Solaris zone patching question

How do you do the patching on sorlais which has zones? Do we need to patch on global zone or depends on the patch? WE need to do them in both places?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

There is one important rule you need to consider and it is that you patch lvl of your zone can be greater than the global zone if you want to keep working on that server.

My suggestion is patch global zone and zone in parallel ( on the same time )

This will be the major steps to patch both ( zones and global)

1.      Boot in Single user mode
2.      Set up for Parallel Patching (Zones only)
a.      Check the number of processors on the system:
b.      # psrinfo | wc -l
c.      32
d.      Get number of zones
e.      # zoneadm list -pc | egrep -v '^0:global' | wc -l
f.      6
g.      If the number of zones is LESS than the number of processors, then set num_proc equal to
h.      the number of zones. Otherwise, set num_proc to the number of processors.
i.      You may need to create the configuration file in the next step if it is not already present.
j.      # sudo vi /etc/patch/pdo.conf
k.      num_proc=6  --- this will change depends of the zone numbers.

3.      Validate Server is in single user mode
a.      Ensure system is in single-user mode, reboot if necessary.
b.      # svcs | grep mile
c.      disabled 12:25:19 svc:/milestone/sysconfig:default
d.      disabled 12:25:19 svc:/milestone/name-services:default
e.      disabled 12:25:20 svc:/milestone/multi-user:default
f.      disabled 12:25:20 svc:/milestone/multi-user-server:default
g.      online 12:25:36 svc:/milestone/network:default
h.      online 12:25:36 svc:/milestone/devices:default
i.      online 12:25:36 svc:/milestone/single-user:default
4.      Mount Zone Roots
a.      If this server hosts zones, identify all zone roots on the server, then mount each root.  
b.      # for MTPT in `zoneadm list -cp | nawk -F: '$1 !~ /^0$/ {print $4}'`; do mount $MTPT; done
5.      Apply the CPU patchset
a.      Change to the directory where you uncompress the patches
b.      ./installpatchset --s10patchset

I hope this helps

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
mokkanAuthor Commented:
Thanks a lot.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Unix OS

From novice to tech pro — start learning today.