HP UX Patch Management manual Advanced topic removing superseded patches from a depot

Page 76

======= 05/03/04 13:25:02 MDT END swremove SESSION (non-interactive) (jobid=my_system-0843)

Advanced topic: removing superseded patches from a depot

If you have a depot that you are using for patch installation that contains both superseded patches and corresponding superseding patches, the superseded patches will never be installed and are a waste of disk space. There is a patch utility called cleanup that you can use to remove all patches from a software depot if they have been superseded by patches that are also available in the depot. This command works only for directory depots, not tape depots.

The cleanup utility is delivered by the following patches (and their superseding patches):

PHCO_27779 (HP-UX 11.0, B.11.00)

PHCO_27780 (HP-UX 11i v1, B.11.11)

PHCO_32220 (HP-UX 11i v2, B.11.23)

Shipped with SD-UX (HP-UX 11i v3, B.11.31)

To execute cleanup on the depot some_depot, you can use the following command:

cleanup [-p]-d /some_directory/some_depot

If you use the -poption, the command executes in preview mode. You will be able to see what changes will be made without any changes actually occurring. HP recommends that you always execute the command in preview mode first.

For additional information and command options, see the cleanup(1M) manpage.

The following example shows how to use the cleanup command to remove superseded patches from the depot /my_depots/patch_depot.

Use the swlist command to show the contents of depot /my_depots/patch_depot. The depot contains two patches: PHCO_24630 and PHCO_27780. The patch PHCO_27780 supersedes PHCO_24630.

$ swlist -l product -d @ /my_depots/patch_depot

#Initializing...

#Contacting target "my_system"...

#

#Target: my_system:/my_depots/patch_depot

PHCO_24630 1.0 HP-UX Patch Tools PHCO_27780 1.0 HP-UX Patch Tools

Use the cleanup command in preview mode to see what changes will occur. The command output shows that patch PHCO_24630 will be removed because the cleanup command removes superseded patches; the output states “PHCO_24630 superseded by PHCO_27780”.

$ /usr/sbin/cleanup -p -d /my_depots/patch_depot

###Cleanup program started at 05/04/04 07:48:27 Preview mode enabled. No modifications will be made. Cleanup of depot '/my_depots/patch_depot'. Obtaining the list of patches in the depot:

/my_depots/patch_depot ...done.

Obtaining the list of superseded 11.X patches in the depot: /my_depots/patch_depot ...The following superseded patches exist in the depot:

====================================================

PHCO_24630 superseded by PHCO_27780

All information has been logged to /var/adm/cleanup.log.

###Cleanup program completed at 05/04/04 07:48:27

Run the cleanup command:

$ /usr/sbin/cleanup -d /my_depots/patch_depot

###Cleanup program started at 05/04/04 07:50:39

Cleanup of depot '/my_depots/patch_depot'. Obtaining the list of patches in the depot:

/my_depots/patch_depot ...done.

76 Using software depots for patch management

Image 76
Contents Patch Management User Guide for HP-UX 11.x Systems Revision history Table of Contents What are standard HP-UX patch bundles? Using Dynamic Root Disk for patch management 104 107HP-UX patches and patch management Patch management strategiesHow to get patches Where to startQuick start guide for patching HP-UX systems OverviewBefore you begin Should you use standard HP-UX patch bundles?Standard HP-UX patch bundles Acquiring and installing standard HP-UX patch bundlesAcquiring the bundles Installing the bundles As root, run the createdepothp-ux11scriptAdvanced topic using Dynamic Root Disk DRD SwlistAcquiring and installing individual patches Acquiring the patchesQuick start guide for patching HP-UX systems Installing the patches Swverify -d \* @ /tmp/somepatchdirectory/depotAdvanced topic using Dynamic Root Disk DRD HP-UX patch overview Patch-related conceptsPatch identification HP-UX software structurePatch bundles Software depots and patch depotsPatch status Patch stateCategory tags StateSwlist -l fileset -a state grep patchid Which patches are on a system? Swlist -l product -a categorytag patchidExamples of the swlist command For example$ swlist -l product *,c=patch $ swlist -l product *,c=manualdependencies $ swlist -l bundle @ somesystemAncestors Ancestors and supersession$ swlist -l fileset -a ancestor PHSS29183 Swlist -a appliedpatches filesetname Supersession$ swlist -a appliedpatches Xserver.AGRM Swlist -l patch -x showsupersededpatches=true Showpatches -s$ swlist -l fileset -a supersedes PHSS28681 Swlist -a patchstate -x showsupersededpatches=true patchidPatch-related attributes HP-UX Patch Supersession ChainSee Category tags Types of dependencies Patch dependenciesCorequisites and prerequisites Impact of dependencies on acquiring patches Enforced and unenforced manual dependenciesSwlist -vl fileset -a dependencytype fileset Patch rollback Patch rollback and commitmentPatch commitment Cleanup -p -c number Advanced topic patch cleanup utilityHP-UX patch ratings HP patch rating Rating detailsCritical and noncritical patches Finding information for a specific patchPatch documentation $ swlist -l product -a categorytag PHSS30011Subset of fields in patch text file and patch details Obtaining information using the Itrc Patch warningsAdvanced topic the readme attribute Swlist -l product -a readme patchid moreCritical and noncritical warnings Questions to ask How to handle patch warningsAdvanced topic finding patches with warnings Backup and recovery ConsiderationsPatch management overview Patch management life cyclePatch management life cycle Patch management overview Establishing a software change management strategy Restrictive Conservative InnovativeRecommendations for software change management Operational factor and patch management strategy matrixConsideration of HP patch rating Patch management and software depotsProactive patching strategy Acquiring patches for proactive patchingReactive patching strategy Advanced topic HP-UX Software AssistantAdvanced topic security patching strategy Acquiring patches for reactive patchingTesting the patches to be installed Advanced topic scanning for security patchesWhat are standard HP-UX patch bundles? Key featuresStandard HP-UX patch bundles Obtaining standard HP-UX patch bundles Standard HP-UX patch bundle use and release datesQuick start guide for patching HP-UX systems Using the IT Resource Center Obtaining an Itrc user accountUseful pages on the Itrc Find individual patchesKey features Accessing the patch database and finding an individual patchClick the add to selected patch list button Using the IT Resource Center Advanced topic checking for all patch dependencies Check for patches with dependenciesUsing the IT Resource Center Click the add to selected patch list button Standard patch bundles Custom patch bundles run a patch assessmentSupport information digests Ask your peers in the forumsSearch knowledge base Using software depots for patch management Common software distributor commands for patchingDepot types Directory depotsUsing depots Tape depotsChoosing depot type and depot location Viewing depotsSwlist -l depot Swlist -l depot @ remotesystem $ swlist -l depot$ swlist -l depot @ swdepot.xyz.com Creating and adding to a directory depot Copying patches to depots Depot/patches/11.11Advanced topic HP-UX Software Assistant Registering and unregistering directory depotsCopying products with patch dependencies to depots Advanced topic access control lists Examples of registering and unregistering depots$ swreg -l depot /depot/patches/2003-07periodicdepot $ swreg -u -l depot /depot/patches/2003-07periodicdepot Examples of verifying directory depots Verifying directory depots $ swverify -d \* @ /mydepots/newdirectorydepot Verification had errors Removing software from a directory depotVerification succeeded $ swverify -d \* @ /mydepots/PHSS30278depotExecution succeeded Advanced topic removing superseded patches from a depot $ /usr/sbin/cleanup -d /mydepots/patchdepot$ swlist -l product -d @ /mydepots/patchdepot Installing patches from a depot Removing a directory depot$ swlist -l product @ /mydepots/patchdepot $ swreg -u -l depot /mydepots/PHCO27780depotReboots the system when required Examples of installing patches from a depot Analysis succeededCustom patch bundles Installing products with patch dependencies from a depotAnalysis and Execution succeeded Rev Patch description Examples of listing patches and bundlesRev Bundle Description Creating a custom bundle $ swlist -d @ /mydepots/temporarydepotAnalysis succeeded Finally, remove the temporary depot Using HP-UX Software Assistant for patch management For more informationUsing Dynamic Root Disk for patch management Drd1m Patch Assessment Tool Using the Patch Assessment ToolBenefits of the Patch Assessment Tool Example of running the Patch Assessment Tool Select upload new system information Contacting HP Support and other resourcesRelated information HP websites Typographic conventionsNon-HP websites Times Patch usage models Patch usage model 1 hardware/application software change Components in test Image Then productionDRD Begi n Product needs to be certified on HP-UX 11i v2/v3 Patch usage model 3 operating environment cold install Patch usage model 3 operating environment cold install Patch usage model 4 operating environment update Patch usage model 4 operating environment update Patch usage model 5 proactive patch Create clonePatch usage model 6 reactive patch Passed? SystemGlossary AncestorIPD SWA Index Index See also HWE Index