Solaris 10 patching best practises

[Dariusz Dolecki]

Am I correct in assuming that Sun/Oracle recommends UPGRADING FIRST to the highest release instead of applying the recommended patch cluster? Of course then apply the recommended patch cluster to the highest S10 release......

[John D Groenveld]

In article <88dace5c-59ab-4540...@googlegroups.com>,

Dariusz Dolecki <dariusz...@gmail.com> wrote:
>Am I correct in assuming that Sun/Oracle recommends UPGRADING FIRST to
>the highest release instead of applying the recommended patch cluster?

I've not seen that recommendation.

John
groe...@acm.org

[Dariusz Dolecki]

Some info is here:
http://www.scribd.com/doc/40022723/Patching-Best-Practices#outer_page_4

[Casper H.S. Dik]

It should be easier in Solaris 11.

One of the things you can't do in Solaris 10 and before is adding
packages after you've patched the system: because you don't know whether
the packages you just added were modified by the installed packages.

In Solaris 11, upgrade to a specific release and all the packages in
that release will compatible and have the same bugs applied to them.

The only downside is that you cannot avoid one particular patch; it
is all or nothing; but you can always revert to the older release.

The upside of having fewer choices it that the packages are always
integrated in the same set and that means that all packages get
the same exposure.

Casper

[Dariusz Dolecki]

Casper,

Thanks for posting in this thread, I always look forward to your valuable opinions. You are correct about S11, however, my question is regarding S10 patching best practises. There was a "bigadmin" post about this by "Enda O'Connor" titled "the Patch Management Best Practices" guide, which I cannot now find.

Is Sun/Oracle's recommendation to upgrade to the highest possible release than patch?

Thanks again for taking the time to pitch in. I need an answer about S10.

[John D Groenveld]

In article <18d4aba2-543d-4ca2...@googlegroups.com>,
Dariusz Dolecki <dariusz...@gmail.com> wrote:
>http://www.scribd.com/doc/40022723/Patching-Best-Practices#outer_page_4

I recommend using live_upgrade(5) for patching and upgrading
if your installation is capable.

John
groe...@acm.org

[cindy]

On May 24, 1:30 pm, Dariusz Dolecki <dariusz.dole...@gmail.com> wrote:
> On Thursday, May 24, 2012 2:04:37 PM UTC-5, Casper H. S. Dik wrote:
>
>
>
>
>
>
>
>
>
> > Dariusz Dolecki <dariusz.dole...@gmail.com> writes:
>
> > >On Thursday, May 24, 2012 12:33:04 PM UTC-5, John D Groenveld wrote:
> > >> In article <88dace5c-59ab-4540...@googlegroups.com>,

> > >> Dariusz Dolecki  <dariusz.dole...@gmail.com> wrote:
> > >> >Am I correct in assuming that Sun/Oracle recommends UPGRADING FIRST to
> > >> >the highest release instead of applying the recommended patch cluster?
>
> > >> I've not seen that recommendation.
>
> > >> John

> > >> groenv...@acm.org

>
> > >Some info is here:
> > >http://www.scribd.com/doc/40022723/Patching-Best-Practices#outer_page_4
>
> > It should be easier in Solaris 11.
>
> > One of the things you can't do in Solaris 10 and before is adding
> > packages after you've patched the system: because you don't know whether
> > the packages you just added were modified by the installed packages.
>
> > In Solaris 11, upgrade to a specific release and all the packages in
> > that release will compatible and have the same bugs applied to them.
>
> > The only downside is that you cannot avoid one particular patch; it
> > is all or nothing; but you can always revert to the older release.
>
> > The upside of having fewer choices it that the packages are always
> > integrated in the same set and that means that all packages get
> > the same exposure.
>
> > Casper
>
> Casper,
>
> Thanks for posting in this thread, I always look forward to your valuable opinions. You are correct about S11, however, my question is regarding S10 patching best practises. There was a "bigadmin" post about this by "Enda O'Connor" titled "the Patch Management Best Practices" guide, which I cannot now find.
>
> Is Sun/Oracle's recommendation to upgrade to the highest possible release than patch?
>
> Thanks again for taking the time to pitch in. I need an answer about S10.

Hi Dariusz,

I think you can follow Gerry Haskins blog, who has links to
recommended Solaris 10 patching practices:

https://blogs.oracle.com/patch/entry/solaris_10_recommended_patching_strategy

Thanks,

Cindy