sd.5 (2011 03)

ManualsBrandsHP ManualsSoftwareHP-UX Manpages

sd(5) sd(5)

NAME

sd - Software Distributor, commands to create, distribute, install, monitor, and manage software

SYNOPSIS

sw<command> [XToolkit Options ][

-r|-d][-i][-l][

-p][-R][-u][-v][-V]

[

-a attribute ][-c catalog ][

-C session_ﬁle ][-D acl_entry ][-f software_ﬁle ][-F

acl_ﬁle ]

[

-J jobid ][-l level ][

-M acl_entry ][-Q date ][-s source ][-S session_ﬁle ]

[

-t target_ﬁle ][-x

option=value ][-X option_ﬁle ][software_selections ][

@ target_selections ]

Remarks

• You can enable Software Distributor (SD) for software management on remote systems. See the

Remote Operation section below for details.

• Type

man4sd

to view the sd(4) manual entry for descriptions of all SD objects, attributes and

data formats.

• Type

man 4 swpackage

to view the swpackage (4) manual entry for description of the Product

Speciﬁcation File (PSF) used as input to the

swpackage command.

DESCRIPTION

See the Software Distributor Administration Guide , available at

http://www.hp.com/go/sd-docs

for a complete description of SD.

The SD command and related programs:

•

sd - Lets you interactively create, schedule, and monitors software jobs and log ﬁles. Also lets

you launch the install, copy, and remove commands.

•

swacl - Modiﬁes Access Control Lists (ACLs), which control SD security.

•

swagentd - Daemon that serves local or remote SD software management tasks and starts the

SD agent.

•

swask - Runs scripts that request user responses to be used in software installation or

conﬁguration.

•

swcluster - Conﬁgures diskless clients (HP-UX 10.X only).

•

swconfig - Conﬁgures, unconﬁgures, or reconﬁgures installed software.

•

swcopy - Copies software products into depots for subsequent installation or distribution.

•

swinstall - Installs and conﬁgures software products.

•

swjob - Creates and monitors software jobs and log ﬁles.

•

swlist - Displays information about software products.

•

swmodify - Modiﬁes software product information in a target root or depot.

•

swpackage - Packages software products into a distribution directory or serial-format depot.

•

swreg - Registers or unregisters software depots or roots.

•

swremove - Removes and unconﬁgures software products.

•

swverify - Veriﬁes software products.

•

install-sd - Retrieves and installs the SD product (and any related patches) from new media.

The following sections highlight the features that these commands support.

Remote Operation

You can enable Software Distributor (SD) to manage software on remote systems. To let the root user

from a central SD controller (also called the central management server or manager node ) perform opera-

tions on a remote target (also called the host or agent ):

1) Set up the root, host, and template Access Control Lists (ACLs) on the remote machines to permit

root access from the controller system. To do this, run the following command on each remote sys-

tem:

/usr/lib/sw/mx/setaccess controller

HP-UX 11i Version 3: March 2011 − 1 − Hewlett-Packard Company 1

Summary of content (32 pages)

PAGE 1
sd(5) sd(5) NAME sd - Software Distributor, commands to create, distribute, install, monitor, and manage software SYNOPSIS sw [XToolkit Options ] [-r|-d] [-i] [-l] [-p] [-R] [-u] [-v] [-V] [-a attribute ] [-c catalog ] [-C session_file ] [-D acl_entry ] [-f software_file ] [-F acl_file ] [-J jobid ] [-l level ] [-M acl_entry ] [-Q date ] [-s source ] [-S session_file ] [-t target_file ] [-x option=value ] [-X option_file ] [ software_selections ] [@ target_selections ] Remarks • You can enable So
PAGE 2
sd(5) sd(5) NOTES: • controller is the name of the central management server. • If remote system is 11.00, make sure SD patch PHCO_22526 or a superseding patch is installed on remote system before running setaccess. • If remote system is older than 11.00 or for some other reason does not have setaccess in place, copy the setaccess script from an 11.11 or higher system to the remote system. 2) swinstall, swcopy, and swremove have enhanced GUI interfaces for remote operations.
PAGE 3
sd(5) sd(5) SD also has a nonprivileged mode that replaces ACL authorizations with user file permissions. See the run_as_superuser default option and the Software Distributor Administration Guide for more information. Flexible Policy Control You can control many policies and behaviors for the SD commands by using the command default options .
PAGE 4
sd(5) sd(5) The swinstall command can also install multiple versions of a software product to a single target system, each in a unique product location. The software management commands, swconfig, swlist, swremove, and swverify let you select a specific product from the multiple installed versions by specifying the product location as part of the software_selection.
PAGE 5
sd(5) sd(5) • Configure - (Applies to swconfig, swinstall, and swremove.) A script that configures installed filesets or products. • Unconfigure - (Applies to swconfig and swremove.) A script to "undo" configurations performed by configure scripts. • Verify - (Applies to swverify.) A script that verifies the configuration of filesets or products. (The script performs these checks in addition to the standard swverify checks for file consistency with SD database entries.
PAGE 6
sd(5) sd(5) See the Alternate Root Directory and Depot Directory heading above for more information.) -i Runs the command in interactive mode (Graphical User Interface). See the Interactive Operation and Remote Operation headings above for additional details. -p Previews the task by executing the session through the analysis phase and exiting before the command begins to perform the actual task. -R For swlist, recursively includes all objects to the fileset level.
PAGE 7
sd(5) sd(5) Operands Most SD commands support two types of operands: software selections followed by target selections . These operands are separated by the "at" (@) character. This syntax implies that the command operates on "selections at targets". Software Selections The selections operands consist of software_selections for most SD commands. For the swjob and swreg commands, the selections can be job_ids and roots_or_depots respectively.
PAGE 8
sd(5) sd(5) within the context of an exported catalog, where instance_id is an integer that distinguishes versions of products and bundles with the same tag. Target Selections The SD commands support this syntax for each target_selection. [host ][:][/directory ] The colon (:) is required if both a host and directory are specified.
PAGE 9
sd(5) sd(5) See also the installed_software_catalog and run_as_superuser options. Applies to all SD commands except swagent, swagentd, and install-sd. agent=/usr/lbin/swagent The location of the agent program invoked by the daemon. Applies to swagentd. agent_auto_exit=true Causes the target agent to automatically exit after Execute phase, or after a failed Analysis phase. This is forced to false when the controller is using an interactive UI, or when -p (preview) is used.
PAGE 10
sd(5) sd(5) using the syntax: [host ][:][path ] If the host portion is not specified, then the local host is used. If the path portion is not specified, then the path sent by the command is used. The protocol sequence and endpoint given by the option swagent.rpc_binding_info are used when the agent attempts to contact an alternate source depot. Applies to swagent. ask=true (swask only) ask=false (swconfig and swinstall) Executes a request script, which asks for a user response.
PAGE 11
sd(5) sd(5) When set to true, this option also affects scripts. For example, if a preinstall script fails, this option causes the corresponding unpreinstall script to execute. See Software Distributor Administration Guide for complete information. Applies only to swinstall. autoremove_job=false Controls automatic job removal of completed jobs. If the job is automatically removed, job information (job status or target log files) cannot be queried with swjob.
PAGE 12
sd(5) sd(5) swverify checks only the file timestamp and size. Applies to swverify. check_permissions=true Causes swverify to verify the mode, owner, UID, group, and GID attributes of installed files. If set to false, these attributes are not verified. Applies to swverify. check_requisites=true Causes swverify to verify that the prerequisite, corequisite, and exrequisite dependencies of the software selections are being met. If set to false, these checks are not performed. Applies to swverify.
PAGE 13
sd(5) sd(5) The uncompressed INDEX or INFO file is accessed by the source agent if any problem occurs when accessing, transferring, or uncompressing the INDEX.gz or INFO.gz file. Applies to swinstall, swremove. swcopy, swpackage, swmodify, swconfig, and compression_type=gzip Defines the default compression type used by the agent when it compresses files during or after transmission.
PAGE 14
sd(5) sd(5) swlist -a create_time -a create_date Applies to swlist, swcopy, and swinstall. customer_id= This number, printed on the Software Certificate, "unlocks" protected software and restricts installation to a specific site or owner. You can enter the number with the -x customer_id= option or by using the Interactive User Interface. The customer_id can be used on any HP-UX 10.X or later system. Applies to swinstall, swcopy, swlist.
PAGE 15
sd(5) sd(5) Applies to swcopy, swinstall, and swpackage. enforce_locatable=true When set to the default value of true, this option generates an error if a command tries to relocate a non-relocatable fileset. (Relocatable filesets are packaged with the is_relocatable attribute set to true). When set to false, the usual error handling process is overridden, and SD permits the command to relocate the fileset.
PAGE 16
sd(5) sd(5) determine the path to the IPD. For alternate roots, this path is resolved relative to the location of the alternate root. This option does not affect where software is installed, only the IPD location. This option permits the simultaneous installation and removal of multiple software applications by multiple users or multiple processes, with each application or group of applications using a different IPD. Caution: use a specific installed_software_catalog to manage a specific application.
PAGE 17
sd(5) sd(5) • Patch-handling attributes, including applied_patches, is_patch, and patch_state. • The fileset architecture attribute, which permits you to specify the architecture of the target system on which the product will run. In addition to adding new attributes and objects, layout_version 1.0 changes the following preexisting 0.8 objects and attributes as follows: • Replaces the depot media_sequence_number with the media object with a sequence_number attribute.
PAGE 18
sd(5) sd(5) global_product_template View/modify the template ACL used to initialize the product_template ACL(s) of future software depot(s) added to the host(s) identified by the target_selections. For swreg: The level option defines the level of object to register or unregister: depot Depots which exist at the specified target hosts. root All alternate roots. shroot All registered shared roots (HP-UX 10.X only) . prroot All registered private roots (HP-UX 10.X only) .
PAGE 19
sd(5) sd(5) logfile, and the source agent logfile by prepending identification numbers to SD logfile messages. This information is in addition to the detail controlled by the logdetail option. See logdetail for more information. A value of: 0 provides no information to the log files. 1 enables verbose logging to the log files. 2 enables very verbose logging to the log files. Applies to swconfig, swcopy, swinstall, swmodify, swpackage, swremove, and swverify.
PAGE 20
sd(5) sd(5) mount_all_filesystems=true By default, the SD commands attempt to mount all filesystems in the /etc/fstab file at the beginning of the analysis phase, to ensure that all listed filesystems are mounted before proceeding. This policy helps to ensure that files are not loaded into a directory that may be below a future mount point, and that the expected files are available for a remove or verify operation.
PAGE 21
sd(5) sd(5) The patch_filter= option can be used in conjunction with patch_match_target. Applies to swcopy and swinstall. patch_one_liner=title patch_state Specifies the attributes displayed for each object listed when the -l patch option is invoked and when no -a or -v option is specified. The default display attributes are title and patch_state. Applies to swlist. patch_save_files=true Saves patched files, which permits future rollback of patches.
PAGE 22
sd(5) sd(5) Applies to swinstall. reinstall_files=false Controls the overwriting of files, which may enhance performance on slow networks or disks. At the default value of false, SD compares each file in a source fileset to corresponding files on the target system. SD compares the files based on size, timestamp, and (optionally) the checksum (see reinstall_files_use_cksum). If the files are identical the files on the target system are not overwritten.
PAGE 23
sd(5) sd(5) retry_rpc_interval={0} Specifies in minutes the length of the interval for repeated attempts to make a connection to a target after an initial failure. Used in conjunction with the retry_rpc option. If the number of values in this option equals the value of retry_rpc, SD tries reestablishing a source connection for the number of times specified in retry_rpc.
PAGE 24
sd(5) sd(5) when using the ncacn_ip_tcp protocol sequence. Applies to all commands except swpackage and swmodify. run_as_superuser=true This option controls SD’s nonprivileged mode. This option is ignored (treated as true) when the invoking user is super-user. When set to the default value of true, SD operations are performed normally, with permissions for operations either granted to a local super-user or set by SD ACLs. (See swacl (1M) for details on ACLs.
PAGE 25
sd(5) sd(5) source_depot_audit=true If both source and target machine are updated to SD revision B.11.00 or later, the system administrator at the source depot machine can set this option to track which user pulls which software from a depot on the source machine and when the software is pulled. (Note that a user running swinstall/swcopy from a target machine cannot set this option; only the administrator of the source depot machine can set it.) When source_depot_audit is set to true, a swaudit.
PAGE 26
sd(5) sd(5) Applies to swpackage and swagent. uncompress_files=false If the files being transferred from a source are compressed, setting this option will uncompress the files before storing them on the target depot. Applies to swcopy and swpackage. use_alternate_source=false Lets each target agent use its own configured alternate source, instead of the one specified by the user. If false, each target agent will use the same source, namely the source specified by the user and validated by the command.
PAGE 27
sd(5) sd(5) When you re-execute a session file, the values in the session file take precedence over values in the system defaults file. Likewise, any command-line options and parameters take precedence over the values in the session file. Software and Target Lists Most SD commands support software and target selections from separate input files (see the -f and -t command-line options). Software and targets specified in these files will be selected for operation.
PAGE 28
sd(5) sd(5) This variable applies to all SD commands. LC_ALL Determines the locale to be used to override any values for locale categories specified by the settings of LANG or any environment variables beginning with LC_. LC_CTYPE Determines the interpretation of sequences of bytes of text data as characters (for example, single versus multibyte characters in values for vendor-defined attributes). LC_MESSAGES Determines the language in which messages should be written.
PAGE 29
sd(5) sd(5) SW_CONFIG_AFTER_REBOOT This variable should be read only by the configure script. If this is set to any value it indicates the configure script was invoked by the swconfig command during system startup. This variable is set by the /sbin/init.d/swconfig system startup script. SW_DEFERRED_KERNBLD Only applies to swinstall. This variable is normally unset.
PAGE 30
sd(5) sd(5) Locking SD commands use a common locking mechanism for reading and modifying both root directories and software depots. This mechanism allows multiple readers but only one writer on a root or depot. The SD commands which modify software in an (alternate) root directory are restricted from simultaneous modification using fcntl() locking on the file var/adm/sw/products/swlock relative to the root directory (for example, /var/adm/sw/products/swlock).
PAGE 31
sd(5) sd(5) /var/spool/sw). The swagentd running on a host logs events to the file /var/adm/sw/swagentd.log. Source Depot Audit Log If both source and target machine are updated to SD revision B11.00 or later, the system administrator at the source depot machine can track which user pulls which software from a depot on the source machine and when the software is pulled. Refer to the source_depot_audit option in swagent (1M) for more information. FILES /dev/rmt/0m Default source tape location.
PAGE 32
sd(5) sd(5) /var/adm/sw/host_object The file which stores the list of depots registered at the local host. /var/adm/sw/products/ The Installed Products Database (IPD), a catalog of all products installed on a system. /var/adm/sw/queue/ The directory which contains the information about all active and complete install, remove, and other jobs initiated by the SD commands.