asked on

Installing Patches to a global container with zones (containers)

Just want to make sure:
I'm going to patch a server (global) that contain 2 zones (containers). Do i need to log into the individual zones to shut them down individually or can i do that from the global level?
This is what i was going to do:
1. Log into zone 1
2. List zones
zoneadm list –v

3. Shutdown zone
zoneadm -z zonename shutdown

4. Log into zone 2
5. List zones
zoneadm list –v

6. Shutdown zone
zoneadm -z zonename shutdown

7. Log into global
8. Perform patching and reboot

robocat

it is strongly recommended (and often required) that you do the patching in single user mode. This automatically implies that all non-global zones are shutdown and you don't have to do this manually.

(Solaris Live upgrade can be used to patch a live system, but that's a different topic)

Joseph Gan

You did not mention what version of your Solaris in global zone and in containers. If they are the same, then apply one in globe zone in single-suer mode should be fine. Otherwise you need to apply patches separately.
The same procedure to the Live patching, see this for live patching in the global zone here:

https://www.experts-exchange.com/OS/Unix/A_3840-Live-Patching-for-the-Solaris-9-Operating-System.html

sajmf0408

ASKER

Hello all,
I successfully installed the patches. I halted the non-global zones:
zoneadm -z zonename halt

confirmed the halt:
zoneadm list -cv (the "-" indicating halt status)

ran the patches, rebooted. The zones came back up automatically and that was it. Thanks for all of your help.

Btw, we're using Solaris10

ASKER CERTIFIED SOLUTION

robocat

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

sajmf0408

ASKER

i tried to "shutdown" but it didn't like that command so that's when i used halt. I will take that into consideration in the future. Thanks.