Finally we’ve managed to acquire a new band member, so a big warm welcome to John who will be our front man on vocals. With the band now complete we can move forward and get our set together. We’re hoping to put the work in and get gigging before the beginning of the summer but time will tell! Just need to come up with a band name now……which might take a while!
I ran into a couple of problems whilst upgrading Solaris 10 so I’d thought I’d share:
Upgrading Solaris 10 FCS to Solaris 10 01/06
——————————————–
My usual way of using live upgrade between the releases is as follows:
pkgrm SUNWlur SUNWluu
pkgadd -d . SUNWlur SUNWluu
lucreate -c sol10 -n sol10_106 -m /:d100:ufs,mirror -m /:d1:ufs,detach,attach,preserve
luupgrade -u -n sol10_106 -s
cd /var/tmp
unzip -q 10_Recommneded.zip
luupgrade -t -n sol10_106 -s /var/tmp/10_recommended_patch_orderluactivate sol10_106
init 6
However the following happens with Solaris 10 FCS:
* You can’t use the detach, attach preserve due to bug 5106987 as it’ll complain about d100 not existing. The workaround is to detach the sub mirror first and create a new mirror.
bash-3.00# luupgrade -u -n 10_106 -s /net/rangdo/export/fcs/os/10_106
Validating the contents of the media .
The media is a standard Solaris media.
The media contains an operating system upgrade image.
The media containsversion <10>.
Constructing upgrade profile to use.
Locating the operating system upgrade program.
Checking for existence of previously scheduled Live Upgrade requests.
Creating upgrade profile for BE <10_106>.
Determining packages to install or upgrade for BE <10_106>.
Performing the operating system upgrade of the BE <10_106>.
CAUTION: Interrupting this process may leave the boot environment unstable
or unbootable.
/usr/sbin/luupgrade[677]: 6487 Killed
ERROR: Installation of the packages from this media of the media failed; pfinstall returned these diagnostics:Processing profile
ld.so.1: pfinstall: fatal: relocation error: file /net/rangdo/export/fcs/os/10_106/Solaris_10/Tools/Boot/usr/snadm/lib/libspmisvc.so.1: symbol zonecfg_set_root: referenced symbol not found
The Solaris upgrade of the boot environment <10_106> failed.
* Ok, you’ve hit bug 6334277, but it looks like the srdb 72099 – Solaris[TM] Live Upgrade Software: Minimum Patch Requirements has been updated to contain the required patches to need to get round it!
119254-13 or higher patchadd/patchrm patches
119317-01 or higher SVr4 Packaging Commands (usr) Patch
120900-03 or higher SUNWzoneu required patch
121333-02 or higher SUNWzoneu required patch
121430-02 or higher SUNWlur/SUNWluu required for S10
120235-01 or higher SUNWluzone required patches
121428-01 or higher SUNWluzone required patches
I usually make sure the recommended patch cluster is installed first before installing the above. Some of these are T-patches which you’ll have to download from Sunsolve.
Once the patches are installed you should be able to upgrade smoothly.
Ok, it’s time to start adding technical notes to my website before I forget how to do it. With everyone using SSH (Secure Shell) as a standard method of communicating between hosts, it’s always useful to bypass entering a password every time you want to login. Now, I still use CDE at work but I want to be able to SSH between hosts without entering a password.
Ok, let’s generate a public key with a keypass:
[andharr@sr1-egmp-01:~]$ ssh-keygen -b 2048 -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/home/andharr/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /home/andharr/.ssh/id_rsa.
Your public key has been saved in /home/andharr/.ssh/id_rsa.pub.
The key fingerprint is:
1b:73:fc:02:2f:9b:fe:c6:99:13:a3:23:e4:e1:9a:a1 andharr@sr1-egmp-01
Let’s register the passkey with ssh-agent:
[andharr@sr1-egmp-01:~]$ ssh-add
Enter passphrase for /home/andharr/.ssh/id_rsa:
Identity added: /home/andharr/.ssh/id_rsa (/home/andharr/.ssh/id_rsa)[andharr@sr1-egmp-01:~]$ ssh-add -l
2048 1b:73:fc:02:2f:9b:fe:c6:99:13:a3:23:e4:e1:9a:a1 /home/andharr/.ssh/id_rsa (RSA)
Let’s copy our public key into the authorized_keys file (in my home .ssh directory)
[andharr@sr1-egmp-01:~]$ cat /home/andharr/.ssh/id_rsa.pub >> /home/andharr/.ssh/authorized_keys
[andharr@sr1-egmp-01:~]$ chmod 600 /home/andharr/.ssh/authorized_keys
and make sure it’s got the right file permissions
In .dtprofile we need to make sure that dtsession starts with ssh-agent running so all subsequent sessions have ssh-agent invoked
### Errors in .dtprofile or .profile (.login) may prevent a successful
### login. If so, log in via the Fail-safe session and correct the error.
###
#if [ "$SSH_AUTH_SOCK" = "" -a -x /usr/bin/ssh-agent ]; then
# eval `/usr/bin/ssh-agent`
#fiif [ -f $HOME/.ssh/id_rsa -a -x /usr/bin/ssh-agent ]; then
dtstart_session[0]=”/usr/bin/ssh-agent /usr/dt/bin/dtsession”### We could always start up gnome or even enlightenment using this method (if we were unable to modify the servers window manager choices)
#dtstart_session[0]=”/usr/bin/ssh-agent /usr/bin/gnome-session”
#dtstart_session[0]=”/usr/bin/ssh-agent /home/andharr/e17/bin/englightentment”
fi
Now, we should be able to add the following to $HOME/.dt/sessions/sessionetc
# Let’s fire up a window to enter my keypass
if [ -f /usr/bin/ssh-add ]; then
/usr/bin/ssh-add < /dev/null &
fi
However due to changes in Solaris 9 to Solaris 10 we then hit bug 6192335 – “askpass client for ssh-add missing” so we have to workaround by using our own ssh-askpass which I’ve nabbed from here.
So we’ll have to amend sessionetc
# Let’s fire up a window to enter my keypass
if [ -f /usr/bin/ssh-add ]; then
export SSH_ASKPASS=”/home/andharr/bin/x11-ssh-askpass”
/usr/bin/ssh-add < /dev/null &
fi
We also need to add the following to $HOME/.dt/sessions/sessionexit
if [ "$SSH_AGENT_PID" != "" -a -x /usr/bin/ssh-agent ]; then
/usr/bin/ssh-agent -k
fi
So at least when I log into my CDE session I’ll be prompted for my passkey which will get registered with ssh-agent and allow me to ssh to any system (which uses my home directory on the same nameservice).
Useful links
http://www.sshkeychain.org/mirrors/SSH-with-Keys-HOWTO/SSH-with-Keys-HOWTO-4.html
http://docs.sun.com/app/docs/doc/816-4557/6maosrjjh