Issue is : We have Solaris Global with 12 Zones and some have 15 Zones. All the OS version are10.
Is it possible to apply patch at Zone level instead of patching at Global level? Please let me know.
Solaris 10.....
Yes, you can apply a patch to a particular zone by running the command as the zone admin. Also, you can apply a patch to a global zone only.
Caveat: does not work for sparse zones.
1 Like
Yes, thanks Jim. Many thanks for pointing that out. I missed that point.
Zones can be "whole root", that is self-sufficient operating systems with all their own binaries, or "sparse zone" where all binaries are not loaded but the global zone's binaries are used instead, ie, the global zone binaries are shared to make the zone disk space smaller.
A few comments:
- some patches might apply to packages that are required to be in sync across all zones including the global one (SUNW_PKG_ALLZONES property). In such case the patch will refuse to be applied to a single zone or the global zone only.
- for obvious reasons, kernel patches are of this kind
- Patches that do not modify files residing in inherited file-systems can be applied to a sparse zone.
1 Like
Thanks for the great response 
What I'm understanding is "Sparse Zone" cannot apply patch at Zone level and for "Whole root Zone" the patch can be applied at Zone/Global level.
And some patches (kernel patch) might not be able to apply on both type of zones at Zone level and they have to be applied at Global level.
Please let me know if I'm wrong.
I'm not sure to understand what you wrote so let me state again some facts:
Some patches can be applied to a sparse zone.
Some patches need to be applied at once to all zones including the global one, and from the latter.
Many patches can be applied to a single zone, whether global or not.
The fact a zone is sparse is strongly limiting the number of patches that can be applied to it.
Thanks for stating it. Summarizing below, please confirm.
"Whole root Zone" - Normally patches can be applied at Zone or Global level. But some patches (kernel) has to be applied only at Global level.
"Sparse Zone" - Any patches have to be applied only at Global level.
I wouldn't use "normally" but "most" instead. All patches are "normal".
Kernel is an example, there are many patches that aren't kernel patches but that nevertheless need to be applied to all zones, not only the global one as you state.
Your last statement is incorrect and contradict the first statement of my previous posting.
Correcting my statement below.
For "Sparse Zone" type, all kind of patches have to be applied at Global and Zone level.
Still incorrect