| | h2. AIX V5.3 installation best practices |
| | |
| | (!) The contents of this web page solely reflect the personal views of the authors and do not necessarily represent the views, positions, strategies or opinions of IBM or IBM management. Please use the !http://www.ibm.com/developerworks/wikis/images/icons/add_comment_16.gif! +Add Comment+ link at the bottom of the page to provide feedback. *Note:* Until you log in (using the link in the upper right corner of this web page), you will not see the !http://www.ibm.com/developerworks/wikis/images/icons/add_comment_16.gif! +Add Comment+ link and you can not add a comment. If you do not already have an IBM ID, use the +Register Now+ link on the sign in page to obtain one. Registration is quick and easy. |
| | {note:title=Important note} |
| | There is no substitute for hands-on training with an instructor to learn the basics before attempting the first AIX installation on a production system. See the [IBM Training|http://www-304.ibm.com/jct03001c/services/learning/ites.wss/tp/en?pageType=page&c=a0011023] web page. In the US, see the [IBM Training AIX 5L System Administrators|http://www-304.ibm.com/jct03001c/services/learning/ites.wss/us/en?pageType=page&c=a0000214] web page to select a course. |
| | {note} |
| | |
| | This web page is meant to supplement, *not replace*, other documentation which has been published: |
| | \\ |
| | * [??How-To's for AIX Installation Tasks??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/how_to_part.htm] \- [??System p and AIX information center??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.helpweb.doc/welcome.htm] article covering frequently-used AIX installation procedures. |
| | * [??Installing AIX in a partitioned environment??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/lpar_installing_aix.htm] \- [??System p and AIX information center??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.helpweb.doc/welcome.htm] article focussing specifically on installing AIX in an LPAR. Includes sections on setting up a [Network Installation Management (NIM)|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/nim_intro.htm] server from which individual LPARs can be installed over the network. No need to find or shuffle CDs\! Once NIM is configured, install AIX and optional components in a single step - fire and forget\! |
| | * [??Software installation and maintenance??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.howtos/doc/howto/sw_installation_maintenance.htm] \- [??System p and AIX information center??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.helpweb.doc/welcome.htm] article describing how to perform various tasks related to AIX installation and maintenance. |
| | * [??How to install AIX 5L??|http://www.ibm.com/developerworks/aix/library/au-install-aix.html] \- [IBM developerWorks|http://www.ibm.com/developerworks] article with step-by-step instructions for a number of generic AIX system setup procedures which should (with minor exceptions) work for any of the AIX 5L releases. |
| | * [??Installing optional software products or service updates??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/install_opt_sw_serv_updates.htm] \- [??System p and AIX information center??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.helpweb.doc/welcome.htm] article describing how to install additional software once the AIX base installation is done. |
| | * [??IBM eServer Certification Study Guide - pSeries AIX System Administration??|http://www.redbooks.ibm.com/abstracts/sg246191.html] \- An excellent reference source for AIX sysadmins. Chapters are: |
| | *# Certification overview |
| | *# System startup problem handling |
| | *# Hardware assistance |
| | *# System and software installation |
| | *# Object Data Manager |
| | *# Storage management, LVM, and file systems |
| | *# System paging space |
| | *# System backup, restores, and availability |
| | *# System Resource Controller administration |
| | *# Network administration |
| | *# Network File System administration |
| | *# System performance |
| | *# User administration |
| | *# Printing |
| | *# Sendmail and e-mail |
| | *# Online documentation |
| | *# The AIXwindows font server |
| | * [??AIX V5.3 Installation Tips??|https://www14.software.ibm.com/webapp/set2/subscriptions/ijhifoeblist?mode=1&prefsOnOff=null&heading=AIX53&topic=TIPS&month=ALL] \- Published on IBM's [Subscription service|https://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd] web site. (An [IBM ID|https://www.ibm.com/account/profile/us?page=regfaqhelp] is required for access. Registering for an IBM ID is quick and easy.) IBM's [Subscription service|https://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd] can deliver alerts via e-mail of (among other things) new installation tips as they are published and AIX defects for which fixes have recently become available. Check periodically for new tips. |
| | |
| | \\ |
| | |
| | h3. AIX V5.3 installation |
| | |
| | Installing the base AIX operating system is very quick and easy. It is discussed thoroughly in the above reference sources. At the end of the AIX base installation process, follow the prompts in the [AIX installation assistant|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/install_assist.htm] to: |
| | * set the system date, time, and time zone, |
| | * set the root password, |
| | * bring the system up on the network, and |
| | * install additional software (see below). |
| | |
| | {info:title=Note} |
| | According to the [??Viewing BOS installation logs??|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/view_bos_install_logs.htm] article, the activities which occur during base AIX installation are recorded in {{/var/adm/ras/bosinst.log}} file (which can be viewed with any text editor) and in {{/var/adm/ras/bosinstlog}} (which can be viewed with {{alog -t bosinst -o}}). |
| | {info} |
| | |
| | {info:title=Note} |
| | You can access the [AIX installation assistant|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/install_assist.htm] after exiting from it (even after specifying that the installation assistant is not to be started at boot time) by issuing the command [{{install_assist}}|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.cmds/doc/aixcmds3/install_assist.htm] (when using X-Windows) or {{smitty assist}} (when using an ASCII terminal). |
| | {anchor:InstAssistHang} |
| | (!) [{{install_assist}}|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.cmds/doc/aixcmds3/install_assist.htm] may not work properly once a new Technology Level is installed on base AIX. If, for example, AIX V5.3 is installed from media at the TL04 level and AIX is then updated to the TL05 level, the {{install_assist}} command will hang when invoked, as reported in IBM internal CMVC Defect 567207. Best to finish using {{install_assist}} before installing a TL. According to [Moemen El Swedey|http://www-941.haw.ibm.com/collaboration/wiki/display/~elswidi], if {{install_assist}} hangs when invoked, the issue can be addressed by installing the AIX Security expert filesets (bos.aixpert.cmds and bos.aixpert.websm) and making sure that certain other filesets are at the following levels (or above): |
| | - bos.sysmgt.serv_aid 5.3.0.51 |
| | - bos.sysmgt.sysbr 5.3.0.40 |
| | - sysmgt.websm.rte 5.3.0.40 |
| | - sysmgt.websm.apps 5.3.0.40 |
| | - sysmgt.websm.framework 5.3.0.40 |
| | |
| | (Use {{lslpp \-l \| grep sysmgt}} to check the levels of these filesets.) If the level of your AIX installation media is too old to have the AIX Security Expert filesets, they can be downloaded by following the link at the bottom of the [Where to find aixpert|http://www.ibm.com/developerworks/forums/thread.jspa?threadID=138514] entry in the [AIX Forum|http://www.ibm.com/developerworks/forums/forum.jspa?forumID=747] on the [IBM developerWorks|http://www.ibm.com/developerworks] web site. |
| | {info} |
| | |
| | (!) When installing AIX V5.3 on a LUN on a Storage Area Network (that is, *when preparing to boot AIX from SAN*), please note that there are some [special considerations|AIXV53SANBoot]. |
| | |
| | In addition to the changes prompted by the AIX installation assistant, the following actions are recommended: |
| | * before putting installation images in /usr/sys/inst.images, [create a /usr/sys/inst.images filesystem and mount it|AIXV53AdminBestPractice#Leaverootvg], |
| | * before tailoring the base AIX installation, [consider saving a copy|AIXV53AdminBestPractice#Savecopy] of {{/etc/rc}}, {{/etc/rc.nfs}}, {{/etc/rc.net}}, {{/etc/rc.tcpip}}, \\ {{/etc/profile}}, {{/etc/inittab}}, {{/etc/environment}}, {{/etc/passwd}}, {{/etc/group}}, {{/etc/security/limits}}, {{/etc/security/login.cfg}}, \\ {{/etc/security/passwd}}, {{/etc/security/user}}, {{/etc/security/group}}, {{/etc/services}}, {{/etc/inetd.conf}}, {{/etc/netsvc.conf}}, \\ {{/etc/syslog.conf}}, {{/etc/motd}}, and {{/etc/filesystems}}, |
| | * [configure the root user so you always know which system you are on and which directory you are in|AIXV53AdminBestPractice#rootprofile], |
| | * before creating any userids for which {{/bin/ksh}} is the default shell, [update the {{/usr/lib/security/mkuser.sys}} file shipped with AIX|AIXV53AdminBestPractice#mkuser.sys], |
| | * enlarge /tmp & /var filesystems (to 512 MB?), |
| | * enlarge /home (to provide enough space for user's home directories), |
| | * enlarge the default paging space and/or allocate additional paging spaces ({{smitty pgsp}} \- see the [??Paging space and virtual memory?? article|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.baseadmn/doc/baseadmndita/pg_space_vm.htm] for advice), |
| | * make a few [changes to AIX kernel tuning parameters|AIXV53InitialTuning], |
| | * [make sure adequate system dump space is allocated|AIXV53AdminBestPractice#DumpSpace], |
| | * [prepare the system so you can initiate a stand-alone dump if AIX hangs|AIXV53AdminBestPractice#AllowDump], |
| | * [update $MANPATH for all users|AIXV53AdminBestPractice#MANPATH], |
| | * [configure TCP/IP to search local /etc/hosts to resolve a host name before trying DNS|AIXV53AdminBestPractice#netsvc.conf], |
| | * [add useful shell scripts to /usr/local/bin and make them available to all users|AIXV53AdminBestPractice#ptree], |
| | | * consider [enabling syslog|AIXV53syslog], and |
| | | * consider [enabling syslog|AIXV53syslog], in which subsystem (eg, SSH, DLPAR, etc) activity will be logged, and |
| | * [create a CD-ROM filesystem with a mount point of {{/cdrom}}|AIXV53AdminBestPractice#crcdrfs]. |
| | |
| | When installing and configuring AIX, [minimize changes to files in / and /usr|AIXV53AdminBestPractice#Leaverootvg], [don't store local files in / and /usr|AIXV53AdminBestPractice#Leaverootvg], and [don't store application data files in the AIX rootvg|AIXV53Backup#mksysb]. |
| | |
| | *Please note that important optional software components are not installed by when base AIX is installed from installation media*. So, once base AIX has been installed, there is still software to be installed: |
| | * Base AIX does include the IBM XL C Compiler run-time libraries, but does not include a C compiler. If there is a requirement to compile C source code, a [C compiler|http://www.ibm.com/software/awdtools/xlc/aix/] must be ordered and installed, unless GCC (see below) will suffice. |
| | * Install the appropriate AIX bundles using the command {{smitty install_bundle}}. The Server and Mozilla bundles are the most popular bundles. Installing the Mozilla bundle requires access to the ??AIX Toolbox for Linux Applications?? and ??Mozilla?? CDs. [Mozilla can be installed independently|AIXV53AdminBestPractice#browser] (without using the bundle). Other bundles (eg, App-Dev) are useful in some environments. |
| | * [Install a few individual filesets in addition to bundles|AIXV53AdminBestPractice#Morefilesets]. |
| | * [Install OpenSSH|AIXV53AdminBestPractice#OpenSSH]. |
| | * [Install Adobe Acrobat Reader|AIXV53AdminBestPractice#Acrobat]. |
| | * [Install lsof (LiSt Open Files) utility|AIXV53AdminBestPractice#lsof]. |
| | * Consider installing packages from the [AIX Toolbox for Linux Applications|http://www.ibm.com/systems/p/os/aix/linux/index.html] web site. (Please note that it is often possible to download from the Internet more current and useful versions of software for AIX than those available on the ??AIX Toolbox for Linux Applications?? web site. See, for example, sources listed on the [??Open Source with AIX??|http://www.ibm.com/developerworks/wikis/display/WikiPtype/aixopen] web page.) Here are some examples of software which can be found using one of the _Sorted download_ links on the right side of the [AIX Toolbox for Linux Applications download|http://www.ibm.com/systems/p/os/aix/linux/toolbox/download.html] web page: |
| | ** [VNC|http://www.realvnc.com/vnc/how.html] runs on AIX and creates an X-windows desktop which can be used from any web browser, including Internet Explorer. Very useful when installing applications such as Oracle which provide an X-windows-based installation GUI. More than one user can view and use the X-windows desktop simultaneously, so users can watch what another user does on the X-windows desktop, which is very useful when collaborating with others. (/) [Documentation is available|http://www.realvnc.com/documentation.html], although the documentation might not correspond to the release delivered in the ??AIX Toolbox for Linux Applications??. See [??How to install, configure, and use VNC on AIX V5.3??|AIXV53VNC] for more information. |
| | ** [sudo|http://en.wikipedia.org/wiki/Sudo] manages root access |
| | ** [VIM editor|http://en.wikipedia.org/wiki/Vim_(text_editor)] with improvements over vi |
| | ** [GNU Bourne Again shell (bash)|http://www.gnu.org/software/bash/] which those familiar with Linux usually prefer. (/) Hint: If AIX userids will be defined with bash as the login shell, consider [tailoring {{/usr/lib/security/mkuser.sys}}|AIXV53AdminBestPractice#mkuser.sys] to provide an appropriate default {{.bash_profile}} for those users. |
| | ** [Ethereal|http://www.ethereal.com/] network problem analysis tool |
| | ** [wget|http://www.gnu.org/software/wget/] tool to download web pages |
| | ** [Samba|http://www.samba.org/] file and print server for Microsoft Windows clients |
| | ** [MySQL|http://en.wikipedia.org/wiki/MySQL] open source RDBMS |
| | ** [Apache|http://en.wikipedia.org/wiki/Apache_HTTP_Server] web server (but the [IBM HTTP Server|http://en.wikipedia.org/wiki/IBM_HTTP_Server] might be a better choice) |
| | ** [GCC|http://en.wikipedia.org/wiki/GNU_Compiler_Collection] (GNU Compiler Collection) |
| | * [Create a bootable system backup using {{mksysb}}|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/create_sys_backup.htm] to preserve the work that has been done up to this point. |
| | * [Mirror the AIX rootvg|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.baseadmn/doc/baseadmndita/mirrorootvg.htm]. (!) Remember that any new logical volumes or filesystems created in rootvg after this will not automatically be mirrored, so it's a good idea to postpone this step until near the end of the installation process. (!) If [{{oslevel \-r}}|http://publib.boulder.ibm.com/infocenter/systems/topic/com.ibm.aix.cmds/doc/aixcmds4/oslevel.htm] reports that AIX is running at a very old Maintenance/Technology Level, it might be a good idea to proceed to the next step and install a recent Technology Level before attempting to mirror rootvg, which will address any known defects in the rootvg mirror process. |
| | |
| | {anchor:UpdSfw} |
| | Once all desired filesets and bundles have been installed, *[*select*|#SelectTL]* *and* *[*install*|AIXV53Maint#InstallTL]* *a Technology Level and Service Pack*. Please note that if additional AIX filesets or bundles are installed after a Technology Level has been installed, it is important to [reinstall the Technology Level|AIXV53AdminBestPractice#ReinstallTL]. And please note that [software updates for optional software products (the C and C+\+ compilers, HACMP, etc) are not included in a Technology Level, nor are updates for Java|AIXV53Maint#NotinTL]. Those components must be updated individually. |
| | {note:title=Last but not least} |
| | Reboot ([{{shutdown \-Fr}}|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.baseadmn/doc/baseadmndita/shutdwnemerg.htm]} AIX to confirm that the reboot runs cleanly and create another [bootable backup|http://publib.boulder.ibm.com/infocenter/pseries/v5r3/topic/com.ibm.aix.install/doc/insgdrf/create_sys_backup.htm] to preserve the work that has been done. |
| | {note} |
| | |
| | {anchor:SelectTL} |
| | |
| | h3. Selecting an AIX Technology Level and a Service Pack |
| | |
| | An AIX Technology Level is an update to AIX containing fixes and new hardware and software features. (AIX software updates are now bundled in Technology Levels rather than Maintenance Levels.) A new AIX Technology Level is released every six months. For more information regarding the AIX Technology Level concept (and a comparison of Technology Level concept with the Maintenance Level concept), see the ??IBM AIX 5L Operating System Service Strategy Details and Best Practices?? document downloadable from the [Service and support best practices for UNIX servers|http://www14.software.ibm.com/webapp/set2/sas/f/best/home.html] web page. |
| | |
| | To select and download an AIX Technology Level and a Service Pack, point a browser at the [Fix packs for AIX 5.3 operating system|http://www.ibm.com/eserver/support/fixes/fixcentral/pfixpacks/53] web page, select *All 5.3* in the *Select a Technology Level* select box, and click !http://www.ibm.com/i/v14/buttons/go.gif!. ((i) To find Technology Levels and Service Packs for *AIX releases other than V5.3*, point a browser at the [Fix Central|http://www.ibm.com/eserver/support/fixes] home page, select *System p* in the *Product family* select box, select *AIX* in the *Product* select box, select the AIX version desired in the *Version* select box, select *Fix packs* in the *Fix type* select box, and then click !http://www.ibm.com/i/v14/buttons/arrow_rd.gif! {color:steelblue}{*}Continue{*}{color}.) |
| | |
| | Select the latest AIX Technology Level and Service Pack, unless there is considerable urgency to put the server into production, in which case it may be prudent to avoid an AIX Technology Level (and Service Pack) during its first month or two of availability. Better to let another customer (who is not under as much time pressure) encounter problems with the Technology Level (or Service Pack) and resolve them. (AIX Technology Levels and Service Packs are thoroughly tested, but due to the enormously flexible nature of software nowadays, every permutation and combination can not possibly be tested. Even the most thoroughly tested software has a few problems still lurking in the weeds.) If there is urgency to get something into Production and the latest Technology Level (or Service Pack) has been out less than a month, fall back to the Technology Level (or Service Pack) prior to the latest one. |
| | {anchor:TLServiceLife} |
| | When selecting a Technology Level, consider the Technology Level's service life. The [Fix packs for AIX 5.3 operating system|http://www.ibm.com/eserver/support/fixes/fixcentral/pfixpacks/53] web page says: |
| | bq. "Beginning with AIX 5300-06, Technology Levels are supported for approximately two years. End Of Support dates are estimates only. A two year life for a TL is an objective only. All statements regarding IBM's future direction and intent are subject to change or withdrawal without notice, and represent goals and objectives only." |
| | In this context, "supported" means that the IBM Support Center will build a fix for a particular Technology Level for up to two years. If a problem is encountered in a Technology Level which is no longer supported, if a fix is not already available, and if a fix is required, the IBM Support Center will build a fix only on a supported Technology Level. In order to install the fix, it will be necessary to upgrade AIX to the Technology Level on which the fix is built. There is, therefore, motivation to avoid implementing a Technology Level which has been available for a long time, because the older a Technology Level, the less time remaining in it's service life. |
| | {note:title=Note} |
| | In most cases, installing the latest Technology Level is the best choice, because the latest Technology Level has the longest remaining service life and, since Technology Levels are cumulative, because the latest Technology Level has fixes for the largest number of defects. |
| | {note} |
| | {anchor:MinimumTL} |
| | h3. Minimum required AIX Technology Level |
| | |
| | Be sure to select a Technology Level which will run on your server. The IBM Sales Manual has information on the minimum AIX maintenance level required for every System p server and I/O drawer. To access the IBM Sales Manual, point a browser at the [IBM Offering Information|http://www.ibm.com/common/ssi/OIX.wss] web site and (on the {{A specific type}} tab) select {{Type of content}}: {{{*}HW & SW desc (Sales manual, RPQ)*}}. |
| | |
| | To locate the entry for a specific machine type-model (eg, 9116-561) in the Sales Manual, click on the +Advanced search+ link, type the machine type-model in the _Product number:_ box, check the _Hardware product descriptions_ & _Entire date range_ boxes, and click the {{Search}} icon at the bottom of the window. Once you are viewing a Sales Manual entry, follow the +Technical Description+ link, then the +Software Requirements+ link to find the minimum AIX technology level required for the machine type-model. |
| | |
| | If you are uncertain of the machine type-model for a server on which AIX is already running in your environment, issue the command {{prtconf \| head}} and look for the {{System Model:}} field. |
| | |
| | If a server has I/O drawers attached, you must also look at the Sales Manual entry for the I/O drawer and meet the minimum AIX technology level for the I/O drawer as well as for the server. |
| | |
| | h3. Consider the server's firmware level |
| | |
| | Before attempting to install AIX on a server, use the [Fix Level Recommendation Tool (FLRT)|http://www14.software.ibm.com/webapp/set2/flrt/home] to confirm that the server's [firmware|http://www14.software.ibm.com/webapp/set2/firmware/gjsn] is at an appropriate level. If not, upgrade the server's firmware first. See the [FLRT Installation order tab|http://www14.software.ibm.com/webapp/set2/sas/f/flrt/installorder.html] for more advice regarding the order in which various components should be upgraded. |
