Patching using Fixlets

You can apply SUSE Linux™ patches to your deployment by using the Fixlets on the Patches for SLE sites.

Before you begin

  • For x86, x86_64, and s390x SUSE patches, register the SCC download plug-in. For more information about the download plug-in, see Using the download plug-in.
  • Subscribe to the appropriate sites.
  • Activate the necessary analysis from the subscribed sites.
  • Ensure that the required compression utilities are installed on the endpoints. The following packages must be installed on the endpoints:
    • zlib
    • zypper
  • Ensure that /var directory is not mounted as noexec to prevent issues during Fixlet deployment.
  • Ensure that the required compression utilities are installed on the endpoints.
    Note: BigFix provides audit Fixlets to help determine whether any of the prerequisite packages, such as zypper, gzip, or bc, are not installed on the endpoints. You can access these audit Fixlets from the Patches for SLE 11 Native Tools and Patches for SLE 12 Native Tools sites.
  • If you are using custom repositories, run the Enable custom repository support - SUSE Linux Enterprise task prior to deploying any Fixlets.
  • You can activate the Endpoint Dependency Resolution - Deployment Results analysis to view the patch deployment results.
  • If you are patching endpoints for SUSE Linux 11 and 12, run the Install expect task (ID #101) to install the expect utility on systems that are configured with the Zypper utility.
    Note: This only applies to the endpoints that do not have the expect utility installed.

About this task

The possible actions that you can make on a Fixlet depend on the patch type. For example, patch Fixlets provide an option to deploy a test run prior to applying the patch. Kernel updates provide the option to upgrade or install all kernel packages. The default behavior for kernel updates is to install packages side by side. Additionally, each kernel update Fixlet provides the ability to test each of these options.
Note: The upgrade option in Kernel updates replaces existing kernel packages with later versions. The install option installs the later kernel packages next to the previous versions.

Procedure

  1. From the Patch Management domain, click OS Vendors > SUSE Linux Enterprise, and navigate to the patch content using the domain nodes.
    Figure 1. Patch Management navigation tree

    Patch Management navigation tree
  2. In the content that is displayed in the list panel, select the Fixlet that you want to deploy. The Fixlet opens in the work area.
  3. Click the tabs at the top of the window to review details about the Fixlet.
  4. Click Take Action to deploy the Fixlet.
    • You can start the deployment process.
      Figure 2. Take action to start the deployment process

      Take action to start the deployment process
    • You can deploy a test run prior to applying the patch. View the Deployment Results analysis to determine if the dependencies have been successfully resolved and if an installation is successful.
      Figure 3. Take action to deploy a test

      Take action to deploy a test
    • You can view the Novell bulletin for a particular Fixlet, select the Click here to view the patch page action to view the patch page.
      Figure 4. Take action to view patch page

      Take action to view patch page
    You can also click the appropriate link in the Actions box.
  5. You can set more parameters in the Take Action dialog.

    For detailed information about setting parameters with the Take Action dialog, see the BigFix Console Operator's Guide.

  6. Click OK.