Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports

2014-07-30 Thread Martin Paul

Am 29.07.2014 21:24, schrieb Brookins, Neil (Philadelphia):

Perhaps the solution could be to implement a third type of report? We already 
have two types (–list and –listhtml) perhaps there should be a third option to 
list only the patches and not all the other data?


PCA's --format option can create reports and lists in whatever format 
is required (see e.g. Roland's reply). But the best solution for the 
original problem is exactly as you state:



What I do for this issue is different. I don’t try to re-use the report output 
as subsequent input. I just keep the files for the --fromfiles=DIR around for 
reuse.  I run the report with –list then when I’m ready to download patches I 
remove the –list and put –download in its place; rerunning the same command. 
Since I use the same --fromfiles=DIR each time it downloads the correct patches 
for that same report list which was previously generated.


hth,
Martin.



Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports

2014-07-30 Thread Glen Gunselman
Gordon,

I'm not doing what you are, but I go the other way and copy the 
patchdiag.xref file to each server - that way there is no need to keep the 
explorer ect. Files.

Glen

-Original Message-
From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Gordon Morrison
Sent: Wednesday, July 30, 2014 4:30 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Question: Downloading patches to a central server using 
pca-generated patch reports

Thanks for all your replies. I have got machine-specific patch downloads
working with explorer output.
Unfortunately due to disk space restrictions, keeping gunzipped  untar'd
explorers for all of our Solaris systems is not feasible.
The pca man page says:
 The output of the pkginfo, showrev and uname commands is used to gather
   information about the system.
So I just need to save the contents of explorerdir/ patch+pkg/* and
sysconfig/uname*.out for each target system in order to generate the list of
patches to download. Is this correct?

The alternative is to explode each explorer in turn and delete it
afterwards, which is doable, it just seems long-winded.
Thanks again.
Gordon



Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports

2014-07-29 Thread Brookins, Neil (Philadelphia)
I’ve never tried the syntax you are trying. Looking at the usage page (--help)  
I see “file name:  patchlist.txt” which I think is just a list of one patch 
number per row of text, like this:
123456-78
234567-89

But the output from (--list) contains additional text, like this:
Using /var/tmp/patchdiag.xref from Jul/28/14

Perhaps the solution could be to implement a third type of report? We already 
have two types (–list and –listhtml) perhaps there should be a third option to 
list only the patches and not all the other data? That way it would be usable 
in the way you are attempting?

What I do for this issue is different. I don’t try to re-use the report output 
as subsequent input. I just keep the files for the --fromfiles=DIR around for 
reuse.  I run the report with –list then when I’m ready to download patches I 
remove the –list and put –download in its place; rerunning the same command. 
Since I use the same --fromfiles=DIR each time it downloads the correct patches 
for that same report list which was previously generated.

Neil G. Brookins
Identity and Authentication Solutions - IT Global Solutions
Towers Watson
1500 Market Street | Philadelphia, PA 19102
Phone: +1 215 246 6046
neil.brook...@towerswatson.commailto:neil.brook...@towerswatson.com

From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Gordon Morrison
Sent: Tuesday, July 29, 2014 7:07 AM
To: pca@lists.univie.ac.at
Subject: [pca] Question: Downloading patches to a central server using 
pca-generated patch reports

Hi,

I have recently discovered PCA and it's great at generating patch reports, but 
how can I use those reports to download patch bundles for various servers?

We download weekly explorers from all of our Solaris servers to a Linux jumpbox 
for safekeeping, and I create patch reports for all of our Solaris servers from 
those explorers using PCA on the Linux box.

How can I download the patches required for a particular Solaris server to the 
Linux box using the patch report generated by PCA on the Linux box?

I've been playing with command line options and env variables, and I can’t get 
the syntax right

e.g.  :

$ /usr/local/scripts/PATCHING/pca /mssunix/pca/patch-reports/pca-report.txt 
--user=user --passwd=password

ERROR: Unknown operand: Using

(PCA_PATCHDIR is set in the environment)
The Using obviously comes from the first line of the patch report, but how 
can I use a patch report to generate a list of patches to download for a 
particular server? This seems to me like an obvious way to do this, I just 
can't get the syntax right.

PCA seems so great in other respects, I'd be surprised if it couldn't do this. 
Do I have to manually generate a list of patches from the patch report? (I 
could script it, but why re-invent the wheel?)

Thanks
Gordon
Notice of Confidentiality
This transmission contains information that may be confidential. It has been 
prepared for the sole and exclusive use of the intended recipient and on the 
basis agreed with that person. If you are not the intended recipient of the 
message (or authorized to receive it for the intended recipient), you should 
notify us immediately; you should delete it from your system and may not 
disclose its contents to anyone else.


This e-mail has come to you from Towers Watson Delaware Inc. or Towers Watson 
Pennsylvania Inc.


Re: [pca] Question: Downloading patches to a central server using pca-generated patch reports

2014-07-29 Thread Roland Soderstrom
We do exact that.
Here is the command line. (taken from a script that loops all hosts and creates 
tar balls of patches for each host)
# pca -y -X /Patching/PCA/${HOST}/${XrefVer} -f 
${EXPLORER_PATH}/${HOST}/latest* -H --format %p-%c missingrs  
$patch_order_file
Assuming you have a patchdiag.xref in directory /Patching/PCA/${HOST}/${XrefVer}
Assuming you have an “extracted” explorer in ${EXPLORER_PATH}/${HOST}/latest*
Pca will make the output in patchorder.
This way you could make a patchset of anything if you have a valid 
patchdiag.xref from a chosen date and a valid explorer extracted.

We collect ALL patchdiag.xrefs via a cronscript and date them like 
patchdiag.xref.date


-  Roland

From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Brookins, Neil 
(Philadelphia)
Sent: Wednesday, 30 July 2014 5:24 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Question: Downloading patches to a central server using 
pca-generated patch reports

I’ve never tried the syntax you are trying. Looking at the usage page (--help)  
I see “file name:  patchlist.txt” which I think is just a list of one patch 
number per row of text, like this:
123456-78
234567-89

But the output from (--list) contains additional text, like this:
Using /var/tmp/patchdiag.xref from Jul/28/14

Perhaps the solution could be to implement a third type of report? We already 
have two types (–list and –listhtml) perhaps there should be a third option to 
list only the patches and not all the other data? That way it would be usable 
in the way you are attempting?

What I do for this issue is different. I don’t try to re-use the report output 
as subsequent input. I just keep the files for the --fromfiles=DIR around for 
reuse.  I run the report with –list then when I’m ready to download patches I 
remove the –list and put –download in its place; rerunning the same command. 
Since I use the same --fromfiles=DIR each time it downloads the correct patches 
for that same report list which was previously generated.

Neil G. Brookins
Identity and Authentication Solutions - IT Global Solutions
Towers Watson
1500 Market Street | Philadelphia, PA 19102
Phone: +1 215 246 6046
neil.brook...@towerswatson.commailto:neil.brook...@towerswatson.com

From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Gordon Morrison
Sent: Tuesday, July 29, 2014 7:07 AM
To: pca@lists.univie.ac.atmailto:pca@lists.univie.ac.at
Subject: [pca] Question: Downloading patches to a central server using 
pca-generated patch reports

Hi,

I have recently discovered PCA and it's great at generating patch reports, but 
how can I use those reports to download patch bundles for various servers?

We download weekly explorers from all of our Solaris servers to a Linux jumpbox 
for safekeeping, and I create patch reports for all of our Solaris servers from 
those explorers using PCA on the Linux box.

How can I download the patches required for a particular Solaris server to the 
Linux box using the patch report generated by PCA on the Linux box?

I've been playing with command line options and env variables, and I can’t get 
the syntax right

e.g.  :

$ /usr/local/scripts/PATCHING/pca /mssunix/pca/patch-reports/pca-report.txt 
--user=user --passwd=password

ERROR: Unknown operand: Using

(PCA_PATCHDIR is set in the environment)
The Using obviously comes from the first line of the patch report, but how 
can I use a patch report to generate a list of patches to download for a 
particular server? This seems to me like an obvious way to do this, I just 
can't get the syntax right.

PCA seems so great in other respects, I'd be surprised if it couldn't do this. 
Do I have to manually generate a list of patches from the patch report? (I 
could script it, but why re-invent the wheel?)

Thanks
Gordon
Notice of Confidentiality
This transmission contains information that may be confidential. It has been 
prepared for the sole and exclusive use of the intended recipient and on the 
basis agreed with that person. If you are not the intended recipient of the 
message (or authorized to receive it for the intended recipient), you should 
notify us immediately; you should delete it from your system and may not 
disclose its contents to anyone else.


This e-mail has come to you from Towers Watson Delaware Inc. or Towers Watson 
Pennsylvania Inc.