Archive

AIX

If for any reason necessary, you can create a bootable DVD.iso file from a mksysb backup, using mkcd:

      Create CD/DVD image
      |
mkcd -L -S -I /mksysb/bootable_mk -m /mksysb/my_mksysb_backup
         |  |
         |  Specify directory where the bootable DVD iso will be placed
         Do not write to DVD media/device


# mkcd -L -S -I /mksysb/bootable_mk -m /mksysb/my_mksysb_backup
Initializing mkcd log: /var/adm/ras/mkcd.log...
Verifying command parameters...
Creating temporary file system: /mkcd/cd_fs...
Populating the CD or DVD file system...
Building chrp boot image...
Copying backup to the CD or DVD file system...
...........................................
Creating Rock Ridge format image: /mksysb/bootable_mk/cd_image_655538
Running mkisofs ...
........................
mkrr_fs was successful.

Making the CD or DVD image bootable...


Removing temporary file system: /mkcd/cd_fs...

If the resulting mksysb file will be bigger than 3.7G (as I saw in the mksysb (or mkcd?) man page) mkcd will create 2 iso images. In this case it is advisable to clean the the rootvg from unnacessary files, like big old log’s and simillar stuff, so you have the entire backup/restore on one medium. Also, it happend to me, that when I created a mksysb on AIX 5.3(dont know the TL) it ended with something like “ended sucsesfully” but, “echo $?” was not 0. When this happened mkcd asked me for the second cd/medium, and refused to continue. So check the resulting result code, after mksysb finished.

This post will in short describe how to setup an Encrypted Filesystem on AIX 6.1.

EFS offers 2 modes of operation:

Root Admin mode
This is the default mode. Root can reset user and group keystore passwords.

Root Guard mode
Root doeas not have access to user’s encrypted files and cannot change their passwords.

Note: NFS exports of EFS filesystems are not supported.

1. Prerequisites:
RBAC has to be enabled. Should be by default on AIX 6.1. If not use chdev to enable it.

# lsattr -El sys0 | grep RBAC
enhanced_RBAC   true         Enhanced RBAC Mode        True

CryptoLite needs to be installed

# lslpp -l | grep clic       
  clic.rte.kernext           4.7.0.1  COMMITTED  CryptoLite for C Kernel
  clic.rte.lib               4.7.0.1  COMMITTED  CryptoLite for C Library
  clic.rte.kernext           4.7.0.1  COMMITTED  CryptoLite for C Kernel

2. EFS Commands:

efsenable – Enables EFS on a given system. This is run only once
efskeymgr – Encryption Key Management tool
efsmgr – File encryption and decryption
Read More

This post will describe, how to configure Filesystem space usage monitoring using IBM Reliable Scalable Cluster Technology.
After the configuration is compleate the specified user will receive notifications if a treshold of a monitored filesystesm has been reached.

First we need to select a condition that should be monitored. The list of predefined conditions that are available can be shown using the command:

# lscondition
...
"/var space used"                   "Not monitored" 
"/tmp space used"                   "Not monitored"     
...

To list details about a condition use:

# lscondition "/var space used"
Displaying condition information:

condition 1:
        Name                        = "/var space used"
        MonitorStatus               = "Not monitored"
        ResourceClass               = "IBM.FileSystem"
        EventExpression             = "PercentTotUsed > 90"
        EventDescription            = "An event will be generated when more than 90 percent of the total space in the /var directory is in use."
        RearmExpression             = "PercentTotUsed < 75"
        RearmDescription            = "The event will be rearmed when the percent of the space used in the /var directory falls below 75 percent."
        SelectionString             = "Name == \"/var\""
        Severity                    = "i"
        NodeNames                   = {}
        MgtScope                    = "l"
        Toggle                      = "Yes"
        EventBatchingInterval       = 0
        EventBatchingMaxEvents      = 0
        BatchedEventRetentionPeriod = 0
        BatchedEventMaxTotalSize    = 0
        RecordAuditLog              = "ALL"

Read More

This post wil describe how to install a Ifix using NIM on a client. You may also use smitty nim.

1. I assume you have a existing LPP_Source and a defined client.

# lsnim -l LPP_61_TL7
LPP_61_TL7:
   class       = resources
   type        = lpp_source
   arch        = power
   Rstate      = ready for use
   prev_state  = unavailable for use
   location    = /export2/aix61ml7/lpps
   simages     = yes
   alloc_count = 0
   server      = master

Put your Ifix into the emgr/ppc directory into the LPP_Source

 # cd /export2/aix61ml7/lpps
 # mkdir -p emgr/ppc 
 # ls
 RPMS      emgr      installp  usr
....

 # ls emgr/ppc
 IV16587s02.epkg.Z

Now install the fix on the client

Operation    This is a Ifix Installation        LPP source name     Client
       |                  |                                   |          | 
# nim -o cust -a filesets=E:IV16587s02.epkg.Z -a lpp_source=LPP_61_TL7 power2

Initializing log /var/adm/ras/emgr.log ...
EPKG NUMBER       LABEL               OPERATION              RESULT            
===========       ==============      =================      ==============    
1                 IV16587s02          INSTALL                SUCCESS           
ATTENTION: system reboot is required. Please see the "Reboot Processing"
sections in the output above or in the /var/adm/ras/emgr.log file.
Return Status = SUCCESS

Read More

This post will briefly describe how to setup a 2 node PowerHA 6.1 cluster with NFS as a Resource Group.

1. Pre Installation Requisites
2. Installing PowerHA using NIM
3. IP/Network Configuration
4. Storage Setup
5. Create cluster
6. NFS Setup
7. Monitoring and status commands.

1. Pre Install Fileset requisites:

The following filesets should be installed on both nodes before installing PowerHA as stated in RedBook SG24-7739-00:
Read More

To view information about a mksysb backup file use:

            Display info about VG backup
            |
# lsmksysb -lf P2_1202_TL7.mk 
             |             |
             |             Mksyb file
             Device:(file,tape,cdrom) 
VOLUME GROUP:           rootvg
BACKUP DATE/TIME:       Tue Feb 21 18:08:29 GMT+01:00 2012
UNAME INFO:             AIX power2s 1 6 00C4489D4C00
BACKUP OSLEVEL:         6.1.7.0
MAINTENANCE LEVEL:      6100-07
BACKUP SIZE (MB):       41216
SHRINK SIZE (MB):       8421
VG DATA ONLY:           no

rootvg:
LV NAME             TYPE       LPs     PPs     PVs  LV STATE      MOUNT POINT
hd6                 paging     16      32      2    open/syncd    N/A
hd5                 boot       1       2       2    closed/syncd  N/A
hd8                 jfs2log    1       2       2    open/syncd    N/A
hd3                 jfs2       4       8       2    open/syncd    /tmp
hd1                 jfs2       1       2       2    open/syncd    /home
hd11admin           jfs2       1       2       2    open/syncd    /admin
livedump            jfs2       2       4       2    open/syncd    /var/adm/ras/livedump
fslv00              jfs2       72      144     2    open/syncd    /usr/sys/inst.images
hd4                 jfs2       22      44      2    open/syncd    /
hd2                 jfs2       34      68      2    open/syncd    /usr
hd9var              jfs2       2       4       2    open/syncd    /var
hd10opt             jfs2       5       10      2    open/syncd    /opt

To get the LPP info from the mksysb use:

            Display LPP info
            |
# lsmksysb -Lf P2_1202_TL7.mk
                   |
                   Mksysb file
Fileset                      Level  State  Type  Description (Uninstaller)
  ----------------------------------------------------------------------------
  ICU4C.rte                  6.1.7.0    C     F    International Components for
                                                   Unicode
  Java5.sdk                5.0.0.430    C     F    Java SDK 32-bit
  Java5_64.sdk             5.0.0.430    C     F    Java SDK 64-bit
  Java6.sdk                6.0.0.280    A     F    Java SDK 32-bit
  Tivoli_Management_Agent.client.rte
                             3.7.1.0    C     F    Management Framework Endpoint
                                                   Runtime"
  X11.adt.bitmaps            6.1.0.0    C     F    AIXwindows Application
                                                   Development Toolkit Bitmap
                                                   Files 
  X11.adt.imake              6.1.6.0    C     F    AIXwindows Application
                                                   Development Toolkit imake
.....

For the list of files contained in the mksysb
Read More

Very simple:

# lspv
hdisk0          00c0e90dce6c290a                    rootvg          active              
hdisk1          none                                None                                
hdisk2          none                                None                              

          Disk name Attribute
         |         | 
# chdev -l hdisk1 -a pv=yes
hdisk1 changed

# lspv
hdisk0          00c0e90dce6c290a                    rootvg          active              
hdisk1          00c4489d762b6769                    None

Thats it.