weblogic 更新补丁流程
1、更新说明
根据oracle官方补丁集安装要求,在为weblogic安装补丁集之前,有以下要求:
1、需要将当前 weblogic 中已经安装的补丁集全部移除;
2、确保所有的 weblogic server 全部停止,(全部的Java进程,包括NodeManager)
3、以下安装步骤中所有指令均用weblogic用户操作。
注:/weblogic/DataBase/Middleware/ 各应用项目的安装部署路径各有差异,在开始打补丁时,需做整体替换。
2、操作流程
2.1 关闭服务
# 进入bin目录,
cd /weblogic/DataBase/Middleware/user_projects/domains/cwjrgk/bin
# 关闭服务有两种方式:
# 1、使用stopWeblogic的方式进行关闭
sh stopWebLogic.sh
# 2、直接kill到PID
lsof -i:7001
ps -ef|grep weblogic
kill -9 PID
2.2 补丁集安装环境准备
安装补丁集采用Weblogic自带的bsu.sh工具,在安装之前需要修改部分参数以满足安装要求。
1、以Weblogic管理用户登录系统,执行一下操作,修改部分内容:
cd /u01/Middleware/utils/bsu
vi bsu.sh
cat bsu.sh
!/bin/sh
JAVA_HOME="/u01/jrockit-jdk1.6.0_45"
MEM_ARGS="-Xms2560m -Xmx2560m" # 修改此行参数
"$JAVA_HOME/bin/java" ${MEM_ARGS} -jar patch-client.jar $*
2、创建补丁包临时目录,执行以下操作:
mkdir -p /weblogic/DataBase/Middleware/utils/bsu/cache_dir
ls -l
total 44
-rw-r--r-- 1 weblogic bea 520 Oct 26 2015 bsu.jar
-rwxr-x--- 1 weblogic bea 138 Oct 26 2015 bsu.sh
drwxr-xr-x 2 weblogic bea 4096 Jan 21 2016 cache_dir
-rw-r--r-- 1 weblogic bea 516 Oct 26 2015 patch-client.jar
-rw-r--r-- 1 weblogic bea 25214 Oct 26 2015 smartupdate.ico
3、将补丁包通过ftp工具上传服务器bsu目录下,并解压到当前目录:
4、授权并执行,该工具可以提高补丁速度
chmod 777 bsu_update.sh
./ bsu_update.sh install
2.3 查看当前Weblogic 已安装的补丁集
1、查看当前系统中的 Weblogic 已安装的补丁集,执行如下操作:
. /weblogic/DataBase/Middleware/wlserver_10.3/server/bin/setWLSEnv.sh
CLASSPATH=/u01/Middleware/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/u01/Middleware/patch_ocp371/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/u01/jrockit-jdk1.6.0_45/lib/tools.jar:/u01/Middleware/wlserver_10.3/server/lib/weblogic_sp.jar:/u01/Middleware/wlserver_10.3/server/lib/weblogic.jar:/u01/Middleware/modules/features/weblogic.server.modules_10.3.6.0.jar:/u01/Middleware/wlserver_10.3/server/lib/webservices.jar:/u01/Middleware/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/u01/Middleware/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar:
PATH=/u01/Middleware/wlserver_10.3/server/bin:/u01/Middleware/modules/org.apache.ant_1.7.1/bin:/u01/jrockit-jdk1.6.0_45/jre/bin:/u01/jrockit-jdk1.6.0_45/bin:/u01/jrockit-jdk1.6.0_45/bin:/usr/lib64/qt-3.3/bin:/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/sbin:/home/weblogic/bin
Your environment has been set.
$ java weblogic.version
WebLogic Server Temporary Patch for BUG22248372 Tue Nov 24 00:35:04 MST 2015
WebLogic Server 10.3.6.0.12 PSU Patch for BUG20780171 THU JUN 18 15:54:42 IST 2015
WebLogic Server 10.3.6.0 Tue Nov 15 08:52:36 PST 2011 1441050
Use 'weblogic.version -verbose' to get subsystem information
Use 'weblogic.utils.Versions' to get version information for all module
cd /weblogic/DataBase/Middleware/utils/bsu/
./bsu.sh -prod_dir=/weblogic/DataBase/Middleware/wlserver_10.3 -status=applied -verbose -view
ProductName: WebLogic Server
ProductVersion: 10.3 MP6
Components: WebLogic Server/Core Application Server,WebLogic Server/Admi
nistration Console,WebLogic Server/Configuration Wizard and
Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve
r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC
Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S
erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S
erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog
ic Server/Evaluation Database,WebLogic Server/Workshop Code
Completion Support
BEAHome: /u01/Middleware
ProductHome: /u01/Middleware/wlserver_10.3
PatchSystemDir: /u01/Middleware/utils/bsu
PatchDir: /u01/Middleware/patch_wls1036
Profile: Default
DownloadDir: /u01/Middleware/utils/bsu/cache_dir
JavaVersion: 1.6.0_29
JavaVendor: Sun
Patch ID: EJUW
PatchContainer: EJUW.jar
Checksum: 1554039558
Severity: optional
Category: General
CR/BUG: 20780171
Restart: true
Description: WLS PATCH SET UPDATE 10.3.6.0.12
WLS PATCH SET UPDATE 10.3.
6.0.12
Patch ID: ZLNA
PatchContainer: ZLNA.jar
Checksum: -894774340
Severity: optional
Category: Security
CR/BUG: 22248372
Restart: true
Description: WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)
WEBLOGIC SERVER CVE-2015-4852 SECURITY ALERT PATCH (NOV 2015)
# 从上面的结果来看,该系统中weblogic的补丁集版本为10.3.6.0.12,包含的补丁有 EJUW 和 ZLNA 两个补丁
# 因此在安装补丁集的时候需要先移除这两个补丁。
2.4 移除当前Weblogic系统中已安装的补丁
根据上一步骤检查出来的Patch ID进行移除工作,如Weblogic系统为安装任何补丁,可直接忽略该步骤。
cd /weblogic/DataBase/Middleware/utils/bsu/
./bsu.sh -remove -patchlist=8K1U -prod_dir=/weblogic/DataBase/Middleware/wlserver_10.3
Checking for conflicts.........
No conflict(s) detected
Removing Patch ID: ZLNA..
Result: Success
./bsu.sh -remove -patchlist=MXLE -prod_dir=/weblogic/DataBase/Middleware/wlserver_10.3
Checking for conflicts.........
No conflict(s) detected
Removing Patch ID: EJUW..
# 整个移除过程时间较长,每移除一个补丁大概需要10分钟左右,且不能同时移除,只能一个一个的移除。
2.5 确认Weblogic系统中补丁集移除情况
./bsu.sh -prod_dir=/weblogic/DataBase/Middleware/wlserver_10.3 -status=applied -verbose -view
ProductName: WebLogic Server
ProductVersion: 10.3 MP6
Components: WebLogic Server/Core Application Server,WebLogic Server/Admi
nistration Console,WebLogic Server/Configuration Wizard and
Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve
r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC
Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S
erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S
erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog
ic Server/Evaluation Database,WebLogic Server/Workshop Code
Completion Support
BEAHome: /u01/Middleware
ProductHome: /u01/Middleware/wlserver_10.3
PatchSystemDir: /u01/Middleware/utils/bsu
PatchDir: /u01/Middleware/patch_wls1036
Profile: Default
DownloadDir: /u01/Middleware/utils/bsu/cache_dir
JavaVersion: 1.6.0_29
JavaVendor: Sun
# 上述结果显示,当前Weblogic系统未安装任何补丁。
2.6 安装补丁集
1、为Weblogic系统安装补丁集
cd /u01/weblogic/Middleware/utils/bsu/
# cache_dir -patchlist=GENM 将 GENM 替换为补丁名称
./bsu.sh -install -patch_download_dir=/weblogic/DataBase/Middleware/utils/bsu/cache_dir -patchlist=I37G -prod_dir=/weblogic/DataBase/Middleware/wlserver_10.3
Checking for conflicts.........
No conflict(s) detected
Installing Patch ID: UIAL..
Result: Success
# 正常情况下该补丁集安装过程持续时间大概为15分钟。
2、确认补丁集安装结果
cd /weblogic/DataBase/Middleware/utils/bsu
./bsu.sh -prod_dir=/weblogic/DataBase/Middleware/wlserver_10.3 -status=applied -verbose -view
ProductName: WebLogic Server
ProductVersion: 10.3 MP6
Components: WebLogic Server/Core Application Server,WebLogic Server/Admi
nistration Console,WebLogic Server/Configuration Wizard and
Upgrade Framework,WebLogic Server/Web 2.0 HTTP Pub-Sub Serve
r,WebLogic Server/WebLogic SCA,WebLogic Server/WebLogic JDBC
Drivers,WebLogic Server/Third Party JDBC Drivers,WebLogic S
erver/WebLogic Server Clients,WebLogic Server/WebLogic Web S
erver Plugins,WebLogic Server/UDDI and Xquery Support,WebLog
ic Server/Evaluation Database,WebLogic Server/Workshop Code
Completion Support
BEAHome: /u01/Middleware
ProductHome: /u01/Middleware/wlserver_10.3
PatchSystemDir: /u01/Middleware/utils/bsu
PatchDir: /u01/Middleware/patch_wls1036
Profile: Default
DownloadDir: /u01/Middleware/utils/bsu/cache_dir
JavaVersion: 1.6.0_29
JavaVendor: Sun
Patch ID: UIAL
PatchContainer: UIAL.jar
Checksum: -866201911
Severity: optional
Category: Installation
CR/BUG: 23094342
Restart: true
Description: WLS PATCH SET UPDATE 10.3.6.0.160719
WLS PATCH SET UPDATE 10.3.6.0.160719
./bsu.sh -prod_dir=/weblogic/DataBase/Middleware/wlserver_10.3 -status=applied -verbose -view
java weblogic.version
WebLogic Server 10.3.6.0.160719 PSU Patch for BUG23094342 MON MAY 23 12:34:42 IST 2016
WebLogic Server 10.3.6.0 Tue Nov 15 08:52:36 PST 2011 1441050
Use 'weblogic.version -verbose' to get subsystem information
Use 'weblogic.utils.Versions' to get version information for all modules
2.7 启动服务
nohup ./startWebLogic.sh & nohup.out