Installing the Ksplice Client From ULN

Note:

If using Oracle Cloud Infrastructure (OCI), Ksplice is already installed by default (on all Oracle Linux instances created after August 25, 2017). For more information, see Oracle Ksplice on Oracle Cloud Infrastructure.

Before installing the Ksplice client:

  • Verify that the system is running a supported Oracle Linux release with a supported version of either the Unbreakable Enterprise Kernel (UEK) or the Red Hat Compatible Kernel (RHCK) installed.

    Use the uname -a command to verify the kernel version. See Maintained Kernels. Ksplice applies updates to the running kernel only, so ensure that the running kernel is the one you want to update.

  • For an online client, register the system with ULN and verify it has a connection to the Oracle Uptrack server.

  • For an offline client, configure a local ULN mirror.

The following procedure applies only to Oracle Linux releases.

  1. Subscribe to the necessary channels on ULN.
  2. (Optional) Configure proxy settings.

    If you use an Internet proxy, you can configure the HTTP and HTTPS settings for the proxy in the shell as follows:

    • For the sh, ksh, or bash shells, use commands such as the following:

      sudo http_proxy=http://proxy_URL:http_port
      sudo https_proxy=http://proxy_URL:https_port
      sudo export http_proxy https_proxy

      For the csh shell, use commands such as the following:

      sudo setenv http_proxy=http://proxy_URL:http_port
      sudo setenv https_proxy=http://proxy_URL:https_port                           
  3. Revert prelinked binaries and remove the prelink package.

    If prelink is installed, revert all the prelinked binaries and any dependent libraries to their original state, then remove the prelink package:

    sudo prelink -au
    sudo dnf remove prelink

    Note:

    prelink isn't installed and enabled by default Oracle Linux systems.

  4. Install the ksplice package.
    • For the Ksplice online client, use the following command:

      sudo dnf install -y ksplice
    • For the Ksplice offline client, use the following command:

      sudo dnf install -y ksplice ksplice-offline

    Note:

    No uptrack and uptrack-offline packages are available on Oracle Linux 10. The Uptrack clients are now included in the ksplice and ksplice-offline packages. The Uptrack clients are deprecated on Oracle Linux 10 and might be removed in a future release.

    • For the Ksplice online client, use the following command:

      sudo dnf install -y ksplice uptrack
    • For the Ksplice offline client, use the following command:

      sudo dnf install -y ksplice ksplice-offline uptrack-offline
    • For the Ksplice online client, use the following command:

      sudo dnf install -y ksplice uptrack
    • For the Ksplice offline client, use the following command:

      sudo dnf install -y ksplice ksplice-offline uptrack-offline
    • For the Ksplice online client, use the following command:

      sudo yum install -y ksplice uptrack
    • For the Ksplice offline client, use the following command:

      sudo yum install -y ksplice ksplice-offline uptrack-offline

    The following packages are installed on the system:

    ksplice-core

    Contains the shared user space libraries, such as glibc and openssl, that support Ksplice patching.

    ksplice-helper

    Contains a helper library that enables user space executables to be patched by Ksplice.

    ksplice-helper-devel

    Contains the development environment for creating user space libraries that support Ksplice patching.

    ksplice-tools

    Contains the ksplice executable and ksplice(8) manual page.

  5. Verify the Ksplice access key in the Uptrack configuration file.

    The access key for Ksplice Uptrack is retrieved from ULN and added to the /etc/uptrack/uptrack.conf file, as shown in the following example:

    [Auth]
    accesskey = 0e1859ad8aea14b0b4306349142ce9160353297daee30240dab4d61f4ea4e59b

    You might need to manually add the key to the configuration file, if the system is unable to retrieve it from ULN. After install, check that the key is added to the configuration file and add it manually if it isn't present. To view the access key for the system, go to the Systems tab in the ULN web interface, or check https://status-ksplice.oracle.com/status.

  6. Update the system.

    Update the system to install the Ksplice-aware versions of the user space libraries:

    sudo dnf update

    To install only the libraries and not update any other packages, limit the update to the following channels, as appropriate:

    • ol10_x86_64_userspace_ksplice

    • ol10_aarch64_userspace_ksplice

    For example, you would update the packages for the Oracle Linux Ksplice user-aware channels as follows:

    sudo dnf --disablerepo=* --enablerepo=ol10_x86_64_userspace_ksplice update

    To install only the libraries and not update any other packages, limit the update to the following channels, as appropriate:

    • ol9_x86_64_userspace_ksplice

    • ol9_aarch64_userspace_ksplice

    For example, you would update the packages for the Oracle Linux Ksplice user-aware channels as follows:

    sudo dnf --disablerepo=* --enablerepo=ol9_x86_64_userspace_ksplice update

    To install only the libraries and not update any other packages, limit the update to the following channels, as appropriate:

    • ol8_x86_64_userspace_ksplice

    • ol8_aarch64_userspace_ksplice

    For example, you would update the packages for the Oracle Linux Ksplice user-aware channels as follows:

    sudo dnf --disablerepo=* --enablerepo=ol8_x86_64_userspace_ksplice update

    To install only the libraries and not update any other packages, limit the update to the following channels, as appropriate:

    • ol7_x86_64_userspace_ksplice

    • ol7_aarch64_userspace_ksplice

    For example, you would update the packages for the Oracle Linux Ksplice user-aware channels as follows:

    sudo yum --disablerepo=* --enablerepo=ol7_x86_64_userspace_ksplice update

    You can also use the glibc* and openssl* syntax with the install command for the package manager. To use this client to perform kernel updates, install it in the same way that you use the standard Uptrack client, for example:

    sudo dnf install uptrack-updates-$(uname -r)
  7. (Optional) Enable automatic installation of updates.

    To enable the automatic installation of updates, change the entry in the /etc/uptrack/uptrack.conf file from no to yes:

    autoinstall = yes
  8. Reboot the system.

    Reboot the system for the changes to take effect.

    sudo systemctl reboot

Review the Ksplice configuration and update any other options that you might want to set. See Ksplice Client Configuration Options for more information.