Solved

AIX OS patching

Posted on 2013-01-28
9
487 Views
1 Endorsement
Last Modified: 2013-01-29
I'm familiar with solaris OS patching and now I need to do on AIX. What is the procedure to do AIX Os parching on 5.3 and 6.1
1
Comment
Question by:mokkan
  • 5
  • 4
9 Comments
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 38830150
Hi,

there is a whole Whitepaper from IBM on that topic:
https://www14.software.ibm.com/webapp/set2/sas/f/best/aix_service_strategy_v3.pdf

There is also a paper on IBM's release strategy:
http://www.ibm.com/common/ssi/cgi-bin/ssialias?infotype=SA&subtype=WH&appname=STGE_PO_PO_USEN&htmlfid=POW03060USEN&attachment=POW03060USEN.PDF

AIX updates basically consist of TL ("Technology Level") bundles, released 1-2 times in a year and SP ("Service Pack") bundles, released between TLs 3-4 times in a year.

The above documents have detailed info on service lifecycles, naming conventions for update bundles, the relation between updates and support for new hardware, and much more.

You'll get the fix bundles from IBM "Fix Central":
http://www-933.ibm.com/support/fixcentral/

An IBM ID is required. This ID is basically available for just everyone, but please note that you can only get updates, not base level file sets if you have an ID but not a support contract.

Once you downloaded a bundle to your machine you'll use "smitty update_all" or "/usr/sbin/install_all_updates" to apply them.

IBM don't ship individual fixes anymore, the recommendation is applying an SP bundle as a whole. Applying a TL as a whole is even mandatory, because the "prerequisites" structure cannot be guaranteed to be consistent.

There is an IBM feature "SUMA" ("Service Updata Management Assistant"), shipped with the base OS.
It is designed to automate the task of downloading patches from Fix Central. Based on a time schedule SUMA will search for new bundles and download them automatically.
Since SUMA is aware of what's installed on your machine(s) it will only download those fixes matching your installed OS base.

A Whitepaper on SUMA is here:
http://www-03.ibm.com/systems/resources/systems_p_os_aix_whitepapers_suma.pdf

Please try to get familiar with the AIX service methodology by reading the above material. Should you have any questions please let me know. I'll stay tuned.

wmp
0
 

Author Comment

by:mokkan
ID: 38830514
Thank you.  Can we have local repository? And then can we pull the service pack from there?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 38830531
Yes,

that's the NIM ("Network Installation Management") server.

NIM is part of the base OS shipment, but setting it up is a task quite on its own.

Here is the (very elaborate) Redbook:
http://www.redbooks.ibm.com/redbooks/pdfs/sg247296.pdf

NIM is not only a software repository/deployment server but also a network boot/install server for e.g. cloning and bare metal recovery of AIX machines (and a bit more ...).

If you're looking for a simple solution - how about setting up a (or using an available) NFS server? Applying update packages residing on an NFS share is no problem.
0
 

Author Comment

by:mokkan
ID: 38830539
Thank you very much.  Basically from NIM server, we download the service pack from IBM and store it in one of the NFS or local disk, and then from the clients you just to use SUMA to apply patches right?
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 

Author Comment

by:mokkan
ID: 38830548
Also, I can download it to /tmp directory apply as well right? Or is it suppose to be in NIM server?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 38830554
Nope.

You can use SUMA to automatically download patches from IBM, to your NIM server or your NFS server or to the target machine itself, whatever.

The you use the appropriate functionality to apply the patches - NIM client functions or standard AIX tools (installp).
0
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 500 total points
ID: 38830556
You can of course use /tmp to store packages, yet there is a standard location on every AIX machine for this : /usr/sys/inst.images
0
 

Author Comment

by:mokkan
ID: 38830700
one more question. If I install a service pack or single pack patch?  If there is any problem, Can I revert it back?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 38830723
Generally, you can't rollback a TL upgrade. That's why you should have a recent backup at hand.

An SP upgrade or a single patch can be rolled back.

Under smitty set "COMMIT software updates?" to "no" and "SAVE replaced files?" to "yes".    

On the command line use the installp flags "-a" and "-t".
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How would you as a DBA (DB2) answer this question? 9 74
what is a good general partitioning scheme for RHEL? 23 120
NTP Server in VMware 5 164
unix in java example 9 53
Let's say you need to move the data of a file system from one partition to another. This generally involves dismounting the file system, backing it up to tapes, and restoring it to a new partition. You may also copy the file system from one place to…
My previous tech tip, Installing the Solaris OS From the Flash Archive On a Tape (http://www.experts-exchange.com/articles/OS/Unix/Solaris/Installing-the-Solaris-OS-From-the-Flash-Archive-on-a-Tape.html), discussed installing the Solaris Operating S…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now