BjĂśrn RodĂŠn (roden@ae.ibm.com) works for IBM System Lab Services and member of IBM WW Executive Advisory Practice, and as SME also part of IBM WW PowerCare Teams for Availability, Performance, and Security. Bjorn holds MSc, BSc and DiplSSc in Informatics and BCSc and DiplCSc in Computer Science, is a IBM Redbooks Platinum Author, IBM Certified Specialist etc, and has worked in different roles with architecting, designing, planning, leading, implementing, programming, and assessing high availability, resilient, secure, and high performance systems and solutions since 1990.
Automation with Network Install Manager (NIM) in 1-2-3 easy steps
Technical University/Symposia materials may not be reproduced in whole or in part without the prior written permission of IBM. 9.0
Session Objectives Björn Rodén @ IBM Technical University in Cannes, October 2015
• This session focus on how to deploy and use Network Install Manager (NIM) to simplify update management procedures and operations – How to automate checking for fix availability and update recommendations using FLRT – How to automate fix download using SUMA – How to automate Software level consistency check with niminv – Also • We will also touch on using VIOS virtual repository images • And of course Bare-Metal install
– But not • BigFix Lifecycle with AIX Enterprise Edition 7.2 • PowerSC Trusted Network Connect and Patch Management (TNCPM)
objective
© Copyright IBM Corporation 2015
You will learn how to setup and use a NIM server to manage NIM clients 2
What is Network Install Manager (NIM) Björn Rodén @ IBM Technical University in Cannes, October 2015
• Network Installation Manager (NIM) provides an effective way to perform various software installation, maintenance and configuration tasks over a network. • A NIM environment consists of at least one NIM server and at least one NIM client – A NIM server provides resources – A NIM client use resources provided by a NIM server
© Copyright IBM Corporation 2015
3
Network Install Manager server (quick version) Björn Rodén @ IBM Technical University in Cannes, October 2015
• The NIM server has control over resources and their usage for network installation and configuration of NIM clients. – The NIM server allow other NIM servers or clients to be keepers of specific resources, these systems then become NIM resource servers – The NIM server can work in push-mode where the NIM server initiates the actions to be performed on the NIM client, but also in a pull-mode, where the actions are initiated from the NIM client – A NIM database represents resources, machines, and other items as objects and use the AIX Object Data Manager (ODM) to store information about these objects • The NIM database structure is divided into four classes: – Machines, – Networks, – Resources and – Groups. – Bootstrap installation protocol used by NIM server to install a new NIM client • BOOTP > TFTP > NFS Operations are performed on NIM objects. © Copyright IBM Corporation 2015
4
Basic principles of setting up a NIM Server Björn Rodén @ IBM Technical University in Cannes, October 2015
1.
Design and Plan – Which subnets to serve and initial and storage requirements • Single master server model or cascaded resource server model • LPPs, SPOTs, MKSYSBs, staging areas – AIX version required – Filesystem hierarchy for the NIM server storage – Naming convention for NIM objects – Backup/Archiving and Restore/Recovery/Availability of NIM server
2.
Install and Configure – Create and mount the NIM server filesystems – Install the NIM server filesets
– Configure the NIM server basic setup 3. Test, Verify and Document
© Copyright IBM Corporation 2015
5
Design and Plan Björn Rodén @ IBM Technical University in Cannes, October 2015
• Single master server or cascaded resource server model – Master • The NIM server where you set up and maintain NIM environment • Can initiate installations, updates, and other operations (push mode) • Object type: master – Client • Can be target for operations initiated from master • Can initiate its own installations or updates (pull mode) • Object type: standalone (other types are: diskless, dataless, wpar) – Resource server • A machine that holds NIM resources • By default the master is the only resource server • A standalone client can also serve as a resource server
© Copyright IBM Corporation 2015
6
Design and Plan Björn Rodén @ IBM Technical University in Cannes, October 2015
• AIX level for the NIM server – The NIM master must not be at a lower level than any client • Filesystem hierarchy for the NIM server storage – Start with • /tftpboot • /export/lpp_source • /export/spot • /export/images • Valid NIM name characters, less than 40 char length, include the uppercase and lowercase letters of the alphabet, the numbers 0-9, hyphen (-), exclamation mark (!), and the underscore character (_) – Names for lpp_source and spot objects should indicate the code level, such as: – lpp<OS#>-<TL#> – spot<OS#>-<TL#> – net_<IP#NET>__<CIDR#>
=> lpp7100-01 or lpp6100-08 => spot7100-01 or spot6100-08 => net_10_1_1__24
http://publib.boulder.ibm.com/infocenter/aix/v7r1/topic/com.ibm.aix.install/doc/insgdrf/addl_name_reqmnts.htm © Copyright IBM Corporation 2015
7
Design and Plan Björn Rodén @ IBM Technical University in Cannes, October 2015
• Backup/Archiving and Restore/Recovery of NIM server content – Archive NIM client MKSYSB resources (IBM Tivoli Storage Manager) – Archive or save copy to secondary server of primary LPPs and SPOTs – Create ISO from NIM servers mksysb and archive or save of to VIOS • Availability requirements of NIM server functionality – If the NIM server is used as integral part of daily operations • Design and plan how to handle unplanned outage (RTO, RPO, MTTR) • Determine which operations are critical and alternative methods to perform • Not only for basic NIM functionality, but for recovering servicing existing environment • Usually enough to verify ahead of critical service windows when needed
© Copyright IBM Corporation 2015
8
Install and Configure Björn Rodén @ IBM Technical University in Cannes, October 2015
• Create and mount the NIM server filesystems – SMIT: smitty storage – CLI: • crfs -v jfs2 -g <VG> -a size=64M -m /tftpboot -A yes -p rw -a logname=INLINE • crfs -v jfs2 -g <VG> -a size=4G -m /export/lpp_source -A yes -p rw –a logname=INLINE • crfs -v jfs2 -g <VG> -a size=1G -m /export/spot -A yes -p rw -a logname=INLINE • crfs -v jfs2 -g <VG> -a size=6G -m /export/images -A yes -p rw –a logname=INLINE • Install the NIM server filesets
– Filesets for server • bos.sysmgt.nim.master • bos.sysmgt.nim.spot
– Filesets for clients • bos.sysmgt.nim.client – SMIT: smitty install – CLI: • installp -acgXd <PATH> bos.sysmgt.nim.master bos.sysmgt.nim.spot
© Copyright IBM Corporation 2015
9
Install and Configure Björn Rodén @ IBM Technical University in Cannes, October 2015
• Configure the NIM server basic setup – SMIT: smitty nimconfig – CLI: 1. nimconfig -a netname=master_net -a pif_name=en0 -a netboot_kernel=mp –a cable_type=N/A –a client_reg=yes 2. nim -o define -t lpp_source -a server=master -a location=/export/lpp_source/lpp710001 -a source=/mnt lpp7100-01 3. nim -o define -t spot -a server=master -a location=/export/spot –a source=lpp7100-01 a installp_flags=-aQg spot7100-01 – The first NIM client nim -o define -t standalone -a if1="master_net lpar2client 0 ent0" lpar2client
VLAN support -a vlan_tag=<VLANID>
http://publib.boulder.ibm.com/infocenter/aix/v7r1/topic/com.ibm.aix.cmds/doc/aixcmds4/nim.htm © Copyright IBM Corporation 2015
10
BjĂśrn RodĂŠn @ IBM Technical University in Cannes, October 2015
Managing and Installing NIM clients
11
Managing and Installing NIM clients (AIX) Björn Rodén @ IBM Technical University in Cannes, October 2015
• Server initiated operations, such as: – Installing a NIM client from LPP_SOURCE – Installing a NIM client from SPOT – Installing a NIM client from MKSYSB – Running customizing scripts on the NIM client – Create a NIM machine group resource • Client initiated operations, such as: – Listing all available resources for the client – Allocating an lpp_source to the client – Deallocate previoiusly allocated resources for the client – Performing an update_all (cust) operation from the client – Resetting the NIM client state – Deallocate a resource from the client – Rebuild and recover a NIM client /etc/niminfo file
© Copyright IBM Corporation 2015
12
Installing a NIM client Björn Rodén @ IBM Technical University in Cannes, October 2015
• Installing a NIM client from LPP_SOURCE (push) – Allocate resources and execute the NIM installation • Allocate resources: – nim -o allocate -a spot=spot7100-01 -a lpp_source=lpp7100-01 lpar2client • Execute installation: – nim -o bos_inst -a source=rte -a installp_flags=agX –a accept_licenses=yes lpar2client – Activate the partition from the HMC and start the install • Open a console window to the partition from the HMC, and step through the SMS menues, or use the lpar_netboot command – lpar_netboot -t ent -s auto -d auto -S <ServerIP> -G <GatewayIP> -C <ClientIP> <PartitionName> <ProfileName> <ManagedSystem> • Activate the partition if using SMS menues manually – chsysstate -m <ManangedSystem> -r lpar -f <ProfileName> -o on -n <PartitionName>
You can also use the lpar_netboot command to start LPARs and acquire the 48-bit Ethernet Media Access Control (MAC) address through Open Firmware (after completion the LPAR will be shutdown): lpar_netboot -M -n -t ent "<VirtualIOServerName>" "<ProfileName>" “<ManagedSystem>" © Copyright IBM Corporation 2015
13
Installing a NIM client Björn Rodén @ IBM Technical University in Cannes, October 2015
• Installing a NIM client from SPOT (push) – Allocate resources and execute the NIM installation • Allocate resources: – nim -o allocate -a spot=spot7100-01 -a lpp_source=lpp7100-01 lpar2client • Execute installation: – nim -o bos_inst -a source=spot -a installp_flags=agX lpar2client – Activate the partition from the HMC and start the install • Open a console window to the partition from the HMC, and step through the SMS menues, or use the lpar_netboot command – lpar_netboot -t ent -s auto -d auto -S <ServerIP> -G <GatewayIP> -C <ClientIP> <PartitionName> <ProfileName> <ManagedSystem> • Activate the partition – chsysstate -m <ManangedSystem> -r lpar -f <ProfileName> -o on -n <PartitionName>
© Copyright IBM Corporation 2015
14
Customizing a NIM client Björn Rodén @ IBM Technical University in Cannes, October 2015
• Running customizing scripts on the NIM client (push) – Create the script object and save it on the NIM server – Define the script to the NIM server • nim -o define -t script -a server=master -a location=/export/scripts/node_cust node_cust – Allocate the script to the NIM client • nim -o allocate -a script=node_cust lpar2client – Execute the script on the NIM client from the NIM server: • nim -o cust lpar2client
• •
NOTE The script is copied to the client. The script should verify its current execution environment and not make assumptions.
© Copyright IBM Corporation 2015
15
Grouping NIM clients Björn Rodén @ IBM Technical University in Cannes, October 2015
• Create a NIM machine group resource – Define the group, in this case with one member • nim -o define -t mac_group -a add_member=lpar2client lpar7100group • Perform NIM operations on the machine group – Use the group name instead of the machine name (most operations)
© Copyright IBM Corporation 2015
16
Managing AIX clients (LPARs) Björn Rodén @ IBM Technical University in Cannes, October 2015
• Client initiated operations – Listing all available resources for the client (pull) • nimclient -l -L lpar2client – Allocating an lpp_source to the client (pull) • nimclient -o allocate -a lpp_source=lpp7100-01 – Deallocate previoiusly allocated resources for the client (pull) • nimclient -o deallocate -a lpp_source=lpp7100-01 – Performing an update_all (cust) operation from the client (pull) • nimclient -o cust -a lpp_source=lpp7100-01 -a fixes=update_all – Resetting the NIM client state (pull) • nimclient -Fo reset – Deallocate a resource from the client (pull) • nimclient -o deallocate -a lpp_source=lpp7100-01
NOTE Assuming client operations to the server is allowed.
NOTE With AIX 7.2 also HTTPD
– Rebuild and recover a NIM client /etc/niminfo file (pull) • niminit -a master=lpar1 -a name=lpar2client
© Copyright IBM Corporation 2015
17
NIM server and client logfiles Björn Rodén @ IBM Technical University in Cannes, October 2015
• NIM creates log files with information and output from client installations and operations – /var/adm/ras/nimlog • An alog format file stored on the NIM master used to log console output sent to stderr by NIM operations – alog -o -f /var/adm/ras/nimlog | tail – /var/adm/ras/nim.installp • Plain text format log file stored on a NIM client containing output from NIM installp operations – /var/adm/ras/bosinstlog • An alogformat file used to log output from the BOS install program (stored on a client) – alog -o -f /var/adm/ras/bosinstlog | tail – /var/adm/ras/nimsh.log • Plain text log file on a NIM client containing output from the nimsh daemon (if running) – nim -o showlog • Example CLI: nim -o showlog -a log_type=<LogType> -a verbose=<1-5> • LogType can be: boot, bosinst, devinst, lppchk, nimerr, niminst, and script •
http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/nim_op_showlog.htm
© Copyright IBM Corporation 2015
18
Björn Rodén @ IBM Technical University in Cannes, October 2015
Clone AIX system images
19
Clone AIX system images Björn Rodén @ IBM Technical University in Cannes, October 2015
• Backing up and cloning a system to NIM server by mksysb – Make sure that the receiving filesystem can store the mksysb image and that the ulimit is also set large enough (default 2GB) – Determine the backup image storage space requirement using the size_preview option to the mksysb operation: • nim -o define -t mksysb -a server=master -a source=lpar2client -a size_preview=yes -a mk_image=yes -a mksysb_flags=-I -a location=/export/images/mksysb.lpar2client mksysb_lpar2client – Use the NIM server to create and manage a NIM clients mksysb’s: • nim -o define -t mksysb -a source=lpar2client -a server=master -a location=/export/images/mksysb.lpar2client mksysb_lpar2client – The NIM alternate disk migration (nimadm) utility requires that the bos.alt_disk_install are installed on the NIM client, then you can use alt_disk_install from the NIM server: • nimadm -j rootvg2 -c lpar2client -s spot7100-01 -l lpp7100-01 -d "hdisk1" -Y
http://publib.boulder.ibm.com/infocenter/aix/v7r1/topic/com.ibm.aix.cmds/doc/aixcmds4/nimadm.htm © Copyright IBM Corporation 2015
20
Clone AIX system images – alt_ disk_copy (1/2) Björn Rodén @ IBM Technical University in Cannes, October 2015
• The alt_disk_copy is a built-in AIX utility that allows cloning of a running rootvg – Typical uses are • upgrades that effect the running of AIX • cloning of disks for migration • online backups of rootvg • To clone non-mirrored rootvg running 7100-00 rootvg to hdisk3, then apply updates from /updates to bring the cloned rootvg to a 7100-01 level: – alt_disk_copy -d hdisk3 -F 7100-01_AIX_ML -l /updates – The bootlist will be set to boot from hdisk3 at the next reboot/IPL. • To clone non-mirored rootvg running a lower technology level to hdisk1 and update that clone with the latest maintenance level that is on cd0, run the following command: – alt_disk_copy -b update_all -l /dev/cd0 -d hdisk1 • To clone the running mirrored rootvg to hdisk3 and hdisk4, and execute update_all on all updates from /updates: – alt_disk_copy -d "hdisk3 hdisk4" -b update_all -l /updates – The bootlist will be set to boot from hdisk3 at the next reboot. • To clone mirrored rootvg to hdisk3 and hdisk4 for cloning for migration – alt_disk_copy -d hdisk3 hdisk4 © Copyright IBM Corporation 2015
21
Clone AIX system images – alt_ disk_copy (2/2) Björn Rodén @ IBM Technical University in Cannes, October 2015
• Once the copy has completed, you will be presented with two rootvg volume groups: – rootvg – altinst_rootvg • Where altinst_rootvg is the cloned non-active/varied off rootvg. • The cloned rootvg has all its logical volumes prefixed with the name 'alt'. • The boot list is also changed to boot off altinst_rootvg. • If the system is now rebooted and when the system comes back up, the original rootvg will become: – old_rootvg • The original altinst_rootvg becomes: – rootvg • If you decide to reboot off the old_rootvg, when the system comes back up, the old_rootvg becomes: – rootvg • The rootvg becomes: – altinst_rootvg • Destroy the newly cloned disk (we rebooted off old_rootvg; it now becomes altinst_rootvg) – alt_rootvg_op -X altinst_rootvg © Copyright IBM Corporation 2015
22
Clone AIX system images – alt_disk_mksysb Björn Rodén @ IBM Technical University in Cannes, October 2015
• Allows the users to install a mksysb system backup to a separate disk without taking the machine down for an extended period, thus mitigating outage risk. – alt_disk_mksysb is the only method available to restore a backup containing multibos Base Operating System (BOS) instances. – To install a mksysb image on hdisk3 and hdisk4 , then run a customized script (/tmp/script) to copy some user files over to the alternate rootvg file systems before reboot: • alt_disk_mksysb -m /mksysb_images/my_mksysb -d "hdisk3 hdisk4" -s /tmp/script – Once the copy has completed, you will be presented with two rootvg volume groups: • rootvg • altinst_rootvg • Where altinst_rootvg is the cloned non-active/varied off rootvg. – The cloned rootvg has all its logical volumes prefixed with the name 'alt'. – The boot list is also changed to boot off altinst_rootvg. – If the system is now rebooted and when the system comes back up, the original rootvg will become: • old_rootvg – The original altinst_rootvg becomes: • rootvg © Copyright IBM Corporation 2015
23
Björn Rodén @ IBM Technical University in Cannes, October 2015
Managing a Software repository
24
Managing a Software repository using SUMA (1/3) Björn Rodén @ IBM Technical University in Cannes, October 2015
• The Service Update Management Assistant (SUMA) allows you to set up the capability of automating the download of maintenance fixes on a system • Prior to running the suma command to download updates, any authentication should be performed to ensure the system has internet access (SUMA can be configured to use proxy) • Notes: – Install the bos.suma fileset – Use either the suma command or the SMIT suma fastpath – Use the NIM master for SUMA operations – To verify the system is connected to the internet, enter the following command (performs a ‘Preview’ download with no files being downloaded): • suma -x -a Action=Preview -a RqType=Latest – If the following message is returned, the system do not have access to IBM servers over internet. NOTE • 0500-013 Failed to retrieve list from fix server. Proxy configuration used by SUMA is managed in AIX 7.1 with AIX ESA client configuration ( smitty srv_conn) http://publib.boulder.ibm.com/infocenter/aix/v7r1/topic/com.ibm.aix.cmds/doc/aixcmds5/suma.htm © Copyright IBM Corporation 2015
25
Managing a Software repository using SUMA (2/3) Björn Rodén @ IBM Technical University in Cannes, October 2015
• Create a task which will send an email notification when a specific TL are available, checking once a month: – suma -s “30 0 1 * *” -a Action=Preview -a RqType=ML -a RqName=7100-02 -a FilterML=7100-01 -a Repeats=y -a DLTarget='/export/lpp_suma/7101-02' -a NotifyEmail=”root@localhost” • Execute the download when the TL is available: – suma -x -a RqType=ML -a RqName=7100-02 -a FilterML=7100-01 -a DLTarget='/export/lpp_source/7100-02 ‘ • View defined SUMA tasks: – suma -l • Unschedule defined SUMA tasks (in this case #1): – suma -u 1 • Delete a defined SUMA task (in this case #1): – suma –d 1
© Copyright IBM Corporation 2015
26
Managing a Software repository using SUMA (3/3) Björn Rodén @ IBM Technical University in Cannes, October 2015
• To download a specific TL, type: – suma -x -a RqType=TL -a RqName=6100-06-00-1036 -a FilterML=6100-05 • To download a specific SP, type: – suma -x -a RqType=SP -a RqName=6100-06-03-1048 -a FilterML=6100-05 – Specifying FilterML=6100-05 in the above command indicates the system is at the 6100-05 level, such that TL6 (6100-06-00-1036) will be downloaded in addition to TL6 SP3 (6100-0603-1048). Had FilterML=6100-06 been specified, only TL6 SP3 would have been downloaded. • To download a specific PTF: – suma –x –a RqType=PTF –a FilterML=6100-06 –a RqName=U836082 • Note: This example will utilize SUMA task defaults, as displayed by suma -D, for any Field=Value pair not specified on the command line. • If the PTF is not available for individual download, the following message will be returned: – 0500-058 The update can not be downloaded individually. A TL or SP must be requested.
© Copyright IBM Corporation 2015
27
HTTP GET Fix Level Recommendation Tool (FLRT) Björn Rodén @ IBM Technical University in Cannes, October 2015
• You can use WGET with a search string using the FLRT QUERY URL: http://www14.software.ibm.com/webapp/set2/flrt/query • Examples with one item per command (can be combined): – OSLEVEL 1. wget "http://www14.software.ibm.com/webapp/set2/flrt/query?format=text&sseq6u=5300-11-01-0944" -O OSLEVEL.txt 2. cat OSLEVEL.txt aix~5300-11-01~release~2009.11.04~eosps~2011.11.03 aix~5300-11-01~update~5300-11-08~release~2011.10.21~eosps~2011.11.03 aix~5300-11-01~upgrade~5300-12-08~release~2013.05.31~eosps~2012.04.23 aix~5300-11-01~note~IBM no longer provides new Service Packs for this Technology Level. IBM recommends that you upgrade to a newer Technology Level at your earliest convenience. – IOSLEVEL 1. wget "http://www14.software.ibm.com/webapp/set2/flrt/query?format=text&sgs8jy=2.2.3.10" -O IOSLEVEL.txt 2. cat IOSLEVEL.txt vios~2.1.3.10~release~2010.05.04~eosps~2012.09.30 vios~2.1.3.10~upgrade~2.2.2.2~release~2013.02.20~eosps~2015.10.01
© Copyright IBM Corporation 2015
28
Björn Rodén @ IBM Technical University in Cannes, October 2015
Software level consistency check
29
Software level consistency check – niminv (1/2) Björn Rodén @ IBM Technical University in Cannes, October 2015
• The NIM niminv operations allows system administrators to gather, conglomerate, compare, and download fixes based on installation inventory of NIM objects, providing an easy way to ensure their systems are at an expected level. – Gather installation inventory of several NIM objects. – Conglomerate installation inventory of several NIM objects. – Compare installation inventory of several NIM objects. – Download fixes base on the installation inventory of several NIM objects. • The niminv command can use any NIM object that contains installation information. Examples of such objects include standalone client objects, SPOT objects, lpp_source objects and mksysb objects. • Using the niminv command has the following advantages: – Hardware installation inventory is gathered alongside the software installation inventory. – Data files are saved with a naming convention that is easily recognizable. – All NIM objects that have installation inventory can be used. • To compare installation inventory: – niminv -o invcmp -a targets=object1,object2,... [ -a base=object | any ] [ -a location=path ]
© Copyright IBM Corporation 2015
30
Software level consistency check – niminv (2/2) Björn Rodén @ IBM Technical University in Cannes, October 2015
• Software level consistency check using niminv – invcmp option: Compare installation inventory of several NIM objects
# /usr/sbin/niminv -o invcmp -a targets='aix13,aix19' -a base='aix13' -a location='/tmp/123' Comparison of aix13 to aix13:aix19 saved to /tmp/123/comparison.aix13.aix13:aix19.120426230401. Return Status = SUCCESS # cat /tmp/123/comparison.aix13.aix13:aix19.120426230401 name base 1 -------------------------------------------------- ---------AIX-rpm-7.1.0.1-1 7.1.0.1-1 same ... bos.64bit 7.1.0.1 same bos.acct 7.1.0.0 same bos.adt.base 7.1.0.0 same bos.adt.include 7.1.0.1 same bos.adt.lib 7.1.0.0 same ... bos.rte 7.1.0.1 same ... base 1 2 '-' same
= = = = =
2 ---------same same same same same same same
comparison base = aix13 aix13 aix19 name not in system or resource name at same level in system or resource
http://publib.boulder.ibm.com/infocenter/aix/v7r1/topic/com.ibm.aix.cmds/doc/aixcmds4/niminv.htm © Copyright IBM Corporation 2015
31
Björn Rodén @ IBM Technical University in Cannes, October 2015
Installing from VIOS Virtual Media Respository
32
Installing from VIOS Virtual Media Respository Björn Rodén @ IBM Technical University in Cannes, October 2015
• On Virtual I/O Server – Create a Virtual Media Repository large enough to hold install images • mkrep -sp vmrepvg -size 10G – Create a Virtual Optical image • mkvopt -file /mnt/aix6100-08-01-1245.iso -name aix6100-08-01-1245 -ro – Add a virtual device to AIX partition over a VSCSI adapter • mkvdev -fbo -vadapter vhost0 – Connect repository image with the the virtual device • loadopt -disk aix6100-08-01-1245 -vtd vtopt0 • On HMC activate the partition and start the install – Open a console window to the partition from the HMC, and step through the SMS menus One way to create ISO from MKSYSB: 1. mksysb $PWD/aix5300-12-02-1036.mksysb 2. mkdvd -SRI $PWD -m $PWD/aix5300-12-02-1036.mksysb 3. mv cd_image_* $PWD/aix5300-12-02-1036.iso
http://pic.dhe.ibm.com/infocenter/powersys/v3r1m5/topic/iphcg/iphcgprintthis.htm © Copyright IBM Corporation 2015
33
Adding an AIX partition as NIM client to NIM server Björn Rodén @ IBM Technical University in Cannes, October 2015
• On NIM server – Verify the NIM server is configured with client_reg=yes, if not enable: • nim -o change -a client_reg=yes master • On AIX partition – Verify bos.sysmgt.nim.client is installed • lslpp -l bos.sysmgt.nim.* – Verify AIX partition can communicate with the NIM server • ping <ServerIP> or ssh <ServerIP> etc – Configure the NIM client package using the nimint command, in this example using the partition name as reported by the uname command (assuming interface en0 is the appropriate network): • niminit -a name=$(uname -L|cut -f2 -d" ") -a pif_name=en0 -a master=<ServerIP>
http://publib.boulder.ibm.com/infocenter/aix/v7r1/topic/com.ibm.aix.cmds/doc/aixcmds4/niminit.htm © Copyright IBM Corporation 2015
34
Björn Rodén @ IBM Technical University in Cannes, October 2015
System Software & Firmware
35
IBM Electronic Support Björn Rodén @ IBM Technical University in Cannes, October 2015
http://www-01.ibm.com/support/electronicsupport/ © Copyright IBM Corporation 2015
36
IBM Support Portal Björn Rodén @ IBM Technical University in Cannes, October 2015
http://www-947.ibm.com/support/entry/portal © Copyright IBM Corporation 2015
37
IBM Support Portal > Fix Central Björn Rodén @ IBM Technical University in Cannes, October 2015
http://www-933.ibm.com/support/fixcentral/ © Copyright IBM Corporation 2015
38
Service Strategy Details and Best Practices Björn Rodén @ IBM Technical University in Cannes, October 2015
For more information on Service Strategy Details and Best Practices: http://www14.software.ibm.com/webapp/set2/sas/f/best/home.html © Copyright IBM Corporation 2015
39
Fix Level Recommendation Tool (FLRT) Björn Rodén @ IBM Technical University in Cannes, October 2015
See Fix Level Recommendation Tool (FLRT) web site for cross-product compatibility information and latest fix recommendations: http://www14.software.ibm.com/webapp/set2/flrt/ © Copyright IBM Corporation 2015
40
Fix Level Recommendation Tool – FLRT Lite Björn Rodén @ IBM Technical University in Cannes, October 2015
© Copyright IBM Corporation 2015
41
Minimum NIM master levels for VIOS clients Björn Rodén @ IBM Technical University in Cannes, October 2015
© Copyright IBM Corporation 2015
42
Subscribe to IBM bulletins and notifications Björn Rodén @ IBM Technical University in Cannes, October 2015
•
Regularly review IBM bulletins for software update advisories, High Impact and security issues – My notifications > Power server bulletins –
–
My notifications > Subscribe •
FLASHES
•
TECHNOTES
APAR update subscription
© Copyright IBM Corporation 2015
43
My notifications > Power server bulletins Björn Rodén @ IBM Technical University in Cannes, October 2015
See My notifications web site for information bulletins: http://www14.software.ibm.com/webapp/set2/subscriptions/onvdq © Copyright IBM Corporation 2015
44
My notifications > Subscribe Björn Rodén @ IBM Technical University in Cannes, October 2015
See My notifications web site for information bulletins: https://www-947.ibm.com/systems/support/myview/subscription/css.wss/folders?methodName=listMyFolders © Copyright IBM Corporation 2015
45
APAR update subscription Björn Rodén @ IBM Technical University in Cannes, October 2015
How to subscribe to APAR updates The following options can be used to subscribe for APAR update notification through My Support: 1.
Troubleshooting or APAR category option • •
2.
This option provides notification of new APARs only. When you create a subscription for a product, select Troubleshooting or APAR (Authorized Program Analysis Reports) on the Subscribe tab "Document types". If the APAR option is not available for your product, you can subscribe by using the APAR or Component ID option.
APAR or Component ID option •
After you find a specific APAR document, you can select a subscription option from the Subscribe to this APAR section at the top of the APAR page.
•
Subscription options can include one or both of these selections: –
–
Notify me when this APAR changes Notifications are based on a specific APAR. This option is only available if the APAR is "open" or "closed" with a fix pending. You are notified as the APAR progresses through its lifecycle. Notify me when an APAR for this component changes Notification is based on a component ID and includes all APARs associated with the selected component. If customer need to track changes to every APAR for their product, use this option. You are notified as each APAR progresses through its lifecycle including when a PTF becomes available.
© Copyright IBM Corporation 2015
46
Björn Rodén @ IBM Technical University in Cannes, October 2015
More
47
Maintain configuration compliance with ARTEX Björn Rodén @ IBM Technical University in Cannes, October 2015
• AIX Runtime Expert (ARTEX) checklist profiles in XML – Supported catalogs with the methods, store in LDAP or on filesystem – Profiles referencing catalogs with tunable attribute and value – artexremset command executes artexset command on NIM clients from the NIM master • •
artexdiff can check and compare with the expected checklist profile values artexset can set the tunable attribute to the checklist profile values
– The AIX Runtime Expert fileset artex.base.rte was introduced in AIX 6 Technology Level 4 # cat qdepthChecklist.xml <?xml version="1.0" encoding="UTF-8"?> <Profile origin="reference" version="1.0"> <Catalog id="qdepthCatalog" version="1.0"> <Parameter name="queue_depth" value="20" setDiscover="true"> <Target class="" instance=""/> </Parameter> </Catalog> </Profile> # artexset -d qdepthChecklist.xml
Actual Expected # artexdiff -rcf txt systemTunablesChecklist.xml noParam:tcp_fastlo 1 | 0 noParam:udp_recvspace 655360 | 42080 noParam:udp_sendspace 65536 | 9216 vmoParam:vmm_mpsize_support 1 | 2 iooParam:lvm_bufcnt 16 | 9 iooParam:pv_min_pbuf 1024 | 512 iooParam:j2_dynamicBufferPreallocation 256 | 16 iooParam:j2_nBufferPerPagerDevice 1024 | 512 © Copyright IBM Corporation 2015
48
AIX 7.2 Live Update for iFixes using NIM Björn Rodén @ IBM Technical University in Cannes, October 2015
• Using NIM master to perform AIX 7.2 Live Update for iFixes • Using NIM live_update_data resource lvup – nim-o cust-a live_update=yes -a live_update_data=lvup-a lpp_source=lpp7200 -a fileset=IZ12345.140806.epkg.Z client1 • Using the client’s /var/adm/ras/liveupdate/lvupdate.datafile – nim-o cust-a live_update=yes -a fileset=IZ12345.140806.epkg.Z client1
© Copyright IBM Corporation 2015
49
PowerVM Provisioning Toolkit Björn Rodén @ IBM Technical University in Cannes, October 2015
• Accelerate deployment of AIX partitions and Virtual I/O Servers for Power Systems through seamless integration with PowerVM and IBM virtualization interfaces • Integrated with NIM master server
http://www-01.ibm.com/common/ssi/cgi-bin/ssialias?infotype=PM&subtype=SP&htmlfid=QLS12349USEN © Copyright IBM Corporation 2015
50
References and further reading Björn Rodén @ IBM Technical University in Cannes, October 2015
• Knowledge Center – http://www-01.ibm.com/support/knowledgecenter/ssw_aix_71/com.ibm.aix.install/nim_intro.htm – http://www-01.ibm.com/support/knowledgecenter/ssw_aix_71/com.ibm.aix.install/insgdrf_whatsnew.htm
• NIM from A to Z Redbook (oldie but goldie) – http://www.redbooks.ibm.com/abstracts/sg247296.html
• YouTube – http://www.youtube.com/user/IBMSLST – http://www.youtube.com/watch?v=6md1g05oCnQ
• DeveloperWorks – http://www.ibm.com/developerworks/aix/library/
© Copyright IBM Corporation 2015
51
Thank you – Tack ! Björn Rodén @ IBM Technical University in Cannes, October 2015
Björn Rodén roden@ae.ibm.com http://www.linkedin.com/in/roden © Copyright IBM Corporation 2015
52
Continue growing your IBM skills Björn Rodén @ IBM Technical University in Cannes, October 2015
ibm.com/training provides a comprehensive portfolio of skills and career accelerators that are designed to meet all your training needs.
• Training in cities local to you - where and when you need it, and in the format you want – Use IBM Training Search to locate public training classes near to you with our five Global Training Providers – Private training is also available with our Global Training Providers
• Demanding a high standard of quality – view the paths to success – Browse Training Paths and Certifications to find the course that is right for you
• If you can’t find the training that is right for you with our Global Training Providers, we can help. – Contact IBM Training at dpmc@us.ibm.com
Global Skills Initiative
© Copyright IBM Corporation 2015 53
Björn Rodén @ IBM Technical University in Cannes, October 2015
IBM Systems Lab Services and Training
© Copyright IBM Corporation 2015
54