Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports
Am 29.07.2014 21:24, schrieb Brookins, Neil (Philadelphia): Perhaps the solution could be to implement a third type of report? We already have two types (–list and –listhtml) perhaps there should be a third option to list only the patches and not all the other data? PCA's --format option can create reports and lists in whatever format is required (see e.g. Roland's reply). But the best solution for the original problem is exactly as you state: What I do for this issue is different. I don’t try to re-use the report output as subsequent input. I just keep the files for the --fromfiles=DIR around for reuse. I run the report with –list then when I’m ready to download patches I remove the –list and put –download in its place; rerunning the same command. Since I use the same --fromfiles=DIR each time it downloads the correct patches for that same report list which was previously generated. hth, Martin.
Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports
Gordon, I'm not doing what you are, but I go the other way and copy the patchdiag.xref file to each server - that way there is no need to keep the explorer ect. Files. Glen -Original Message- From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Gordon Morrison Sent: Wednesday, July 30, 2014 4:30 AM To: PCA (Patch Check Advanced) Discussion Subject: Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports Thanks for all your replies. I have got machine-specific patch downloads working with explorer output. Unfortunately due to disk space restrictions, keeping gunzipped untar'd explorers for all of our Solaris systems is not feasible. The pca man page says: The output of the pkginfo, showrev and uname commands is used to gather information about the system. So I just need to save the contents of explorerdir/ patch+pkg/* and sysconfig/uname*.out for each target system in order to generate the list of patches to download. Is this correct? The alternative is to explode each explorer in turn and delete it afterwards, which is doable, it just seems long-winded. Thanks again. Gordon
Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports
I’ve never tried the syntax you are trying. Looking at the usage page (--help) I see “file name: patchlist.txt” which I think is just a list of one patch number per row of text, like this: 123456-78 234567-89 But the output from (--list) contains additional text, like this: Using /var/tmp/patchdiag.xref from Jul/28/14 Perhaps the solution could be to implement a third type of report? We already have two types (–list and –listhtml) perhaps there should be a third option to list only the patches and not all the other data? That way it would be usable in the way you are attempting? What I do for this issue is different. I don’t try to re-use the report output as subsequent input. I just keep the files for the --fromfiles=DIR around for reuse. I run the report with –list then when I’m ready to download patches I remove the –list and put –download in its place; rerunning the same command. Since I use the same --fromfiles=DIR each time it downloads the correct patches for that same report list which was previously generated. Neil G. Brookins Identity and Authentication Solutions - IT Global Solutions Towers Watson 1500 Market Street | Philadelphia, PA 19102 Phone: +1 215 246 6046 neil.brook...@towerswatson.commailto:neil.brook...@towerswatson.com From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Gordon Morrison Sent: Tuesday, July 29, 2014 7:07 AM To: pca@lists.univie.ac.at Subject: [pca] Question: Downloading patches to a central server using pca-generated patch reports Hi, I have recently discovered PCA and it's great at generating patch reports, but how can I use those reports to download patch bundles for various servers? We download weekly explorers from all of our Solaris servers to a Linux jumpbox for safekeeping, and I create patch reports for all of our Solaris servers from those explorers using PCA on the Linux box. How can I download the patches required for a particular Solaris server to the Linux box using the patch report generated by PCA on the Linux box? I've been playing with command line options and env variables, and I can’t get the syntax right e.g. : $ /usr/local/scripts/PATCHING/pca /mssunix/pca/patch-reports/pca-report.txt --user=user --passwd=password ERROR: Unknown operand: Using (PCA_PATCHDIR is set in the environment) The Using obviously comes from the first line of the patch report, but how can I use a patch report to generate a list of patches to download for a particular server? This seems to me like an obvious way to do this, I just can't get the syntax right. PCA seems so great in other respects, I'd be surprised if it couldn't do this. Do I have to manually generate a list of patches from the patch report? (I could script it, but why re-invent the wheel?) Thanks Gordon Notice of Confidentiality This transmission contains information that may be confidential. It has been prepared for the sole and exclusive use of the intended recipient and on the basis agreed with that person. If you are not the intended recipient of the message (or authorized to receive it for the intended recipient), you should notify us immediately; you should delete it from your system and may not disclose its contents to anyone else. This e-mail has come to you from Towers Watson Delaware Inc. or Towers Watson Pennsylvania Inc.
Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports
We do exact that. Here is the command line. (taken from a script that loops all hosts and creates tar balls of patches for each host) # pca -y -X /Patching/PCA/${HOST}/${XrefVer} -f ${EXPLORER_PATH}/${HOST}/latest* -H --format %p-%c missingrs $patch_order_file Assuming you have a patchdiag.xref in directory /Patching/PCA/${HOST}/${XrefVer} Assuming you have an “extracted” explorer in ${EXPLORER_PATH}/${HOST}/latest* Pca will make the output in patchorder. This way you could make a patchset of anything if you have a valid patchdiag.xref from a chosen date and a valid explorer extracted. We collect ALL patchdiag.xrefs via a cronscript and date them like patchdiag.xref.date - Roland From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Brookins, Neil (Philadelphia) Sent: Wednesday, 30 July 2014 5:24 AM To: PCA (Patch Check Advanced) Discussion Subject: Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports I’ve never tried the syntax you are trying. Looking at the usage page (--help) I see “file name: patchlist.txt” which I think is just a list of one patch number per row of text, like this: 123456-78 234567-89 But the output from (--list) contains additional text, like this: Using /var/tmp/patchdiag.xref from Jul/28/14 Perhaps the solution could be to implement a third type of report? We already have two types (–list and –listhtml) perhaps there should be a third option to list only the patches and not all the other data? That way it would be usable in the way you are attempting? What I do for this issue is different. I don’t try to re-use the report output as subsequent input. I just keep the files for the --fromfiles=DIR around for reuse. I run the report with –list then when I’m ready to download patches I remove the –list and put –download in its place; rerunning the same command. Since I use the same --fromfiles=DIR each time it downloads the correct patches for that same report list which was previously generated. Neil G. Brookins Identity and Authentication Solutions - IT Global Solutions Towers Watson 1500 Market Street | Philadelphia, PA 19102 Phone: +1 215 246 6046 neil.brook...@towerswatson.commailto:neil.brook...@towerswatson.com From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Gordon Morrison Sent: Tuesday, July 29, 2014 7:07 AM To: pca@lists.univie.ac.atmailto:pca@lists.univie.ac.at Subject: [pca] Question: Downloading patches to a central server using pca-generated patch reports Hi, I have recently discovered PCA and it's great at generating patch reports, but how can I use those reports to download patch bundles for various servers? We download weekly explorers from all of our Solaris servers to a Linux jumpbox for safekeeping, and I create patch reports for all of our Solaris servers from those explorers using PCA on the Linux box. How can I download the patches required for a particular Solaris server to the Linux box using the patch report generated by PCA on the Linux box? I've been playing with command line options and env variables, and I can’t get the syntax right e.g. : $ /usr/local/scripts/PATCHING/pca /mssunix/pca/patch-reports/pca-report.txt --user=user --passwd=password ERROR: Unknown operand: Using (PCA_PATCHDIR is set in the environment) The Using obviously comes from the first line of the patch report, but how can I use a patch report to generate a list of patches to download for a particular server? This seems to me like an obvious way to do this, I just can't get the syntax right. PCA seems so great in other respects, I'd be surprised if it couldn't do this. Do I have to manually generate a list of patches from the patch report? (I could script it, but why re-invent the wheel?) Thanks Gordon Notice of Confidentiality This transmission contains information that may be confidential. It has been prepared for the sole and exclusive use of the intended recipient and on the basis agreed with that person. If you are not the intended recipient of the message (or authorized to receive it for the intended recipient), you should notify us immediately; you should delete it from your system and may not disclose its contents to anyone else. This e-mail has come to you from Towers Watson Delaware Inc. or Towers Watson Pennsylvania Inc.