Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
tutorial:adm:server_os_updates [2019/12/16 15:28] fiserp [Solving issues] |
tutorial:adm:server_os_updates [2019/12/17 07:42] fiserp [Performing the OS update] |
||
---|---|---|---|
Line 10: | Line 10: | ||
* Impact on users | * Impact on users | ||
* IdM is often deployed as a self-service portal for users. You should plan the downtime such that minimal number of users is affected. | * IdM is often deployed as a self-service portal for users. You should plan the downtime such that minimal number of users is affected. | ||
- | * Users may make changes in the IdM that start some long running tasks (e.g. automatic roles changes). Those tasks are executed asynchronously and may be running even if the user who started the task has already logged off. | + | * Users may make changes in the IdM that start some long running tasks (e.g. automatic roles changes, bulk role assignments, |
- | * Impact on IdM batch jobs (long running tasks - LRT) | + | * Impact on long running tasks (LRT) |
* IdM has internal cron that schedules LRT jobs. To make things safe, no job should be running when you are doing the update. The safest way to achieve this is to stop the IdM service before applying updates. | * IdM has internal cron that schedules LRT jobs. To make things safe, no job should be running when you are doing the update. The safest way to achieve this is to stop the IdM service before applying updates. | ||
* LRTs run usually at night so it is not entirely necessary to stop the IdM, but you have to make sure you have enough time to perform the patching (and possible rollback) before jobs start to execute. | * LRTs run usually at night so it is not entirely necessary to stop the IdM, but you have to make sure you have enough time to perform the patching (and possible rollback) before jobs start to execute. | ||
Line 39: | Line 39: | ||
- Prepare backup and restore procedures. | - Prepare backup and restore procedures. | ||
- Identify which LRTs can be safely killed when running. | - Identify which LRTs can be safely killed when running. | ||
- | - Make a checklist with timing | + | - Make a checklist with timing |
- Perform the update | - Perform the update | ||
- Begin the maintenance. | - Begin the maintenance. | ||
Line 86: | Line 86: | ||
Fortunately, | Fortunately, | ||
- | In more complicated cases, restoring | + | Minor issues can be generally resolved with the help of ``/boot`` and ``/etc`` backups you created before updating the OS. |
+ | |||
+ | If IdM installation gets hit, you can debug the configuration or restore it from periodic backup. Since IdM is not installed from OS packages, this basically never happens. |