Hallo, dies ist ein Test.

PWD: /www/data-lst1/unixsoft/unixsoft/kaempfer/.public_html

Running in File Mode
Relative path: ././../../../../../../usr/man/man8/spliceadm.8
Real path: /usr/share/man/man8/spliceadm.8
Zurück

'\" te .\" Copyright (c) 2015, 2017, Oracle and/or its affiliates. All rights reserved. .TH spliceadm 8 "27 Nov 2017" "Oracle Solaris 11.4" "System Administration Commands" .SH NAME spliceadm \- administer splice state .SH SYNOPSIS .LP .nf spliceadm status [-c] [[-p]-o <\fIfield1\fR>,...] [all|<\fIid\fR>] spliceadm freeze [-qnN] [<\fIid\fR>] spliceadm unfreeze [-qnN] spliceadm sync [-L] spliceadm apply [-vL] <\fIkid\fR> spliceadm reverse [-vL] <\fIkid\fR> spliceadm clear spliceadm log [-vDp] .fi .SH DESCRIPTION .sp .LP The \fBspliceadm\fR utility is used to query and administer system splice state. Splices are fixes for specific bugs that can be applied on a live system. .SH SUB-COMMANDS .sp .ne 2 .mk .na \fB\fBstatus\fR [\fB-c\fR] [[\fB-p\fR]\fB-o\fR <\fIfield1\fR>,...] [\fBall\fR|<\fIid\fR>]\fR .ad .br .sp .6 .RS 4n Shows the current state of all the installed splices or an individual splice. .sp Associated CVE and BUGID information is displayed by status. \fB"NA"\fR is displayed if such information is not available. .sp .sp .in +2 .nf # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 applied NA 43219865 1003 faulted CVE-1111-4321 56894321 1004 not-applied CVE-1111-4321 43215689 .fi .in -2 .sp When the \fBspliceadm status\fR subcommand is invoked with the \fB-c\fR option, the system configuration is displayed. The system configuration includes the value of the version lock, that is, the value set by \fBspliceadm freeze\fR or \fBspliceadm unfreeze\fR subcommand. It also displays the state of the \fBsvc:/system/splice:default\fR service. .sp .sp .in +2 .nf # \fBspliceadm status -c\fR PROPERTY VALUE version_lock off service_state online .fi .in -2 .sp The \fB-p\fR option produces machine parsable output in both the cases. The \fB-o\fR option allows to select what field(s) to be printed out. When parsable output (\fB-p\fR) is requested, the \fB-o\fR option is mandatory. .sp It is recommended for scripts to use the \fB-p\fR option. The \fB-p\fR option will retry in a loop if the kernel resource is unavailable. Without the \fB-p\fR switch, status immediately returns a failure which is more useful in the interactive case. .sp .sp .in +2 .nf # \fBspliceadm status -p -o id,state,cve,bugid\fR 1000:applied:CVE-1111-1234:12345689 1001:applied:NA:43219865 1003:faulted:CVE-1111-4321:56894321 1004:not-applied:CVE-1111-4321:43215689 # \fBspliceadm status -cp -o property,value\fR version_lock:off service_state:online .fi .in -2 .sp A splice can be in any one of the following states: .sp .ne 2 .mk .na \fB\fBapplied\fR\fR .ad .RS 19n .rt The splice is applied. .RE .sp .ne 2 .mk .na \fB\fBnot-applied\fR\fR .ad .RS 19n .rt The splice is not applied, but delivered on disk. .RE .sp .ne 2 .mk .na \fB\fBexcluded\fR\fR .ad .RS 19n .rt The splice is not applied because it has an <\fIid\fR> larger than the version lock set on the system. .RE .sp .ne 2 .mk .na \fB\fBfaulted\fR\fR .ad .RS 19n .rt The splice is not applied because it has an <\fIid\fR> larger than the largest <\fIid\fR> that can be safely applied on the system. .RE .sp .ne 2 .mk .na \fB\fBevaluating\fR\fR .ad .RS 19n .rt The splice is applied beyond the largest <\fIid\fR> that can be safely applied on the system. A splice is in this state after it is applied and before the timeout expires. .RE .sp .ne 2 .mk .na \fB\fBpending-removal\fR\fR .ad .RS 19n .rt The splice is applied beyond the version lock. This can happen when version lock is set to a lower level by using \fBspliceadm freeze\fR with the "-N" switch. .RE .RE .sp .ne 2 .mk .na \fB\fBfreeze\fR [\fB-qnN\fR] [<\fIid\fR>]\fR .ad .br .sp .6 .RS 4n Locks and brings the system to a specific splice version. When invoked with the \fB-N\fR option, the version lock is set, but the system is left at the current splice level. When the \fB-n\fR option is specified, the command is run but no operations are actually performed. .sp .sp .in +2 .nf # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 applied NA 43219865 1003 excluded CVE-1111-4321 56894321 # \fBspliceadm freeze 1000\fR List of splices that will be reversed ID CVE BUGID 1001 NA 43219865 # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 excluded NA 43219865 1003 excluded CVE-1111-4321 56894321 .fi .in -2 .sp The freeze subcommand supports the following keywords: .sp .sp .ne 2 .mk .na \fB\fBcurrent\fR\fR .ad .RS 11n .rt Locks the system at the current splice level. .RE .sp .ne 2 .mk .na \fB\fBnext\fR\fR .ad .RS 11n .rt Locks the system at the next splice level and applies the next splice. .RE .sp .ne 2 .mk .na \fB\fBlatest\fR\fR .ad .RS 11n .rt Locks the system at the latest delivered splice on disk and applies all the splices including the latest splice in order. .RE .sp .in +2 .nf # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 not-applied NA 43219865 1003 not-applied CVE-1111-4321 56894321 # \fBspliceadm freeze current\fR # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 excluded NA 43219865 1003 excluded CVE-1111-4321 56894321 # \fBspliceadm freeze next\fR List of splices that will be applied ID CVE BUGID 1001 NA 43219865 # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 applied NA 43219865 1003 excluded CVE-1111-4321 56894321 # \fBspliceadm freeze latest\fR List of splices that will be applied ID CVE BUGID 1003 CVE-1111-4321 56894321 # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 applied NA 43219865 1003 applied CVE-1111-4321 56894321 .fi .in -2 .sp The \fB-n\fR switch runs the command but not does perform any actual operations. In other words, it can be used to perform a preview. .sp The \fB-N\fR switch helps in case of a splice that misbehaves on reverse. By skipping the reverse step, it is possible to lock the version and reboot without having to actually reverse the splice. .sp Note that \fB-N\fR does not prevent further unrelated operations to act on the configuration itself, but disables the reverse/apply steps involved with the current invocation of \fBspliceadm freeze\fR subcommand. .sp The \fB-q\fR switch may be used to suppress the output. .RE .sp .ne 2 .mk .na \fB\fBunfreeze\fR [\fB-qnN\fR]\fR .ad .br .sp .6 .RS 4n Unlocks the system from a specific splice version. All splices installed on the system are applied, unless \fB-n\fR or \fB-N\fR is specified, and further splice installations will automatically update the system. For example: .sp .sp .in +2 .nf # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 applied NA 43219865 1003 excluded CVE-1111-4321 56894321 # \fBspliceadm unfreeze\fR List of splices that will be applied ID CVE BUGID 1003 CVE-1111-4321 56894321 # \fBspliceadm status\fR ID STATE CVE BUGID 1000 applied CVE-1111-1234 12345689 1001 applied NA 43219865 1003 applied CVE-1111-4321 56894321 .fi .in -2 .sp The \fB-n\fR switch runs the command but not does perform any actual operations. In other words, it can be used to perform a preview. .sp The \fB-N\fR switch helps in the case where the user wants all the splices to be applied on reboot. By skipping the reverse step, it is possible to lock the version and reboot without having to actually apply the splice. .sp The \fB-q\fR switch may be used to suppress the output. .RE .sp .ne 2 .mk .na \fB\fBsync\fR [\fB-L\fR]\fR .ad .br .sp .6 .RS 4n Brings the system to the splice level identified by the intersection of: .sp .RS +4 .TP .ie t \(bu .el o the list of splices currently installed on the system .RE .RS +4 .TP .ie t \(bu .el o the list of splices currently applied to the system .RE .RS +4 .TP .ie t \(bu .el o the upper limit imposed by the system configuration, for example, any imposed version lock through \fBspliceadm freeze\fR .RE This subcommand is primarily and solely consumed by the splice system service and by default prints the operation log to \fBstderr\fR, so that it gets captured by the service log. .sp The \fB-L\fR option prevents printing the kernel splice transaction log to \fBstderr\fR. .RE .sp .ne 2 .mk .na \fB\fBapply\fR [\fB-vL\fR] <\fIkid\fR>\fR .ad .br .sp .6 .RS 4n Applies a specific splice, as identified by <\fIkid\fR>. Version locks are honored when manually applying splices. Splices must be applied in increasing order. .sp If the <\fIkid\fR> of the splice being applied is higher than the splice level, then the system is locked and the splice is deemed to be excluded. Use the \fBspliceadm unfreeze\fR command to unlock the splice level and apply the splice. For example: .sp .sp .in +2 .nf # \fBspliceadm apply 1003\fR Failed to apply splice 1003. Use spliceadm unfreeze to allow this splice to be applied. .fi .in -2 .sp If the <\fIkid\fR> of the splice being applied is higher than the largest <\fIkid\fR> that can safely run on the system, then the splice is deemed to be faulted. To apply the splice, use \fBspliceadm clear\fR command after fixing the problem with the splice. For example: .sp .sp .in +2 .nf # \fBspliceadm apply 1003\fR Failed to apply splice 1003. This splice caused a fault in a previous apply attempt and is blocked from being applied. If the problem has been fixed, use spliceadm clear to allow this splice to be applied. .fi .in -2 .sp Note that the \fBapply\fR subcommand is intended for debugging and testing purposes. Users should use the \fBunfreeze\fR and \fBfreeze\fR subcommands for applying and reversing splices. .sp The \fB-L\fR option prevents printing the kernel splice transaction log to \fBstderr\fR. .sp The \fB-v\fR option prints verbose log to \fBstderr\fR. .RE .sp .ne 2 .mk .na \fB\fBreverse\fR [\fB-vL\fR] <\fIkid\fR>\fR .ad .br .sp .6 .RS 4n Reverses a specific splice, as identified by <\fIkid\fR>. Splices must be reversed in decreasing order, from the one with the highest <\fIkid\fR> to the one with the lowest. .sp Note that the \fBreverse\fR subcommand is intended for debugging and testing purposes. Users should use the \fBunfreeze\fR and \fBfreeze\fR subcommands for applying and reversing splices. .sp The \fB-L\fR option prevents printing the kernel splice transaction log to \fBstderr\fR. .sp The \fB-v\fR option prints verbose log to \fBstderr\fR. .RE .sp .ne 2 .mk .na \fB\fBlog\fR [\fB-vDp\fR]\fR .ad .br .sp .6 .RS 4n Retrieves and prints the summary from the previous splice operation. The \fB-v\fR option prints verbose log from the previous splice operation to \fBstderr\fR. The \fB-D\fR option prints the entire framework log to \fBstderr\fR. The \fB-p\fR option produces a list of patched functions in machine parsable format after a successful splice application. The \fB-p\fR option can be used only after a successful splice operation and cannot be used with other options. .RE .sp .ne 2 .mk .na \fB\fBclear\fR\fR .ad .br .sp .6 .RS 4n Clears splice application errors and tries to bring the system up to the configured splice level. \fBspliceadm clear\fR should be used by an administrator after fixing problems with an unsuccessful splice application. .RE .SH ATTRIBUTES .sp .LP See \fBattributes\fR(7) for descriptions of the following attributes: .sp .TS tab( ) box; cw(2.75i) |cw(2.75i) lw(2.75i) |lw(2.75i) . ATTRIBUTE TYPE ATTRIBUTE VALUE _ Availability system/ksplice _ Interface Stability Committed .TE .sp .SH SEE ALSO .sp .LP \fBpkg\fR(7) .SH NOTES .sp .LP If the running system kernel is being examined through the use of \fBmdb\fR(1), then the commands to apply, reverse, or sync splices will hang until the \fBmdb\fR session has been terminated. .sp .LP If the \fBsvc:/system/splice:default\fR is in the degraded state, there are splice(s) available on disk which have not been applied yet. Splices can be constrained either by the splice version lock or by the splice safety threshold. If constrained by the version lock, use the \fBspliceadm unfreeze\fR command, and if constrained by the safety threshold, use the \fBspliceadm clear\fR command.