#mhd scripts | Explore Tumblr posts and blogs

aixintheheartland · 8 years ago

Text

Creating a New AIX 7 Golden Image

This checklist details how to create a new standard “golden” mksysb that can be used to create new LPARs.

This checklist assumes that an LPAR already exists and that you want to make a fresh install on it. If not, you must follow the steps in LPAR Build Checklist dealing with profile creation, zoning, mapping, etc.

1. Download and prepare the installable image files

a. Create a directory to hold the new DVD files in/export/images/DVDs (for example: dvd_aix71TL1SP4)

b. Download all the necessary files (for example) from http://www-304.ibm.com/servers/eserver/ess/OpenServlet.wss:

root@nim_server:/export/images/DVDs/dvd_aix71TL1SP4

# ls

aix71TL#sp#dvd1.iso

aix71TL#sp#dvd2.iso

extracted.update

c. Create a directory to contain the NIM resource (for example /export/nim/aix71TL#SP#)

d. Mount the first DVD image (.iso or .udf type files):

# loopmount -i udf_filename.udf -o "-V cdrfs -o ro" -m /mnt

e. Verify the device is mounted:

# df -Ig /mnt

Filesystem GB blocks Used Free %Used Mounted on

/dev/loop0 0.55 0.55 0.00 100% /mnt

f. Extract the bff files by running:

# bffcreate -d /mnt -t /export/nim/resource_name all

g. An installp sub-directory will be created in the destination directory:

# ls -l

total 0

drwxr-xr-x 3 root system 256 Apr 02 12:38 installp

h. Unmount the /mnt filesystem:

# umount /mnt

i. Unmount the iso/udf image:

# loopumount –i udf_filename.udf –o "/mnt"

j. Repeat steps 1.d to 1.i for the second DVD iso/udf image

k. Update the contents of the /export/nim/resource_name directory. From within the directory:

# inutoc .

1. Create a new Installable Image Package (iip) NIM resource

a. Run smitty nim_res

b. Select Define a Resource

c. Select lpp_source = source device for optional product images

d. Fill out as follows and hit <enter> :

Define a Resource

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[Entry Fields]

* Resource Name [iip_aix##TL#SP#]

* Resource Type lpp_source

* Server of Resource [master] +

* Location of Resource [/export/nim/resource_name] /

2. Create a SPOT resource from the new Installable Image Package

a. Run smitty nim_res

b. Select Define a Resource

c. Select spot = Shared Product Object Tree - equivalent to /usr file

d. Fill out as follows and hit <enter> :

Define a Resource

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[Entry Fields]

* Resource Name [spot_iip_aix##TL#SP#]

* Resource Type spot

* Server of Resource [master] +

Source of Install Images [iip_aix##TL#SP#] +

* Location of Resource [/export/images/spot] /

3. Allocate the new Installable Image Package from the NIM Server

a. Run smitty nim_task_inst

b. Select Install the Base Operating System on Standalone Clients

c. Select the host to install the software

d. Select rte - Install from installation images from the Select the installation TYPE menu

e. Select iip_aix##TL#SP# from the Select the LPP_SOURCE to use for the installation menu

f. Select spot_iip_aix##TL#SP# from the Select the SPOT to use for the installation menu

g. Update selections as follows:

Install the Base Operating System on Standalone Clients

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[TOP] [Entry Fields]

* Installation Target target_host

* Installation TYPE rte

* SPOT spot_iip_aix7#TL#SP#

LPP_SOURCE [iip_aix7#TL#SP#] +

MKSYSB

BOSINST_DATA to use during installation [] +

IMAGE_DATA to use during installation [] +

RESOLV_CONF to use for network configuration [] +

Customization SCRIPT to run after installation [] +

Customization FB Script to run at first reboot [] +

ACCEPT new license agreements? [YES] +

Remain NIM client after install? [yes] +

PRESERVE NIM definitions for resources on [yes] +

this target?

FORCE PUSH the installation? [no] +

Initiate reboot and installation now? [NO] +

-OR-

Set bootlist for installation at the [no] +

next reboot?

Additional BUNDLES to install [] +

-OR-

Additional FILESETS to install [] +

(bundles will be ignored)

installp Flags

COMMIT software updates? [yes] +

SAVE replaced files? [no] +

AUTOMATICALLY install requisite software? [yes] +

EXTEND filesystems if space needed? [yes] +

OVERWRITE same or newer versions? [no] +

VERIFY install and check file sizes? [no] +

ACCEPT new license agreements? [no] +

(AIX V5 and higher machines and resources)

Preview new LICENSE agreements? [no] +

4. Install the new OS on the New LPAR

a. (Assuming the host is down) in the HMC, right-click on the host and go to Active > Profile.

b. Select the Open a terminal window or console session checkbox and then click on Advanced

c. Select SMS from the Boot mode pull-down menu, and click OK, and then OK

d. In the console window, select # 2:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Main Menu

1. Select Language

2. Setup Remote IPL (Initial Program Load)

3. Change SCSI Settings

4. Select Console

5. Select Boot Options

e. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Device

Device Current Device

Number Position Name

1. - Interpartition Logical LAN

( loc=U####.MHD.#####-V##-C#-T# )

f. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Internet Protocol Version.

1. IPv4 - Address Format 123.231.111.222

2. IPv6 - Address Format 1234:5678:90ab:cdef:1234:5678:90ab:cdef

g. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Network Service.

1. BOOTP

2. ISCSI

h. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Network Parameters

Interpartition Logical LAN: U####.MHD.#####-V##-C#-T#

1. IP Parameters

2. Adapter Configuration

3. Ping Test

4. Advanced Setup: BOOTP

i. In the console window, set options as follows and select <ESC> to return to the previous menu

(NOTE: If the new host is in the same subnet as the NIM Server, use the NIM Server IP address as the Gateway IP address. If not, use the appropriate Gateway IP address.):

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

IP Parameters

Interpartition Logical LAN: U####.MHD.#####-V##-C#-T#

1. Client IP Address [###.###.###.###]

2. Server IP Address [###.###.###.###]

3. Gateway IP Address [###.###.###.###]

4. Subnet Mask [###.###.###.###]

j. In the console window, select # 3 then # 1 to conduct a ping test. If successful, press M to return to the main window. If not, troubleshoot as appropriate:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Network Parameters

Interpartition Logical LAN: U####.MHD.#####-V##-C#-T#

1. IP Parameters

2. Adapter Configuration

3. Ping Test

4. Advanced Setup: BOOTP

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Ping Test

Interpartition Logical LAN: U####.MHD.#####-V##-C#-T#

Speed, Duplex: auto,auto

Client IP Address: ###.###.###.###

Server IP Address: ###.###.###.###

Gateway IP Address: ###.###.###.###

Subnet Mask: ###.###.###.###

Protocol: Standard

Spanning Tree Enabled: 0

Connector Type:

VLAN Priority: 0

VLAN ID: 0

VLAN Tag:

1. Execute Ping Test

.-----------------.

| Ping Success. |

`-----------------'

Press any key to continue..........

k. In the console window, select # 5:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Main Menu

1. Select Language

2. Setup Remote IPL (Initial Program Load)

3. Change SCSI Settings

4. Select Console

5. Select Boot Options

l. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Multiboot

1. Select Install/Boot Device

2. Configure Boot Device Order

3. Multiboot Startup <OFF>

4. SAN Zoning Support

m. In the console window, select # 6:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Device Type

1. Diskette

2. Tape

3. CD/DVD

4. IDE

5. Hard Drive

6. Network

7. List all Devices

n. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Network Service.

1. BOOTP

2. ISCSI

o. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Device

Device Current Device

Number Position Name

1. - Interpartition Logical LAN

( loc=U####.MHD.#####-V##-C#-T# )

p. In the console window, select # 2:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

1. Information

2. Normal Mode Boot

3. Service Mode Boot

q. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Are you sure you want to exit System Management Services?

1. Yes

2. No

r. You should see output similar to the following output if things go correctly:

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

TFTP BOOT ---------------------------------------------------

Server IP..................... ###.###.###.###

Client IP..................... ###.###.###.###

Gateway IP.................... ###.###.###.###

Subnet Mask................... ###.###.###.###

( 1 ) Filename................./tftpboot/client_hostname

TFTP Retries..................5

Block Size....................512

PACKET COUNT = 9100

-------------------------------------------------------------------------------

Welcome to AIX.

boot image timestamp: 16:33:49 03/16/2015

The current time and date: 19:10:59 03/16/2015

processor count: 2; memory size: 4608MB; kernel size: 36362661

boot device: /vdevice/l-lan@30000002:speed=auto,duplex=auto,10.87.23.15,,10.99.164.124,10.99.164.1,5,5,255.255.255.0,512

-------------------------------------------------------------------------------

s. In the console window, select # 1:

******* Please define the System Console. *******

Type a 1 and press Enter to use this terminal as the

system console.

t. In the console window, select # 1:

>>> 1 Type 1 and press Enter to have English during install.

u. In the console window, select option # 2 and press <enter>:

Welcome to Base Operating System

Installation and Maintenance

Type the number of your choice and press Enter. Choice is indicated by >>>.

>>> 1 Start Install Now with Default Settings

2 Change/Show Installation Settings and Install

3 Start Maintenance Mode for System Recovery

4 Make Additional Disks Available

5 Select Storage Adapters

v. Press 1 and <enter> to select System Settings:

Installation and Settings

Either type 0 and press Enter to install with current settings, or type the

number of the setting you want to change and press Enter.

1 System Settings:

Method of Installation............. New and Complete Overwrite

Disk Where You Want to Install.....hdisk0

2 Primary Language Environment Settings (AFTER Install):

Cultural Convention................C (POSIX)

Language...........................C (POSIX)

Keyboard...........................C (POSIX)

Keyboard Type......................Default

3 Security Model.......................Default

4 More Options (Software install options)

5 Select Edition.......................express

>>> 0 Install with the settings listed above.

w. Accept option 1 (New and Complete Overwrite) and press <enter>:

Change Method of Installation

Type the number of the installation method and press Enter.

>>> 1 New and Complete Overwrite

Overwrites EVERYTHING on the disk selected for installation.

Warning: Only use this method if the disk is totally empty or if there

is nothing on the disk you want to preserve.

2 Preservation Install

Preserves SOME of the existing data on the disk selected for

installation. Warning: This method overwrites the usr (/usr),

variable (/var), temporary (/tmp), and root (/) file systems. Other

product (applications) files and configuration data will be destroyed.

3 Migration Install

Upgrades the Base Operating System to the current release.

Other product (applications) files and configuration data are saved.

x. Select hdisk 0 and then press 77 and verify that it is the correct PVID. Select 99 to return to the previous menus:

Change Disks Where You Want to Install

Type the number for the disks to be used for installation and press Enter.

Level Disks In Rootvg Location Code Size(MB)

1 6.1 hdisk0 11-T1-01 69632

2 6.1 hdisk1 11-T1-01 69632

Change Disks Where You Want to Install

Type the number for the disks to be used for installation and press Enter.

Level Rootvg Physical Volume Identifier

Disks

>>> 1 6.1 hdisk0 00f924b3afbe8157

2 6.1 hdisk1 00f924b3aff533c6

y. Select option 2 and set the Primary Language Environment to 48 English (United States) English (ISO8859-1) English (United States) and Keyboard to 1 English(United States) KBD ID 103P.

z. Select option 5 (Select Edition) until it reads enterprise.

aa. Select option 0 (Install with the settings listed above) and press <enter>

bb. In the console window, select # 1:

Overwrite Installation Summary

Disks: hdisk0

Cultural Convention: en_US

Language: en_US

Keyboard: en_US

Import User Volume Groups: yes

Enable System Backups to install any system: yes

Remove Java 1.1.8 Software: no

Selected Edition: enterprise

Optional Software being installed:

>>> 1 Continue with Install

+-----------------------------------------------------

88 Help ? | WARNING: Base Operating System Installation will

99 Previous Menu | destroy or impair recovery of ALL data on the

| destination disk hdisk0.

>>> Choice [1]:

x. You should see output similar to the following output if things go correctly:

Installing Base Operating System

Please wait...

Approximate Elapsed time

% tasks complete (in minutes)

0 0

y. You should be prompted for the root password.

5. Initial Configuration Steps:

NOTE: If you are installing on a pre-existing host, a lot of these steps will require no action

a. If necessary, recreate and mount the /audit filesystem

b. Verify that all other standard filesystems have the appropriate sizes

c. Check the Network Settings

1. Launch the TCP/IP configuration:

# smitty tcpip

2. Select Minimum Configuration & Startup and press <enter>

3. Select en0 and press <enter>

4. Set the network settings as appropriate and press <enter>

Minimum Configuration & Startup

To Delete existing configuration data, please use Further Configuration menus

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[Entry Fields]

* HOSTNAME [hostname]

* Internet ADDRESS (dotted decimal) [###.###.###.###]

Network MASK (dotted decimal) [###.###.###.###]

* Network INTERFACE en0

NAMESERVER

Internet ADDRESS (dotted decimal) [###.###.###.###]

DOMAIN Name [domain_name]

Default Gateway

Address (dotted decimal or symbolic name) [###.###.###.###]

Cost [0] #

Do Active Dead Gateway Detection? no +

Your CABLE Type N/A +

START Now YES +

b. Verify that the contents of the /etc/resolv.conf file matches the standard

search domain_name

nameserver ###.###.###.###

retrans 1000

retry 1

c. Install SSL and SSH:

1. From the NIM, run smitty nim_task_inst

2. Select Update Installed Software to Latest Level (Update All)

3. Select the latest upd_openssl_#_#_#_### package

4. Make the following changes and press <enter> :

Update Installed Software to Latest Level (Update All)

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[Entry Fields]

* Installation Target sandbox_hostname

* LPP_SOURCE upd_openssl_#_#_#_###

Software to Install update_all

Customization SCRIPT to run after installation [] +

(not applicable to SPOTs)

Force no +

installp Flags

PREVIEW only? [no] +

COMMIT software updates? [yes] +

SAVE replaced files? [no] +

AUTOMATICALLY install requisite software? [yes] +

EXTEND filesystems if space needed? [yes] +

OVERWRITE same or newer versions? [no] +

VERIFY install and check file sizes? [no] +

ACCEPT new license agreements? [YES] +

(AIX V5 and higher machines and resources)

Preview new LICENSE agreements? [no] +

5. Repeat steps 6.c.1) through 6.c.4) and install the latest upd_openssh_#_#_#_### package

d. Create the wheel user group

e. Replace the existing /etc/ssh/sshd_config file with a copy from an existing host and restart the sshd daemon

f. Copy the latest sudo and bash RPM packages from the NIM server and install

g. Replace the existing /etc/sudoers file with a copy from an existing host

h. Verify that the output of bootlist -m normal -o is correct

i. SAVE YOUR WORK BY CREATING A MKSYSB OF THE SANDBOX HOST ON THE NIM SERVER

j. Reboot the host

6. Apply the latest emergency patches

a. Copy over all the latest applicable *.epkg.Z files from the NIM Server and apply them. Some of them may require reboots

b. After applying all the required emergency patches, SAVE YOUR WORK BY CREATING A MKSYSB OF THE SANDBOX HOST ON THE NIM SERVER

c. Reboot the host

7. Finish basic OS configurations

a. Set standard user password settings

1. Type smitty sys_pwd

2. Set settings as follows and then <enter>

System Password Policy

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[Entry Fields]

* Password Algorithm [ssha512] +

Default MIN. LENGTH [16] #

Default MIN. ALPHA characters [2] #

Default MIN. LOWER ALPHA characters [1] #

Default MIN. UPPER ALPHA characters [1] #

Default MIN. OTHER characters [1] #

Default MIN. DIGITS [1] #

Default MIN. SPECIAL characters [1] #

Default MAX. REPEATED characters [8] #

Default MIN. DIFFERENT characters [4] #

b. Verify that all standard User, Service, and System accounts have the appropriate gecos field entries

c. Replace the existing /etc/mail/aliases file with a copy from an existing host and run the newaliases command

d. Replace the existing /etc/inetd.conf, /etc/netsvc.conf, and /etc/rc.tcpip files with a copies from an existing host and recycle the inetd daemon

e. Replace the existing /etc/mail/sendmail.cf file with a copy from an existing host and recycle the sendmail daemon. Remember to restart the daemon with the following command:

# startsrc -s sendmail -a "-bd -q30m"

h. Replace the existing /etc/motd file with a copy from an existing host

i. Replace the existing /etc/syslog.conf file with a copy from an existing host and recycle the syslogd daemon

j. Set disk options:

# /usr/sbin/chdev -Pl hdisk# -a reserve_policy=no_reserve

# /usr/sbin/chdev -Pl hdisk# -a algorithm=round_robin

k. Disable System Director Agent:

1. # stopsrc -s pconsole; stopsrc -s platform_agent; stopsrc -s cimsys

2. # chitab "pconsole:2:off:/usr/bin/startsrc -s pconsole > /dev/null 2>&1"

3. # chitab "platform_agent:2:off:/usr/bin/startsrc -s platform_agent >/dev/null 2>&1"

4. # chitab "cimservices:2:off:/usr/bin/startsrc -s cimsys >/dev/null 2>&1"

m. Set locale setting

1. Run:

# smitty mle_cc_cust_hdr

2. Set as follows:

Change/Show Cultural Convention, Language, or Keyboard

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[Entry Fields]

Primary CULTURAL convention ISO8859-15 English (United States) [en_US.8859-15] +

Primary LANGUAGE translation ISO8859-1 C (POSIX) > +

Primary KEYBOARD undefined +

INPUT device/directory for software [] +

EXTEND file systems if space needed? yes +

n. Configure Auditing

1. Create the /audit filesystem on the host. If the /audit filesystem already exists, delete all files residing there

2. Replace the existing /etc/security/audit/config file with a copy from an existing sandbox hosts

3. Verify and/or create the appropriate crontab entries:

#Perform Audit Trail Copy Actions on files in /audit

0 * * * * /etc/security/aixpert/bin/cronaudit

5. Also, the following /etc/inittab entry:

audit:2:once:"audit start > /dev/console 2>&1 # Start audit"

Verify that /etc/security/audit/config exists and has the following entries at a minimum:

start:

binmode = on

streammode = off

bin:

bincompact = off

backupsize = 0

backuppath = /audit

trail = /audit/trail

bin1 = /audit/bin1

bin2 = /audit/bin2

binsize = 10240

cmds = /etc/security/audit/bincmds

freespace = 65536

...

6. Start up auditing:

audit start

7. When running you should see:

# ps -ef | grep audit

root 6160606 1 0 Oct 05 - 0:02 auditbin

8. You can query the status of the audit system:

# audit query | more

auditing on

audit bin manager is process 213126

audit events:

…

9. Verify that the files in /audit are being written to:

# ls -l /audit

total 2176

-rw------- 1 root system 0 Oct 17 18:50 auditb

-rw-rw---- 1 root system 0 Oct 25 09:12 bin1

-rw-rw---- 1 root system 1797 Oct 25 09:12 bin2

-rw-r----- 1 root system 1102973 Oct 25 09:12 trail

10. If not, try to stop and restart the audit sub-system:

# audit shutdown

auditing reset

# audit start

o. Disable the Electronic Service Agent Reminder:

# /usr/esa/sbin/rmESAReminder

p. Configure host for Active Directory Integration

1. Install KRB5 filesets:

a. Copy over the expansion pack file from the NIM Server:

b. Un-tar the file:

# tar xvf ESD_AIX_V#.#_Expansion_Pack__TL_##00-##-##_#####.tar

c. Install the following KRB filesets via smitty install_latest:

Krb5.client

Krb5.doc.en_US

Krb5.lic

Krb5.server

Krb5.toolkit

2. Set up NTP using the following config:

a. Make sure that the following lines are present in the /etc/ntp.conf file:

server time_server_name

driftfile /etc/ntp.drift

tracefile /etc/ntp.trace

broadcastclient

b. Check xntpd is running:

# stopsrc -s xntpd

# ntpdate hqntp.s.corp (repeat until offset is very minimal, less than a whole number)

# startsrc -s xntpd

3. Edit /etc/rc.tcpip, uncomment xntpd line and add –x towards the end (prevents clock from running backwards):

start /usr/sbin/xntpd “$src_running” “-x”

4. Create a /etc/krb5/krb5.conf file with the following entries:

[libdefaults]

default_realm = domain_name

default_keytab_name = FILE:/etc/krb5/krb5.keytab

default_tkt_enctypes = des3-cbc-sha1 arcfour-hmac aes256-cts des-cbc-md5 des-cbc-crc

default_tgs_enctypes = des3-cbc-sha1 arcfour-hmac aes256-cts des-cbc-md5 des-cbc-crc

[realms]

domain_name = {

kdc = active_directory_server:88

default_domain = domain_name

}

[domain_realm]

. domain_name = domain_name

domain_name = domain_name

[logging]

kdc = FILE:/var/krb5/log/krb5kdc.log

admin_server = FILE:/var/krb5/log/kadmin.log

default = FILE:/var/krb5/log/krb5lib.log

5. Set permissions on /etc/krb5/krb5.conf to “755”

6. Check if /etc/pam.conf and /etc/methods.cfg exist. They should be automatically generated during krb5 installation:

# ls -l /etc/pam.conf /etc/methods.cfg

7. Edit /etc/ssh/sshd_config and change the following:

# Make sure that this line is commented out:

# Port 22

# Uncomment and update these lines

KerberosAuthentication yes

KerberosOrLocalPasswd yes

PermitEmptyPasswords no

8. Restart ssh:

# stopsrc -s sshd; sleep 2; startsrc -s sshd

9. Convert users to Kerberos:

# chuser auth1=KRB5A username

r. Apply aixpert security settings to the new host:

1. Copy the security template to the new host.

2. To apply it to the new server:

# aixpert -f /etc/security/aixpert/custom/aixpert.xml

3. To check the status of settings:

# aixpert -cp

4. Update all the System and Service accounts settings as follows:

5. Make sure that the root account settings are as follows:

6. Make sure that the solaraix account settings are as follows

7. Update the default user settings in /etc/security/user as follows:

minlen = 16

auth1 = KRB5A

s. SAVE YOUR WORK BY CREATING A MKSYSB OF THE SANDBOX HOST ON THE NIM SERVER

t. Reboot the host

8. Finish installing third-party software

9. Create the new golden mksysb

a. Run the following command from the NIM server:

# /usr/sbin/nim -o define -t mksysb -a server=master -a exclude_files=excludes -a location=/export/images/golden/mksysb_golden_aix##TL#SP#_YYYYMMDD -a source=sandbox_hostname -a mk_image=yes -a mksysb_flags=iXpa mksysb_golden_aix##TL#SP#_YYYYMMDD

b. Reset the root password to the one currently in use

#checklist AIX golden mksysb

0 notes

aixintheheartland · 8 years ago

Text

Upgrade (Migration) to AIX 7 Using a NIM Server

NOTE: This checklist is for doing a migration upgrade of an existing AIX 6 host to AIX 7. It assumes that you have created an Installable Image Package (IIP) from an AIX 7 DVD/ISO in your Network Installation Manager (NIM) server.

1. Pre-Upgrade Tasks

a. Notify application owners about the pending outage.

b. Verify that recent mksysb backups exist on the NIM server. Create manual mksysb backup if time permits.

c. Verify current backup of host in in your backup software.

d. Verify that a current cfg2html snapshots have been taken for the host and copied to the NIM server.

e. Turn off monitoring for the host.

f. Save a copy of the filesystem list:

# df -Ig > /.../config_lists_`hostname`/df_Ig.txt

g. Save a copy of the device list:

# lscfg > /.../config_lists_`hostname`/devices.txt

h. Save volume groups and logical volume list:

# for VG in `lsvg`; do lsvg -l ${VG}; done > /.../config_lists_`hostname`/lsvg-l.txt

# for VG in `lsvg`; do lsvg -p ${VG}; done > /.../config_lists_`hostname`/lsvg-p.txt

i. Record disk device list:

# lspv > /.../config_lists_`hostname`/lspv.txt

# for PV in `lspv | grep active | awk '{print $1}`; do lspv -l ${PV}; done > /.../config_lists/lspv-l.txt

# for PV in `lspv | grep active | awk '{print $1}`; do lspv -p ${PV}; done > /.../config_lists/lspv-p.txt

j. Record OS level and version:

# oslevel -s > /.../config_lists_`hostname`/oslevel_s.txt

k. Save list of installed filesets:

# lslpp -L > /.../config_lists_`hostname`/lslpp_L.txt

l. Verify filesets:

# lppchk -v

m. Verify that installed filesets for Maintenance Levels and Service Packs are complete:

# instfix -i |egrep "ML|SP" | grep -v All

o. Check for errors that might potentially impact the upgrade:

# errpt -a | more

p. Save virtual memory tuning parameters:

# vmo -a > /.../config_lists_`hostname`/vmo.txt

q. Save a list of current running processes:

# ps -Af > /.../config_lists_`hostname`/process.txt

r. Save the output of lspath:

# lspath | sort > /.../config_lists_`hostname`/path.txt

s. Record contents of bootlist (Important!):

# bootlist -m normal -o > /.../config_lists_`hostname`/bootlist.txt

t. Run pre_migration script:

# /usr/lpp/bos/pre_migration

All saved information can be found in: /home/pre_migration.date

u. Move the /home/pre_migration.date into the /.../config_lists_`hostname` directory

v. Copy the /.../config_lists_`hostname` directory to your NIM server for safekeeping.

2. Create backup rootvg disk

Delete the existing altinst_rootvg or old_rootvg volume group and create a new altinst_rootvg a volume group:

a. Remove the old altinst_rootvg volume group:

# alt_rootvg_op -X altinst_rootvg

b. Or, remove the old_rootvg volume group

1. Redefine the volume group:

# redefinevg -d hdisk# old_rootvg

2. Vary the volume group online:

# varyonvg old_rootvg

3. Synchronize the old_rootvg with the ODM:

# synclvodm old_rootvg

4. Remove the disk from old_rootvg, which will also delete the old_rootvg:

# reducevg -d -f old_rootvg hdisk#

5. Clear the boot disk from the disk:

# chpv -c hdisk#

c. Create the new altinst_rootvg:

# alt_disk_copy -V -B -d hdisk#

d. Recreate the boot image:

# bosboot -a

e. Update the bootlist to use the primary disk:

# bootlist -m normal primary_disk

# bootlist -m normal -o

f. Check previously modified hdisk attributes:

# lsattr -El hdisk# | egrep 'algorithm|reserve'

They should be set to attributes listed below:

algorithm round_robin Algorithm True+

reserve_policy no_reserve Reserve Policy True+

If not, run the following commands:

/usr/sbin/chdev -Pl hdisk# -a reserve_policy=no_reserve

/usr/sbin/chdev -Pl hdisk# -a algorithm=round_robin

3. Run final pre-migration checks

a. Ensure that the root user has primary authentication method of SYSTEM:

# lsuser -a auth1 root

If not, change it:

# chuser auth1=SYSTEM root

b. Ensure that users are logged off from the system.

c. Send last notification email to application owners about the outage.

d. Have the application administrators shutdown their applications.

4. Allocate the new the latest AIX Installation Image Package from the NIM Server

a. Run smitty nim_task_inst

b. Select Install the Base Operating System on Standalone Clients

c. Select the host to install the software

d. Select rte - Install from installation images from the Select the installation TYPE menu

e. Select iip_aix71TL#SP# from the Select the LPP_SOURCE to use for the installation menu.

f. Select spot_iip_aix71TL#SP# from the Select the SPOT to use for the installation menu (assuming it exists, otherwise it must be created from the iip_aix71TL#SP# first)

g. Update selections as follows and press <enter> :

Install the Base Operating System on Standalone Clients

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[TOP] [Entry Fields]

* Installation Target target_hostname

* Installation TYPE rte

* SPOT spot_iip_aix71TL#SP#

LPP_SOURCE [iip_aix71TL#SP#] +

MKSYSB

BOSINST_DATA to use during installation [] +

IMAGE_DATA to use during installation [] +

RESOLV_CONF to use for network configuration [] +

Customization SCRIPT to run after installation [] +

Customization FB Script to run at first reboot [] +

ACCEPT new license agreements? [YES] +

Remain NIM client after install? [yes] +

PRESERVE NIM definitions for resources on [yes] +

this target?

FORCE PUSH the installation? [no] +

Initiate reboot and installation now? [NO] +

-OR-

Set bootlist for installation at the [no] +

next reboot?

Additional BUNDLES to install [] +

-OR-

Additional FILESETS to install [] +

(bundles will be ignored)

installp Flags

COMMIT software updates? [yes] +

SAVE replaced files? [no] +

AUTOMATICALLY install requisite software? [yes] +

EXTEND filesystems if space needed? [yes] +

OVERWRITE same or newer versions? [no] +

VERIFY install and check file sizes? [no] +

ACCEPT new license agreements? [YES] +

(AIX V5 and higher machines and resources)

Preview new LICENSE agreements? [no] +

5. Actual Migration

a. If the host is active, power it down in the Hardware Management Console (HMC): Operations > Shutdown > Operating System Immediate > OK

b. Activate the host via the HMC: Right-click on the host and go to Active > Profile.

c. Select the Open a terminal window or console session checkbox and then click on Advanced

d. Select SMS from the Boot mode pull-down menu, and click OK, and then OK

e. In the console window, select # 2:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Main Menu

1. Select Language

2. Setup Remote IPL (Initial Program Load)

3. Change SCSI Settings

4. Select Console

5. Select Boot Options

f. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Device

Device Current Device

Number Position Name

1. - Interpartition Logical LAN

( loc=U####.MHD.#####-V##-C#-T# )

g. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Internet Protocol Version.

1. IPv4 - Address Format 123.231.111.222

2. IPv6 - Address Format 1234:5678:90ab:cdef:1234:5678:90ab:cdef

h. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Network Service.

1. BOOTP

2. ISCSI

i. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Network Parameters

Interpartition Logical LAN: U####.MHD.#####-V##-C#-T#

1. IP Parameters

2. Adapter Configuration

3. Ping Test

4. Advanced Setup: BOOTP

j. In the console window, set options as follows and select <ESC> to return to the previous menu

(NOTE: If the new host is in the same subnet as NIM server, use the NIM server IP address as the Gateway IP address. If not, use the appropriate Gateway IP address.):

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

IP Parameters

Interpartition Logical LAN: U####.MHD.#####-V##-C#-T#

1. Client IP Address [###.###.###.###]

2. Server IP Address [###.###.###.###]

3. Gateway IP Address [###.###.###.###]

4. Subnet Mask [###.###.###.###]

k. In the console window, select # 3 then # 1 to conduct a ping test. If successful, press M to return to the main window. If not, troubleshoot as appropriate:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Network Parameters

Interpartition Logical LAN: U####.MHD.#####-V##-C#-T#

1. IP Parameters

2. Adapter Configuration

3. Ping Test

4. Advanced Setup: BOOTP

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Ping Test

Interpartition Logical LAN: U####.MHD.#####-V##-C#-T#

Speed, Duplex: auto,auto

Client IP Address: ###.###.###.###

Server IP Address: ###.###.###.###

Gateway IP Address: ###.###.###.###

Subnet Mask: ###.###.###.###

Protocol: Standard

Spanning Tree Enabled: 0

Connector Type:

VLAN Priority: 0

VLAN ID: 0

VLAN Tag:

1. Execute Ping Test

.-----------------.

| Ping Success. |

`-----------------'

Press any key to continue..........

l. In the console window, select # 5:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Main Menu

1. Select Language

2. Setup Remote IPL (Initial Program Load)

3. Change SCSI Settings

4. Select Console

5. Select Boot Options

m. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Multiboot

1. Select Install/Boot Device

2. Configure Boot Device Order

3. Multiboot Startup <OFF>

4. SAN Zoning Support

n. In the console window, select # 6:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Device Type

1. Diskette

2. Tape

3. CD/DVD

4. IDE

5. Hard Drive

6. Network

7. List all Devices

o. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Network Service.

1. BOOTP

2. ISCSI

p. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Select Device

Device Current Device

Number Position Name

1. - Interpartition Logical LAN

( loc=U####.MHD.#####-V##-C#-T# )

q. In the console window, select # 2:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

1. Information

2. Normal Mode Boot

3. Service Mode Boot

r. In the console window, select # 1:

PowerPC Firmware

Version AM780_059

-------------------------------------------------------------------------------

Are you sure you want to exit System Management Services?

1. Yes

2. No

s. You should see output similar to the following output if things go correctly:

IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM IBM

TFTP BOOT ---------------------------------------------------

Server IP..................... ###.###.###.###

Client IP..................... ###.###.###.###

Gateway IP.................... ###.###.###.###

Subnet Mask................... ###.###.###.###

( 1 ) Filename................./tftpboot/client_hostname

TFTP Retries..................5

Block Size....................512

PACKET COUNT = 9100

-------------------------------------------------------------------------------

Welcome to AIX.

boot image timestamp: 16:33:49 03/16/2015

The current time and date: 19:10:59 03/16/2015

processor count: 2; memory size: 4608MB; kernel size: 36362661

boot device: /vdevice/l-lan@30000002:speed=auto,duplex=auto, ###.###.###.###,###.###.###.###,###.###.###.###,###.###.###.###

----------------------------------------------------------------------------

t. In the console window, select # 1:

******* Please define the System Console. *******

Type a 1 and press Enter to use this terminal as the

system console.

u. Select # 1 to use English during the install:

>>> 1 Type 1 and press Enter to have English during install.

88 Help ?

>>> Choice [1]:

v. In the console window, select # 2:

Welcome to Base Operating System

Installation and Maintenance

Type the number of your choice and press Enter. Choice is indicated by >>>.

1 Start Install Now with Default Settings

>>> 2 Change/Show Installation Settings and Install

3 Start Maintenance Mode for System Recovery

4 Configure Network Disks (iSCSI)

5 Select Storage Adapters

w. Press 1 and <enter> to select System Settings:

Installation and Settings

Either type 0 and press Enter to install with current settings, or type the

number of the setting you want to change and press Enter.

1 System Settings:

Method of Installation.............Migration

Disk Where You Want to Install.....hdisk0

2 Primary Language Environment Settings (AFTER Install):

Cultural Convention................C (POSIX)

Language...........................C (POSIX)

Keyboard...........................C (POSIX)

Keyboard Type......................Default

3 Security Model.......................Default

4 More Options (Software install options)

5 Select Edition.......................express

>>> 0 Install with the settings listed above.

x. Accept option 3 (Migration Install) and press <enter>:

Change Method of Installation

Type the number of the installation method and press Enter.

1 New and Complete Overwrite

Overwrites EVERYTHING on the disk selected for installation.

Warning: Only use this method if the disk is totally empty or if there

is nothing on the disk you want to preserve.

2 Preservation Install

Preserves SOME of the existing data on the disk selected for

installation. Warning: This method overwrites the usr (/usr),

variable (/var), temporary (/tmp), and root (/) file systems. Other

product (applications) files and configuration data will be destroyed.

>>> 3 Migration Install

Upgrades the Base Operating System to the current release.

Other product (applications) files and configuration data are saved.

y. Select hdisk 0 and then press 77 and verify that it is the correct PVID. Select 99 to return to the previous menus:

Change Disks Where You Want to Install

Type the number for the disks to be used for installation and press Enter.

Level Disks In Rootvg Location Code Size(MB)

1 6.1 hdisk0 �� 11-T1-01 69632

2 6.1 hdisk1 11-T1-01 69632

Change Disks Where You Want to Install

Type the number for the disks to be used for installation and press Enter.

Level Rootvg Physical Volume Identifier

Disks

>>> 1 6.1 hdisk0 00f924b3afbe8157

2 6.1 hdisk1 00f924b3aff533c6

z. Select option 2 and set the Primary Language Environment to 48 English (United States) English (ISO8859-1) English (United States) and Keyboard to 1 English(United States) KBD ID 103P.

aa. Select option 5 (Select Edition) until it reads enterprise.

bb. Select option 0 (Install with the settings listed above) and press <enter>

cc. Verify the Migration Installation Confirmation and press <enter> to proceed with the upgrade:

Migration Installation Confirmation

Disks: hdisk0

Cultural Convention: en_US

Language: en_US

Keyboard: en_US

Import User Volume Groups: yes

Enable System Backups to install any system: yes

Remove Java 1.1.8 Software: no

Selected Edition: enterprise

dd. You will see the following entries. Press <enter> to continue with the upgrade:

Migration menu preparation in progress.

Please wait...

Approximate Elapsed time

% tasks complete (in minutes)

Then

Migration Confirmation

Either type 0 and press Enter to continue the installation, or type the

number of your choice and press Enter.

1 List the saved Base System configuration files which will not be

merged into the system. These files are saved in /tmp/bos.

2 List the filesets which will be removed and not replaced.

3 List directories which will have all current contents removed.

4 Reboot without migrating.

Acceptance of license agreements is required before using system.

You will be prompted to accept after the system reboots.

>>> 0 Continue with the migration.

ee. Update the bootlist to use the primary disk then the secondary disk:

# bootlist -m normal hdisk0 hdisk1

# bootlist -m normal -o

6. Apply the latest Technical Level and Service Pack to the host

a. Mount the patch directory to the target host:

# mount nim_server:/export/nim/aix71TL#SP# /mnt

b. Run smitty update_all

Update Installed Software to Latest Level (Update All)

Type or select values in entry fields.

Press Enter AFTER making all desired changes.

[Entry Fields]

* INPUT device / directory for software /mnt

* SOFTWARE to update _update_all

PREVIEW only? (update operation will NOT occur) no +

COMMIT software updates? NO +

SAVE replaced files? no +

AUTOMATICALLY install requisite software? yes +

EXTEND file systems if space needed? yes +

VERIFY install and check file sizes? no +

DETAILED output? no +

Process multiple volumes? yes +

ACCEPT new license agreements? YES +

Preview new LICENSE agreements? no +

WPAR Management

Perform Operation in Global Environment yes +

Perform Operation on Detached WPARs no +

Detached WPAR Names [_all_wpars] +

Remount Installation Device in WPARs yes +

Alternate WPAR Installation Device []

NOTE: Lots of times the patch procedure will report a status of FAILURE. This is normally caused by an insignificant file not getting updated properly (e.g. bos.help.msg.en_US.smit). If a failure does occur, determine the cause by doing:

1. vi /smit.log

2. Use <Shift+G> to go to the bottom of the file.

3. Find the problem. For example:

Installation Summary

--------------------

Name Level Part Event Result

-------------------------------------------------------------------------------

bos.help.msg.en_US.smit 6.1.7.0 UNKNOWN APPLY UNKNOWN

...

c. If the system is a global LPAR, shutdown any active WPARs:

# stopwpar -F wpar_name

d. Reboot:

# shutdown -Fr

e. Check AIX level. It should read 7100-##-##-####. If it shows up as a previous version, re-run steps 2.d-f above:

# oslevel -s

7. Apply the most current efixes to the host

a. Remove any existing efixes. Reboot if required.

b. Copy over the following files from the NIM server to /... on the target host:

c. Reboot:

# shutdown -Fr

8. Post Installation Configuration

a. Ensure that the proper smart relay host entry exists in /etc/mail/sendmail.cf. If you must update the file, then restart the sendmail service:

# "Smart" relay host (may be null)

DSsmart_relay_hostname

b. If the system is a global LPAR, synchronize all WPARs:

# syncwpar -A

c. Have the application administrators bring up their applications and verify operability

d. Re-enable monitoring

e. Update documentation about O/S upgrade

#AIX checklist upgrade

0 notes