修补 Sun Solaris
您好，最近我们遇到了一个应用程序问题，需要对 sun Solaris 进行修补。
问题是在此 Solaris 服务器中创建了许多由其他应用程序使用的区域。
因此，是否某些补丁可能会影响当前的应用程序。
处理这种情况的最佳方法是什么？
Hi recently we have an application issue which requires patching of sun solaris.
Problem is that there are many zones created in this solaris server which are used by other applications.
So if it is possible that certain patches could affect the current applications.
What is the best way to handle this kind of situation?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
我使用的一个技巧是让全球“忘记”其区域。 停止这些区域，让它们进入“已安装状态”，然后从 /etc/zones.index.xml 中删除它们（当然，在备份该区域之后）。 您现在可以执行升级，而不会影响区域。 打补丁并重新启动后，重新安装原始的index.xml并使用-F选项附加区域； 否则他们会在贴上补丁后应用补丁。
但请注意，这并不是玩具真正希望永远保留的情况。 迟早你真的应该将这些区域提升到最新水平。
在我忘记之前：如果你有“稀疏”区域，这个技巧就不起作用。
One trick I have used is to make the global "forget" about its zones. Stop the zones, get them to the "installed state", thendelete them from /etc/zones.index.xml (after taking a backup copy of that one, of course). You can now perform the upgrade, without affecting the zones. After patching and rebooting, reinstall the original index.xml and attach the zones with the -F option; otherwise they will apply the patches when attached.
But mind you, this is not a situation toy really wish to keep forever. Sooner or later you really ought to bring the zones to latest level, too.
And before I forget: this trick does not work if you have "sparse" zones.
如果您正在修补内核，那么您的修补程序会影响每个人：内核只有一份副本。
如果您正在修补应用程序软件，那么您可以应用这些补丁来仅影响某些区域。
请查看区域常见问题解答。
If you're patching the kernel, then your patches affect everyone: there's only one copy of the kernel.
If you're patching application software, then you can apply those patches to affect only certain zones.
Have a look at the Zones FAQ.
解决方案实际上完全取决于问题所在以及您正在应用哪种修复方法。 在许多情况下，如果问题出在内核中，您可以通过以下方式对其进行修补：该修补程序仅适用于具有给定标志的进程。 如果它在图书馆或类似的地方，你可能会遇到困难。 简而言之，我们确实需要更多信息才能为您提供可靠的答案。
The solution really depends entirely on where the problem lies and what sort of fix you're applying. In many cases, if the problem is in the kernel, you can patch it in such a way that the patch will only apply to a process with a given flag. If it's in a library or some such, you could have a harder time. In short, we really need a lot more info to give you a solid answer.
您需要应用的补丁与时区相关吗？ 如果没有，您可能只能应用一个补丁。
最好的选择是建立一个在软件方面与此盒子相同的临时系统，让它工作，然后安装补丁并进行测试。
Is the patch you need to apply timezone-related? If not, you may be able to only apply the one patch.
Your best bet is to set up a staging system that's software-wise identical to this box, get it working, and then install your patches and test.