Suma

Update your AIX system with SUMA

Summary:  Learn how the Service Update Management Assistant (SUMA), a feature first introduced in AIX 5L™ Version 5.3, automates the update process for AIX® systems. We'll also examine issues surrounding AIX updates and how to implement specific steps to overcome them.

Date:  17 Nov 2006 (Published 10 Feb 2005)
 

Introduction

There are several articles on IBM sites devoted to SUMA.

• "AIX updates Version 3: How to work the puzzle", you learned how to address uncertainties relating to the AIX® update process.

With the release of AIX 5L™ Version 5.3, the Service Update Management Assistant (SUMA), a new feature, now allows you to automate the update process.

This Service Strategy also introduced the concepts of Service Pack (SP) and Concluding Service Pack (CSP). For detailed descriptions of these terminologies, refer to the AIX 5L Service Strategy and Best Practices document.

Where do I find the latest AIX fixes?

You can get the latest AIX fixes through SUMA. However, we do not recommend that you install the latest fixes. Instead, we recommend that you install the latest TL or SP, since these are tested as a unit and they go through a longer test cycle.

Can I get a list of fixes released after the latest maintenance package?

Yes. The suma  command can generate a list or download the filesets automatically. For example, you wish to generate a list of filesets that have been released since ML 5200-08. In addition, you want to run the suma  command on your AIX 5L Version 5.3 system. To make it work, you might run the following suma  command, making sure to set the option FilterSysFile=/dev/null, so that it won't filter against the software inventory of the system that you are running on. In this example, if the suma  command were run with the FilterSysFile  field having its default value of localhost, no Version 5.2 fixes would be reported, because the suma  command would see that the system was already at the Version 5.3 level.

 suma -x -a Action=Preview  -a RqType=Latest  -a FilterML=5200-08 \
            -a FilterSysFile=/dev/null

 

How do I create and schedule a task that downloads the latest security fixes monthly (for example, on the 15th of every month at 2:30 AM)?

You might type the following command:

suma -s "30 2 15 * *"  -a RqType=Security \
            -a DisplayName="Security fixes - 15th Monthly"

The scheduling information is in crontab format. For more information on the crontab  command, please refer to the crontab command reference. The system returns a task ID for this newly created task. This example utilizes the SUMA task defaults, as displayed by suma -D. For example, the installp images download into the /usr/sys/inst.images/installp/ppc directory when the task default is DLTarget=/usr/sys/inst.images.

How do I create and schedule a task that checks for a specific authorized program analysis report (APAR) once a week (for example, every Thursday at 3:00 AM), download it when it becomes available, and send e-mail notifications to users on a remote system?

You might type the following command:

 suma -s "0 3 * * 4" -a RqType=APAR -a RqName=IY12345 \
             -a  NotifyEmail="bob.smith@host2,ann@host2" -a Repeats=y

You need to set the Repeats field to y in order for the system to make weekly checks for an APAR. After the system finds the APAR, the system deletes the task. If Repeats=n, only a single check would occur before deleting the task.

How do I create and schedule a task that would check monthly for a TL release (for example, on the 15th of every month at 2:30 AM)?

You might type the following command:

suma –s "30 2 15 * *" –a Action=Preview –a RqType=ML –a RqName=5300-04 \
	  –a FilterML=5300-03 –a NotifyEmail="bob.smith@host3"

An email notification will be sent with the results of the check.

This command performs a Preview (no download will occur) to check if TL 5300-04 has been released. The FilterML setting specifies that the client already has filesets in the 5300-03 level.

If 5300-04 has been released, the notification email will contain the list of filesets in TL 5300-04 that would be available for preview. If 5300-04 is not yet available, the email notification will contain a message similar to "Invalid requested ML level:V530004".

You might elect to automatically download the filesets in this TL by setting Action equal to "Download" instead of "Preview". In this case, the filesets will only be downloaded, and no installation will occur.

How do I create and schedule a task that would check weekly for a new SP release (for example, every Thursday at 3:00 AM)?

You might type the following command:

suma –s "0 3 * * 4" –a Action=Download –a RqType=SP –a RqName=5300-04-01 \  
            –a FilterML=5300-04 –a NotifyEmail="bob.smith@host3"

 

An email notification indicating whether a new SP has been released will be sent.

This command will automatically download Technology Level 5300-04, Service Pack 1, when it becomes available. The FilterML setting specifies that the client already has filesets in the 5300-04 level.

How do I create and schedule a task that would check monthly for a CSP release (for example, on the 15th of every month at 2:30 AM)?

You might type the following command:

suma –s "30 2 15 * *" –a Action=Preview –a RqType=SP –a RqName=5300-04-CSP \
             –a FilterML=5300-04 –a NotifyEmail="bob.smith@host3" –a \
             DLTarget=/tmp/530004

 

An email notification will be sent with the results of the check.

You might elect to automatically download the filesets in this CSP by setting Action equal to "Download'" instead of "Preview". In this case, the filesets will only be downloaded, and no installation will occur.

The above suma  command will return a SUMA task ID that might later be used to perform an immediate download of a schedule task. For example, the following command could be used to immediately download the 5300-04-CSP that had the Preview action scheduled above to check for its release. (Assumes task ID of 4 was returned.)

suma –x –a Action=Download 4

 

The following SUMA features have been implemented in the 5300-05 Technology Level, released in August, 2006:

• Command Line support for TL (Technology Level) types:

  To download a specific TL immediately:

  	suma -x -a RqType=TL -a RqName=5300-04
  	

  
   

  Command Line support for SP and CSP were introduced in 5300-04 Technology Level.

• SMIT Support for TL and SP types. From SMIT, select:
  • Software Installation and Maintenance
  • Software Maintenance and Utilities
  • Service Update Management Assistant (SUMA)
  • Download Updates Now (Easy)

  Or:

  	fastpath smit suma_easy
  	

  
   
• New RqLevel Support

  When RqType equals APAR, Security, Critical, or Latest, an optional RqLevel might be specified (for example, 5300-04) to request fixes on the specified TL without requiring a move to the next TL (for example, 5300-05).

  To download an APAR without requiring a move to the 5300-05 TL (APAR will be released at both TL4 and TL5 levels):

  suma -x -a RqType=APAR -a RqName=IY12345 -a RqLevel=5300-04
  	

  
   

  Note: APAR might first be released with 5300-05 at the 5.3.0.50 level. Later it might be released with 5300-04-CSP at the 5.3.0.48 level.

  Some features of SUMA and NIM have been integrated. These features provide the following:

  • SUMA can filter against an lpp_source
  • /usr/sbin/compare_report can accept an lpp_source
  • /usr/sbin/geninv: new command to gather inventory
  • /usr/sbin/niminv: new command to gather, compare and conglomerate inventory and download fixes based on NIM objects

   

SUMA and compare_report with NIM lpp_source

suma -a FilterDir=<value>
suma -a DLTarget=<value>

 

When running on a NIM master, <value> can be an lpp_source name. SUMA will filter and download only fixes that are not existent in the lpp_source. The functionality is the same as before. It is now integrated to the NIM lpp_source lexicon.

compare_report -i <FixDir>

 

When running on a NIM master, <FixDir> can be an lpp_source name. compare_report will consider the installation images in the lpp_source when doing comparisons.

What does /usr/sbin/geninv do?

The geninv  ("generic inventory") command gathers software and hardware installation version inventory from systems.

Software invetory coverage:

1. Installp
2. RPM (RedHat Package Manager)
3. ISMP (Install Shield Multi-Platform)
4. Emergency and interim fixes

 

Hardware inventory coverage:

1. System Firmware
2. Adapter/Component Microcode that can be upgraded

 

What does /usr/sbin/niminv do?

The niminv  command gathers, compares and conglomerates software and, if applicable, hardware installation version inventory from NIM objects. It also downloads fixes based on the conglomerated Inventory.

NIM Object coverage:

1. master and standalone (hardware and software)
2. mksysb (software only)
3. SPOT (software only)
4. lpp_source (software only)

 

This command is accessible through the SMIT NIM subpanel "Installation Inventory" (fastpath: smit nim_inventory).

How do I find out more about the suma command?

SUMA moves you away from the manual task of retrieving maintenance updates from the Web. It's included in the AIX 5L Version 5.3 operating system. It's also available for AIX 5L Version 5.1 as APAR IY61456 and AIX 5L Version 5.2 as APAR IY64254. SUMA provides you with flexible, policy-based options, allowing you to perform unattended downloads of all AIX 5L updates from the Quick links for AIX fixes Web site. It also automates common tasks, such as downloading a specific APAR when it becomes available, downloading the latest security updates, or downloading an entire maintenance level. You can utilize a scheduling module that runs policies at various intervals in order to conform to your particular maintenance window. You can run SUMA policies without extensive configuration. Filtering options allow comparisons against current software inventory, a fix repository, or a maintenance level to ensure you only download desired fixes. SUMA provides the option to send an e-mail notification containing a list of what's available for download, as well as detailed summary statistics of a download. It supports HTTP, HTTPS, and FTP transfer protocols and proxy servers.

The technology offered by SUMA assists in moving clients toward an autonomic maintenance strategy by automating the download of software maintenance updates, which allows clients to take advantage of the increased security and reliability benefits of having current fixes, and the cost benefits which result from spending less time on system administration.

Recommended Links

IBM AIX - Service Update Management Assistant (SUMA) on AIX 5L

• For a number of practical examples of how you can use the suma command to your benefit, please refer to IBM AIX Operating System Service Strategy Details and Best Practices (139KB)
   
• You can also find information on SUMA at the following links:
  • SUMA on AIX 5L
     
• Read "AIX updates Version 3: How to work the puzzle" (developerWorks, April 2006), to find answers to your questions regarding AIX updates.
   
• Get updates to AIX 5L at the Quick links for AIX fixes site.
   
• Access AIX 5L documentation at the IBM eServer™ pSeries® and AIX Information Center.
   
• Get more information on:
  • suma command reference
  • crontab command reference
     
• Visit the Solutions development for IBM Systems for AIX development support.
  
   
• The AIX and UNIX® developerWorks zone provides a wealth of information relating to all aspects of AIX systems administration and expanding your UNIX skills.
  
   
• New to AIX and UNIX: Visit the New to AIX and UNIX page to learn more about AIX and UNIX.
  
   
• developerWorks technical events and webcasts: Stay current with developerWorks technical events and webcasts.
  
   
• AIX 5L Wiki: A collaborative environment for technical information related to AIX.
  
   
• AIX documentation

   

  The information in this section provides documentation for AIX 5L™ Version 5.3 operating system. You will find both PDF and HTML versions of the documentation in this section.
  • Notices
    AIX documentation legal notices and copyright information
  • AIX PDFs
    This topic contains links to PDFs of the AIX documentation.
  • Commands reference
    This topic contains links to information about the AIX commands, including syntax statements, flag descriptions, and usage examples. Commands are listed alphabetically and categorically.
  • Files reference
    This topic contains information about AIX files for experienced programmers. Files are listed alphabetically.
  • How-to's
    This topic contains links to step-by-step information for completing user and administrator tasks.
  • Networks and communication
    This topic contains links to information about networking your AIX system and communicating with your AIX system.
  • Performance management and tuning
    This topic contains links to information about managing and tuning the performance of your AIX system.
  • Product and application documentation
    This topic contains links to information about the graPHIGS Programming Interface.
  • Programming for AIX
    This topic contains links to information about programming your AIX system, including some command information, diagnostic information, and kernel information.
  • System management
    This topic contains links to information about managing your AIX system, including communication information, networking information, and general conceptual information about AIX.
  • Technical reference
    This topic contains links to information about AIX runtime services for experienced C programmers, and reference information for keyboard layouts and translation tables.
  • Glossary
    This topic contains AIX-specific definition information for terms used in AIX documentation.
  
   
  • (1 - 10 of 431 search results) View all search results

    AIX updates Version 3: How to work the puzzle

    Perhaps no other aspect of AIX(R) generates as much confusion as AIX updates. AIX users constantly struggle with questions, such as: What's a program temporary fix (PTF)? What's an authorized program analysis report (APAR)? Am I running the latest Maintenance Level (ML) or Technology Level (TL)? What is the latest ML or TL? By understanding the answers to these questions, you learn how to discover, install, and use AIX updates.

    Installing technology levels and service packs for AIX

    One of the critical questions AIX systems administrators have to deal with is when to upgrade their systems. This article looks at some of the issues surrounding upgrades such as when and how systems administrators should deploy upgrades as well as methods for retrieving and performing updates. Learn some of the recent changes and best practices regarding the deployment of technology levels and service packs for AIX.

    Storage Management in AIX 5L Version 5.3

    AIX 5L(TM) Version 5.3 has incorporated a number of features that make it functionally much more powerful than prior releases of the operating system. IBM(R) consultant Shiv Dutta focuses on some of the features that have been introduced in AIX 5L Version 5.3 to enhance the scope, functionality, and performance of the Logical Volume Manager (LVM) and Enhanced Journal File System (JFS2).

    AIX 5L LDAP user management

    Get an overview of the Lightweight Directory Access Protocol- (LDAP) related enhancements in the AIX 5L(TM) operating system V5.3 TL5 update. Some of the enhancements include support for Active Directory, multiple base distinguished (DN) support, and extended base DN format.

    Update your AIX system with SUMA

    Learn how the Service Update Management Assistant (SUMA), a feature first introduced in AIX 5L(TM) Version 5.3, automates the update process for AIX(R) systems. We'll also examine issues surrounding AIX updates and how to implement specific steps to overcome them.

    Redbooks - Service Level Management Using IBM Tivoli Service Level Advisor and Tivoli Business Systems Manager

    Managing IT costs requires repeatable and measurable processes such as the best practices for service level management (SLM) documented in the IT Infrastructure Library (ITIL). Central to the ITIL best practices are the service management processes. These are subdivided into the core areas of service support and service delivery. This IBM Redbook takes a top-down approach that starts from the business requirement to improve service management. This includes the need to align IT services with the needs of the business, to improve the quality of the IT services delivered, and to reduce the long-term cost of service provision. It focuses on how clients accomplish this by implementing SLM processes supported by IBM Tivoli Service Level Advisor and IBM Tivoli Business Systems Manager. For IT managers and technical staff who are responsible for providing services to their customers, use this IBM Redbook as a practical guide to SLM with IBM Tivoli products. It takes you from a general outline of SLM to specific implementation examples of banking and trading that incorporate the Tivoli monitoring products.

    Redpaper - IBM DB2 9 on AIX 5L with NFS, iSCSI, and FCP using IBM System Storage N series

    Currently, Ethernet bandwidth is eclipsing Fibre Channel and the cost of Ethernet is becoming more affordable than Fibre Channel. One question that has arisen is how NFS and iSCSI perform in comparison to FCP. This IBM Redpaper provides a performance comparison and tuning recommendations for three different transport protocols, FCP, iSCSI, and NFS, when IBM DB2 V9 and AIX 5L 5.3 TL-04 are run on a 2-way IBM System p5 520 server using an IBM System Storage N5500. An online transaction processing (OLTP) workload was used to study the performance.

    Redbooks - AIX 5L Differences Guide Version 5.3 Addendum

    This IBM Redbooks publication focuses on the differences introduced in AIX 5L Version 5.3 since the initial AIX 5L Version 5.3 release. It is intended to help system administrators, developers, and users understand these enhancements and evaluate potential benefits in their own environments. Since AIX 5L Version 5.3 was introduced, many new features including JFS2, LDAP, trace and debug, installation and migration, NFSv4, and performance tools enhancements were introduced. There are many other improvements offered through updates for AIX 5L Version 5.3, and you can explore them in this book. For clients who are not familiar with the base enhancements of AIX 5L Version 5.3, a companion publication, AIX 5L Differences Guide Version 5.3 Edition, SG24-7463, is available.

    Redbooks - AIX V6 Advanced Security Features Introduction and Configuration

    AIX Version 6.1 provides many significant new security technologies and security enhancements. The purpose of this IBM Redbooks publication is to highlight and explain the security features at the conceptual level, as well as provide practical examples of how they may be implemented. Some features are extensions of features made available in prior AIX releases, and some are new features introduced with AIX V6. Major new security enhancements will be introduced with AIX V6 in 2007: - Trusted AIX (Multilevel Security) - Role Based Access Control (RBAC) - Encrypted File System - Trusted Execution - AIX Security Expert Enhancements This IBM Redbooks publication will provide a technical introduction to these new enhancements. The topics are both broad and very complex. This book will serve as an initial effort in describing all of the enhancements together in a single volume to the security/system hardening oriented audience.

    Understanding advanced AIX features: MLS in simple steps

    If you feel that the new features of AIX like RBAC and MLS are too confusing, this article will help you to understand the features in simple terms and with examples. This article is part two of a series.

Etc

Society

Groupthink : Two Party System as Polyarchy : Corruption of Regulators : Bureaucracies : Understanding Micromanagers and Control Freaks : Toxic Managers :   Harvard Mafia : Diplomatic Communication : Surviving a Bad Performance Review : Insufficient Retirement Funds as Immanent Problem of Neoliberal Regime : PseudoScience : Who Rules America : Neoliberalism  : The Iron Law of Oligarchy : Libertarian Philosophy

Quotes

War and Peace : Skeptical Finance : John Kenneth Galbraith :Talleyrand : Oscar Wilde : Otto Von Bismarck : Keynes : George Carlin : Skeptics : Propaganda  : SE quotes : Language Design and Programming Quotes : Random IT-related quotes :  Somerset Maugham : Marcus Aurelius : Kurt Vonnegut : Eric Hoffer : Winston Churchill : Napoleon Bonaparte : Ambrose Bierce :  Bernard Shaw : Mark Twain Quotes

Bulletin:

Vol 25, No.12 (December, 2013) Rational Fools vs. Efficient Crooks The efficient markets hypothesis : Political Skeptic Bulletin, 2013 : Unemployment Bulletin, 2010 :  Vol 23, No.10 (October, 2011) An observation about corporate security departments : Slightly Skeptical Euromaydan Chronicles, June 2014 : Greenspan legacy bulletin, 2008 : Vol 25, No.10 (October, 2013) Cryptolocker Trojan (Win32/Crilock.A) : Vol 25, No.08 (August, 2013) Cloud providers as intelligence collection hubs : Financial Humor Bulletin, 2010 : Inequality Bulletin, 2009 : Financial Humor Bulletin, 2008 : Copyleft Problems Bulletin, 2004 : Financial Humor Bulletin, 2011 : Energy Bulletin, 2010 : Malware Protection Bulletin, 2010 : Vol 26, No.1 (January, 2013) Object-Oriented Cult : Political Skeptic Bulletin, 2011 : Vol 23, No.11 (November, 2011) Softpanorama classification of sysadmin horror stories : Vol 25, No.05 (May, 2013) Corporate bullshit as a communication method  : Vol 25, No.06 (June, 2013) A Note on the Relationship of Brooks Law and Conway Law

History:

Fifty glorious years (1950-2000): the triumph of the US computer engineering : Donald Knuth : TAoCP and its Influence of Computer Science : Richard Stallman : Linus Torvalds  : Larry Wall  : John K. Ousterhout : CTSS : Multix OS Unix History : Unix shell history : VI editor : History of pipes concept : Solaris : MS DOS :  Programming Languages History : PL/1 : Simula 67 : C : History of GCC development :  Scripting Languages : Perl history   : OS History : Mail : DNS : SSH : CPU Instruction Sets : SPARC systems 1987-2006 : Norton Commander : Norton Utilities : Norton Ghost : Frontpage history : Malware Defense History : GNU Screen : OSS early history

Classic books:

The Peter Principle : Parkinson Law : 1984 : The Mythical Man-Month :  How to Solve It by George Polya : The Art of Computer Programming : The Elements of Programming Style : The Unix Hater’s Handbook : The Jargon file : The True Believer : Programming Pearls : The Good Soldier Svejk : The Power Elite

Most popular humor pages:

Manifest of the Softpanorama IT Slacker Society : Ten Commandments of the IT Slackers Society : Computer Humor Collection : BSD Logo Story : The Cuckoo's Egg : IT Slang : C++ Humor : ARE YOU A BBS ADDICT? : The Perl Purity Test : Object oriented programmers of all nations : Financial Humor : Financial Humor Bulletin, 2008 : Financial Humor Bulletin, 2010 : The Most Comprehensive Collection of Editor-related Humor : Programming Language Humor : Goldman Sachs related humor : Greenspan humor : C Humor : Scripting Humor : Real Programmers Humor : Web Humor : GPL-related Humor : OFM Humor : Politically Incorrect Humor : IDS Humor : "Linux Sucks" Humor : Russian Musical Humor : Best Russian Programmer Humor : Microsoft plans to buy Catholic Church : Richard Stallman Related Humor : Admin Humor : Perl-related Humor : Linus Torvalds Related humor : PseudoScience Related Humor : Networking Humor : Shell Humor : Financial Humor Bulletin, 2011 : Financial Humor Bulletin, 2012 : Financial Humor Bulletin, 2013 : Java Humor : Software Engineering Humor : Sun Solaris Related Humor : Education Humor : IBM Humor : Assembler-related Humor : VIM Humor : Computer Viruses Humor : Bright tomorrow is rescheduled to a day after tomorrow : Classic Computer Humor

The Last but not Least Technology is dominated by two types of people: those who understand what they do not manage and those who manage what they do not understand ~Archibald Putt. Ph.D

The statements, views and opinions presented on this web page are those of the author (or referenced source) and are not endorsed by, nor do they necessarily reflect, the opinions of the Softpanorama society. We do not warrant the correctness of the information provided or its fitness for any purpose. The site uses AdSense so you need to be aware of Google privacy policy. You you do not want to be tracked by Google please disable Javascript for this site. This site is perfectly usable without Javascript.

Last modified: March 12, 2019