はじめに
AIX/VIOS の HIPER APAR/テクニカル・フラッシュの案内が出ていましたので AIX に ifix を適用しました。
ご参考ログとして記載します。
障害の内容
・【TF】【IBMPower】【AIX】AIX 7.1/7.2/7.3、VIOS 3.1.2/3.1.3/3.1.4環境におけるCACHED_ROUTESに関連する障害への対応のお願い
・High Impact / Highly Pervasive APARs IJ44513/IJ44047
参考手順
AIX:
・暫定フィックス（ifix）の適用
・Managing Interim Fixes on AIX
VIOS:
・Managing ifix on a VIO Server
実行環境
AIX 7.3 TL1 SP1
# oslevel -s
7300-01-01-2246
実行
① 適用前確認
# emgr -l
There is no efix data on this system.
ダウンロードしてAIXサーバーに配置したモジュール
# ls -l
total 22064
-rw-r--r-- 1 root system 11295929 Mar 14 04:19 IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
② プレビュー
# emgr -p -e IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
*******************************************************************************
EFIX MANAGER PREVIEW START
*******************************************************************************
+-----------------------------------------------------------------------------+
Efix Manager Initialization
+-----------------------------------------------------------------------------+
Initializing log /var/adm/ras/emgr.log ...
Efix package file is: /work/ifix/IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
MD5 generating command is /usr/bin/csum
MD5 checksum is b09efbab40ce92e1d393ccabed73fbb9
Accessing efix metadata ...
Processing efix label "IJ44761m1a" ...
Verifying efix control file ...
+-----------------------------------------------------------------------------+
Installp Prerequisite Verification
+-----------------------------------------------------------------------------+
Verifying prerequisite file ...
Checking prerequisites ...
Prerequisite Number: 1
Fileset: bos.mp64
Minimal Level: 7.3.1.1
Maximum Level: 7.3.1.1
Actual Level: 7.3.1.1
Type: PREREQ
Requisite Met: yes
Prerequisite Number: 2
Fileset: bos.net.tcp.client_core
Minimal Level: 7.3.1.1
Maximum Level: 7.3.1.1
Actual Level: 7.3.1.1
Type: PREREQ
Requisite Met: yes
All prerequisites have been met.
+-----------------------------------------------------------------------------+
Processing APAR reference file
+-----------------------------------------------------------------------------+
ATTENTION: Interim fix is enabled for automatic removal by installp.
+-----------------------------------------------------------------------------+
Efix Attributes
+-----------------------------------------------------------------------------+
LABEL: IJ44761m1a
PACKAGING DATE: Fri Feb 17 23:06:51 CST 2023
ABSTRACT: Fix for multiple APARs
PACKAGER VERSION: 7
VUID: 00F7CD554C00021723025023
REBOOT REQUIRED: yes
BUILD BOOT IMAGE: yes
LU CAPABLE: yes
PRE-REQUISITES: yes
SUPERSEDE: no
PACKAGE LOCKS: no
E2E PREREQS: no
FIX TESTED: no
ALTERNATE PATH: None
EFIX FILES: 2
Install Scripts:
PRE_INSTALL: no
POST_INSTALL: no
PRE_REMOVE: no
POST_REMOVE: no
File Number: 1
LOCATION: /usr/lib/boot/unix_64
FILE TYPE: Standard (file or executable)
INSTALLER: installp
SIZE: 113536
ACL: DEFAULT
CKSUM: 21222
PACKAGE: bos.mp64
MOUNT INST: no
File Number: 2
LOCATION: /usr/lib/drivers/netinet
FILE TYPE: Standard (file or executable)
INSTALLER: installp
SIZE: 2720
ACL: DEFAULT
CKSUM: 55058
PACKAGE: bos.net.tcp.client_core
MOUNT INST: no
+-----------------------------------------------------------------------------+
Efix Description
+-----------------------------------------------------------------------------+
This fix includes IJ44594m1a, which resolves:
IJ44594 - a potential security issue exists
IJ45424 - some cmds may fail for non root users post lku
This fix includes IJ44749m1a, which resolves:
IJ44761 - Memory leak
IJ44749 - lpar crashed @gids_ok
IJ44758 - lpar crashed @.disable_lock
IJ45340 - crash in tcp_output
+-----------------------------------------------------------------------------+
Efix Lock Management
+-----------------------------------------------------------------------------+
Checking locks for file /usr/lib/boot/unix_64 ...
Checking locks for file /usr/lib/drivers/netinet ...
All files have passed lock checks.
+-----------------------------------------------------------------------------+
Space Requirements
+-----------------------------------------------------------------------------+
Checking space requirements ...
Space statistics (in 512 byte-blocks):
File system: /usr, Free: 2665704, Required: 183726, Deficit: 0.
File system: /tmp, Free: 520904, Required: 205004, Deficit: 0.
+-----------------------------------------------------------------------------+
Reboot Processing
+-----------------------------------------------------------------------------+
*** NOTICE ***
This efix package requires the target system to be rebooted after the current
operation is complete. It is recommended that you reboot the target system as
soon as possible after installation to avoid disruption of current functionality.
*******************************************************************************
EFIX MANAGER PREVIEW END
*******************************************************************************
+-----------------------------------------------------------------------------+
Operation Summary
+-----------------------------------------------------------------------------+
Log file is /var/adm/ras/emgr.log
EPKG NUMBER LABEL OPERATION RESULT
=========== ============== ================= ==============
1 IJ44761m1a INSTALL PREVIEW SUCCESS
ATTENTION: system reboot will be required by the actual (not preview) operation.
Please see the "Reboot Processing" sections in the output above or in the
/var/adm/ras/emgr.log file.
Return Status = SUCCESS
#
ファイルセット bos.mp64 と bos.net.tcp.client_core に作用する様子です。
# lslpp -l bos.mp64
Fileset Level State Description
----------------------------------------------------------------------------
Path: /usr/lib/objrepos
bos.mp64 7.3.1.1 COMMITTED Base Operating System 64-bit
Multiprocessor Runtime
Path: /etc/objrepos
bos.mp64 7.3.1.1 COMMITTED Base Operating System 64-bit
Multiprocessor Runtime
# lslpp -l bos.net.tcp.client_core
Fileset Level State Description
----------------------------------------------------------------------------
Path: /usr/lib/objrepos
bos.net.tcp.client_core 7.3.1.1 COMMITTED TCP/IP Client Core Support
Path: /etc/objrepos
bos.net.tcp.client_core 7.3.1.1 COMMITTED TCP/IP Client Core Support
③ ifix適用
# time emgr -e IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
+-----------------------------------------------------------------------------+
Efix Manager Initialization
+-----------------------------------------------------------------------------+
Initializing log /var/adm/ras/emgr.log ...
Efix package file is: /work/ifix/IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
MD5 generating command is /usr/bin/csum
MD5 checksum is b09efbab40ce92e1d393ccabed73fbb9
Accessing efix metadata ...
Processing efix label "IJ44761m1a" ...
Verifying efix control file ...
+-----------------------------------------------------------------------------+
Installp Prerequisite Verification
+-----------------------------------------------------------------------------+
Verifying prerequisite file ...
Checking prerequisites ...
Prerequisite Number: 1
Fileset: bos.mp64
Minimal Level: 7.3.1.1
Maximum Level: 7.3.1.1
Actual Level: 7.3.1.1
Type: PREREQ
Requisite Met: yes
Prerequisite Number: 2
Fileset: bos.net.tcp.client_core
Minimal Level: 7.3.1.1
Maximum Level: 7.3.1.1
Actual Level: 7.3.1.1
Type: PREREQ
Requisite Met: yes
All prerequisites have been met.
+-----------------------------------------------------------------------------+
Processing APAR reference file
+-----------------------------------------------------------------------------+
ATTENTION: Interim fix is enabled for automatic removal by installp.
+-----------------------------------------------------------------------------+
Efix Attributes
+-----------------------------------------------------------------------------+
LABEL: IJ44761m1a
PACKAGING DATE: Fri Feb 17 23:06:51 CST 2023
ABSTRACT: Fix for multiple APARs
PACKAGER VERSION: 7
VUID: 00F7CD554C00021723025023
REBOOT REQUIRED: yes
BUILD BOOT IMAGE: yes
LU CAPABLE: yes
PRE-REQUISITES: yes
SUPERSEDE: no
PACKAGE LOCKS: no
E2E PREREQS: no
FIX TESTED: no
ALTERNATE PATH: None
EFIX FILES: 2
Install Scripts:
PRE_INSTALL: no
POST_INSTALL: no
PRE_REMOVE: no
POST_REMOVE: no
File Number: 1
LOCATION: /usr/lib/boot/unix_64
FILE TYPE: Standard (file or executable)
INSTALLER: installp
SIZE: 113536
ACL: DEFAULT
CKSUM: 21222
PACKAGE: bos.mp64
MOUNT INST: no
File Number: 2
LOCATION: /usr/lib/drivers/netinet
FILE TYPE: Standard (file or executable)
INSTALLER: installp
SIZE: 2720
ACL: DEFAULT
CKSUM: 55058
PACKAGE: bos.net.tcp.client_core
MOUNT INST: no
+-----------------------------------------------------------------------------+
Efix Description
+-----------------------------------------------------------------------------+
This fix includes IJ44594m1a, which resolves:
IJ44594 - a potential security issue exists
IJ45424 - some cmds may fail for non root users post lku
This fix includes IJ44749m1a, which resolves:
IJ44761 - Memory leak
IJ44749 - lpar crashed @gids_ok
IJ44758 - lpar crashed @.disable_lock
IJ45340 - crash in tcp_output
+-----------------------------------------------------------------------------+
Efix Lock Management
+-----------------------------------------------------------------------------+
Checking locks for file /usr/lib/boot/unix_64 ...
Checking locks for file /usr/lib/drivers/netinet ...
All files have passed lock checks.
+-----------------------------------------------------------------------------+
Space Requirements
+-----------------------------------------------------------------------------+
Checking space requirements ...
Space statistics (in 512 byte-blocks):
File system: /usr, Free: 2665704, Required: 183726, Deficit: 0.
File system: /tmp, Free: 520904, Required: 205004, Deficit: 0.
+-----------------------------------------------------------------------------+
Efix Installation Setup
+-----------------------------------------------------------------------------+
Unpacking efix package file ...
Initializing efix installation ...
+-----------------------------------------------------------------------------+
Efix State
+-----------------------------------------------------------------------------+
Setting efix state to: INSTALLING
+-----------------------------------------------------------------------------+
File Archiving
+-----------------------------------------------------------------------------+
Saving all files that will be replaced ...
Save directory is: /usr/emgrdata/efixdata/IJ44761m1a/save
File 1: Saving /usr/lib/boot/unix_64 as EFSAVE1 ...
File 2: Saving /usr/lib/drivers/netinet as EFSAVE2 ...
+-----------------------------------------------------------------------------+
Efix File Installation
+-----------------------------------------------------------------------------+
Installing all efix files:
Installing efix file #1 (File: /usr/lib/boot/unix_64) ...
Installing efix file #2 (File: /usr/lib/drivers/netinet) ...
Total number of efix files installed is 2.
All efix files installed successfully.
+-----------------------------------------------------------------------------+
Package Locking
+-----------------------------------------------------------------------------+
Processing package locking for all files.
File 1: locking installp fileset bos.mp64.
File 2: locking installp fileset bos.net.tcp.client_core.
All package locks processed successfully.
+-----------------------------------------------------------------------------+
Reboot Processing
+-----------------------------------------------------------------------------+
*** NOTICE ***
This efix package requires the target system to be rebooted after the current
operation is complete. It is recommended that you reboot the target system as
soon as possible after installation to avoid disruption of current functionality.
+-----------------------------------------------------------------------------+
Efix State
+-----------------------------------------------------------------------------+
Setting efix state to: REBOOT REQUIRED
+-----------------------------------------------------------------------------+
Boot Image Processing
+-----------------------------------------------------------------------------+
Rebuilding boot image ...
bosboot: Boot image is 65564 512 byte blocks.
Successfully rebuilt boot image.
+-----------------------------------------------------------------------------+
Operation Summary
+-----------------------------------------------------------------------------+
Log file is /var/adm/ras/emgr.log
EPKG NUMBER LABEL OPERATION RESULT
=========== ============== ================= ==============
1 IJ44761m1a INSTALL SUCCESS
ATTENTION: system reboot is required. Please see the "Reboot Processing"
sections in the output above or in the /var/adm/ras/emgr.log file.
Return Status = SUCCESS
real 2m34.17s
user 0m4.73s
sys 0m1.99s
#
実行時間は 2分34秒程度でした。
④ 適用後確認
# emgr -l
ID STATE LABEL INSTALL TIME UPDATED BY ABSTRACT
=== ===== ========== ================= ========== ======================================
1 *Q* IJ44761m1a 03/14/23 04:26:56 Fix for multiple APARs
STATE codes:
S = STABLE
M = MOUNTED
U = UNMOUNTED
Q = REBOOT REQUIRED
B = BROKEN
I = INSTALLING
R = REMOVING
T = TESTED
P = PATCHED
N = NOT PATCHED
SP = STABLE + PATCHED
SN = STABLE + NOT PATCHED
QP = BOOT IMAGE MODIFIED + PATCHED
QN = BOOT IMAGE MODIFIED + NOT PATCHED
RQ = REMOVING + REBOOT REQUIRED
#
Q = REBOOT REQUIRED が表示されています。
リブートを実行します。
⑤ リブート
# shutdown -Fr
SHUTDOWN PROGRAM
Tue Mar 14 04:30:59 CDT 2023
0513-044 The sshd Subsystem was requested to stop.
Wait for 'Rebooting...' before stopping.
Error logging stopped...
~ 省略 ~
⑥ リブート後確認
# emgr -l
ID STATE LABEL INSTALL TIME UPDATED BY ABSTRACT
=== ===== ========== ================= ========== ======================================
1 S IJ44761m1a 03/14/23 04:26:56 Fix for multiple APARs
STATE codes:
S = STABLE
M = MOUNTED
U = UNMOUNTED
Q = REBOOT REQUIRED
B = BROKEN
I = INSTALLING
R = REMOVING
T = TESTED
P = PATCHED
N = NOT PATCHED
SP = STABLE + PATCHED
SN = STABLE + NOT PATCHED
QP = BOOT IMAGE MODIFIED + PATCHED
QN = BOOT IMAGE MODIFIED + NOT PATCHED
RQ = REMOVING + REBOOT REQUIRED
#
STABLE 状態になりました。
# lslpp -l bos.mp64
Fileset Level State Description
----------------------------------------------------------------------------
Path: /usr/lib/objrepos
bos.mp64 7.3.1.1 COMMITTED Base Operating System 64-bit
Multiprocessor Runtime
EFIXLOCKED
Path: /etc/objrepos
bos.mp64 7.3.1.1 COMMITTED Base Operating System 64-bit
Multiprocessor Runtime
EFIXLOCKED
# lslpp -l bos.net.tcp.client_core
Fileset Level State Description
----------------------------------------------------------------------------
Path: /usr/lib/objrepos
bos.net.tcp.client_core 7.3.1.1 COMMITTED TCP/IP Client Core Support
EFIXLOCKED
Path: /etc/objrepos
bos.net.tcp.client_core 7.3.1.1 COMMITTED TCP/IP Client Core Support
EFIXLOCKED
#
対象のファイルセットはレベルの変更はありませんが EFIXLOCKED マークがついていました。
おわりに
次のサービス・パック(SP) で今回適用した ifix が盛り込まれるみたいですが、Next SP は2023年4月28日頃リリース予定の様子です。
以上です。