 6.3, “Accessing ULN Channels”
Configure the required yum repositories within Oracle VM Manager, as described in Section 6.4, “Configuring Yum for Oracle Ksplice”.
On each Oracle VM Server, revert prelinked binaries and remove prelink:
```
# prelink -au
# yum remove prelink
```
On each Oracle VM Server, install the Ksplice Offline Enhanced Client:
```
#  yum install ksplice-offline
```
On each Oracle VM Server, edit the /etc/uptrack/uptrack.conf file to provide the client with the label of the local user space channel. If you followed the instructions in Section 6.4, “Configuring Yum for Oracle Ksplice” the channel should have the label uln_mirror_ovm34_x86_64_ksplice. Edit the file to include the lines:
```
[User]
yum_userspace_ksplice_repo_name = uln_mirror_ovm34_x86_64_ksplice
```
Also edit to add any other required configuration options. For example, to enable automatic installation updates, change the autoinstall option from no to yes:
```
autoinstall = yes
```
For more information on these options, see Configuring a Ksplice Client in the Oracle Linux Ksplice User's Guide at https://docs.oracle.com/cd/E37670_01/E39380/html/ol_ksplice_config.html.

Note that some options, such as upgrade_on_reboot may not apply to user space packages.
To install offline update packages, you must install the relevant packages for your system. When installing offline update packages you must specify the release in the command. For example, if you are installing the offline updates package for the Xen hypervisor, specify the release in the command as follows.
```
# yum install ksplice-updates-xen-$RELEASE
```
where $RELEASE is the update package that corresponds to the version of the hypervisor that is currently running, as shown in this example:
```
# yum install ksplice-updates-xen-4.4.4-196.0.10.el6
```
From this point, the Ksplice Offline Enhanced Client behaves similarly to the standard online version of the Ksplice Enhanced Client.

6.6 Installing Oracle Ksplice Updates on Oracle VM Server

The Ksplice Enhanced Client can be used to apply updates and patches to the running Xen hypervisor, the running kernel, as well as certain Ksplice-aware user space libraries, including xen-tools. To install and manage the Ksplice patches on your system, use the ksplice command on the Oracle Linux command line.

To display the running user space, kernel and xen processes that the client can patch, use the ksplice all list-targets command. For each Ksplice-aware library, the command reports the running processes that would be affected by an update.

# ksplice all list-targets
User-space targets:
 
glibc-libpthread-2.12.1.209.0.3.ksplice1.el6_9.2:
 - multipathd (1582)
 - auditd (2077)
 - rsyslogd (2111)
 - rpcbind (2155)
[...]
 
glibc-libutil-2.12.1.209.0.3.ksplice1.el6_9.2:
 - sshd (2447)
 - xenconsoled (2533)
 - qemu-system-i38 (2537)
 - xend (2844)
[...]

xen-tools-tools_xenstore_xenstored-4.4.4.155.0.27.ksplice1.el6:
 - xenstored (2526)
 
xen-tools-tools_console_xenconsoled-4.4.4.155.0.27.ksplice1.el6:
 - xenconsoled (2533)
 
glibc-libm-2.12.1.209.0.3.ksplice1.el6_9.2:
 - multipathd (1582)
 - auditd (2077)
 - irqbalance (2126)
 - cupsd (2323)
 - ntpd (2460)
[...]
 
glibc-libnss_dns-2.12.1.209.0.3.ksplice1.el6_9.2:
 - ntpd (2460)
 - sshd (3975)
 - sshd (11292)

xen-tools-tools_libxc_libxenctrl.so.4.4.0-4.4.4.155.0.27.ksplice1.el6:
 - xenstored (2526)
 - xenconsoled (2533)
 - qemu-system-i38 (2537)
 - xend (2844)
[...]

openssl-libssl-1.0.1e.57.0.1.ksplice1.el6:
 - qemu-system-i38 (2537)
 - master (2706)
 - pickup (2736)
 - qmgr (2737)
 - xend (2844)
[...] 

xen-tools-tools_xenstore_libxenstore.so.3.0.3-4.4.4.155.0.27.ksplice1.el6:
 - xenconsoled (2533)
 - qemu-system-i38 (2537)
 - xend (2844)
[...] 
 
Kernel version: Linux/x86_64/4.1.12-124.14.5.el6uek.x86_64/#2 SMP Fri May 4 15:36:12 PDT 2018
xen/x86_64/4.4.4OVM/Fri May 11 20:21:05 PDT 2018

To display the updates that are available for installation, use the ksplice all show --available command. If you want to restrict the scope of the command to a particular category, use these alternatives instead:

To display the available user space updates: ksplice -n user upgrade
To display the available kernel updates: ksplice -n kernel upgrade
To display the available xen updates: ksplice -n xen upgrade

#  ksplice -n xen upgrade
The following steps will be taken:
Install [d71xqwov]: update.
Install [ion5usqz]: update 3.
Install [0323dejx]: update 2.

To install the available Ksplice updates, use the ksplice -y all upgrade command. If you want to restrict the scope of the command to a particular category, use these alternatives instead:

To install all user space updates: ksplice -y user upgrade
To install all kernel updates: ksplice -y kernel upgrade
To install all xen updates: ksplice -y xen upgrade

#  ksplice -y xen upgrade
The following steps will be taken:
Install [d71xqwov]: update.
Install [ion5usqz]: update 3.
Install [0323dejx]: update 2.
100% |###########################################################################################|
Done!

# ksplice -y user upgrade
Updating on-disk packages for new processes
Setting up Update Process
uln_mirror_ovm34_x86_64_ksplice                                              | 2.5 kB     00:00    
Resolving Dependencies
[...]
 
===================================================================================================================
 Package          Arch         Version                                  Repository                           Size
===================================================================================================================
Updating:
 glibc            i686         2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      4.4 M
 glibc            x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      3.8 M
 glibc-common     x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice       14 M
 glibc-devel      x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      992 k
 glibc-headers    x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      619 k
 nscd             x86_64       2:2.12-1.209.0.3.ksplice1.el6_9.2        uln_mirror_ovm34_x86_64_ksplice      232 k
 openssl          x86_64       2:1.0.1e-57.0.1.ksplice1.el6             uln_mirror_ovm34_x86_64_ksplice      1.5 M
 xen-tools        x86_64       2:4.4.4-155.0.27.ksplice1.el6            uln_mirror_ovm34_x86_64_ksplice      8.7 M
Installing for dependencies:
 ksplice-helper   x86_64       1.0.32-1.el6                             uln_mirror_ovm34_x86_64_ksplice       17 k
 
Transaction Summary
====================================================================================================================
Install       1 Package(s)
Upgrade       8 Package(s)
 
Total download size: 34 M
Downloading Packages:
(1/9): glibc-2.12-1.209.0.3.ksplice1.el6_9.2.i686.rpm                                            | 4.4 MB     00:00    
(2/9): glibc-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                          | 3.8 MB     00:00    
(3/9): glibc-common-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                   |  14 MB     00:00    
(4/9): glibc-devel-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                    | 992 kB     00:00    
(5/9): glibc-headers-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                  | 619 kB     00:00    
(6/9): ksplice-helper-1.0.32-1.el6.x86_64.rpm                                                    |  17 kB     00:00    
(7/9): nscd-2.12-1.209.0.3.ksplice1.el6_9.2.x86_64.rpm                                           | 232 kB     00:00    
(8/9): openssl-1.0.1e-57.0.1.ksplice1.el6.x86_64.rpm                                             | 1.5 MB     00:00    
(9/9): xen-tools-4.4.4-155.0.27.ksplice1.el6.x86_64.rpm                                          | 8.7 MB     00:00    
---------------------------------------------------------------------------------------------------------------------
Total                                                                                       MB/s |  34 MB     00:00    
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
[...]
Complete!

To display the updates that have been applied to the system, use the ksplice all show command. If you want to restrict the scope of the command to a particular category, specify user, kernel or xen instead of all.

# ksplice all show

Ksplice user-space updates:
No Ksplice user-space updates installed
 
Ksplice kernel updates:
Installed updates:
None
 
Effective kernel version is 4.1.12-124.14.5.el6uek

Ksplice xen updates installed:
[ion5usqz]: update 3.
[0323dejx]: update 2.
[d71xqwov]: update.

Note

After Ksplice has applied updates to a running kernel, the kernel has an effective version that is different from the original boot version displayed by the uname -a command. Use the ksplice kernel uname -r command to display the effective version of the kernel.

To remove Ksplice updates from the system, use the remove subcommand. You can choose to remove Ksplice updates for the category user, kernel or xen.

# ksplice -y xen remove --all
The following steps will be taken:
Remove [d71xqwov]: update.
Remove [ion5usqz]: update 3.
Remove [0323dejx]: update 2.
100% |############################################################################################|
Done!

For more information about using the ksplice command, see the ksplice(8) manual page.