Patch Management in Sun (Oracle) Solaris 10

Patching Solaris 10 using Shell/GUI: 

Register your copy of Solaris first on a website(some cases its free)

Update Manager is used for Updating Solaris>>

Applications>Utilities>Update Manager

which updatemanager

/usr/bin/updatemanager

[Use Update manager to Register]

Its a GUI TOOL!! :)

Fill up the form!

and SUN SUBCRIPTION KEY

No compulsory to type key (NOTE: Without key it limit updates)

Continues without KEY

Finish

Checks for latest patches which is applicable

Default DIRECTORY for downloading patches is :

/var/sadm/spool

[Can change from Preference option in GUI]

tick mark on patch to download and install

you will see 12912.jar.tmp

[tmp means its still downloading]
NOTE: Look for smaller size patch for demo

Clicking the patch will give discription

We can download patches manually from,

http://Sunsolve.sun.com

open in mozilla and look for SunOS and patch num

[Only look for x86 versions]

Command Version of PATCH management:

[smpatch  - CLI of update manager]

smpatch analyze   - Analysis of patches

Patchid - Built - Description

Dump everything into a text file and use it for updating

smpatch analyze > patch_list.txt



ls -ltr patch_list.txt

smpatch analyze -x idlist=patch_list.txt

[This command processes only patches available in the list]

NOTE: Keep 1 or 2 names only


smpatch analyze -i 121309-03

>>To check dependancies

smpatch download -i 121309-03

>> This will download and store in /var/sadm/spool



smpatch add -i 121309-03

>> for installing specific patch

After installing check in updatemanager

smpatch get

>> to see variables of Updatemanager

cd /var/sadm/spool/patch

ls -ltr

cd 121309-03

tail log

>> displays log file related to specific log

smc

management tools> System config> patches

here shows list of installed patches

Action>Add patch

local or remote location

patchadd >> This command is to install unsigned patches


LOOK FOR UNSIGNED PATCH and COPY the ID
http://sunsolve.sun.com

Download specific patch using PATCHFINDER

unzip 122670-01.zip

patchadd /tmp/122670-01

patchadd -p

>> printing all installed patches

patchrm 122670-01

>> to remove installed patch

use Updatemanager to verify

smpatch update

to check / validated patches

shows installed patches