AIX に ifix (暫定fix) を適用する (HIPER APAR IJ44513/IJ44047 対応)

#### はじめに

AIX/VIOS の HIPER APAR/テクニカル・フラッシュの案内が出ていましたので AIX に ifix を適用しました。
ご参考ログとして記載します。


**障害の内容**

・[【TF】【IBMPower】【AIX】AIX 7.1/7.2/7.3、VIOS 3.1.2/3.1.3/3.1.4環境におけるCACHED_ROUTESに関連する障害への対応のお願い](https://www.ibm.com/support/pages/node/6962749)


・[High Impact / Highly Pervasive APARs IJ44513/IJ44047](https://www.ibm.com/support/pages/node/6857545)


**参考手順**

AIX:
・[暫定フィックス（ifix）の適用](https://www.ibm.com/support/pages/node/1137298)

・[Managing Interim Fixes on AIX](https://www.ibm.com/support/pages/managing-interim-fixes-aix)

・[emgr コマンド](https://www.ibm.com/docs/ja/aix/7.3?topic=e-emgr-command)


VIOS:
・[Managing ifix on a VIO Server](https://www.ibm.com/support/pages/managing-ifix-vio-server)


---

#### 実行環境


AIX 7.3 TL1 SP1 

```
# oslevel -s
7300-01-01-2246
```

---

#### 実行

##### ① 適用前確認

```
# emgr -l
There is no efix data on this system.
```

ダウンロードしてAIXサーバーに配置したモジュール

```
# ls -l
total 22064
-rw-r--r--    1 root     system     11295929 Mar 14 04:19 IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
```

---


##### ② プレビュー

```
# emgr -p -e IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
*******************************************************************************
EFIX MANAGER PREVIEW START
*******************************************************************************

+-----------------------------------------------------------------------------+
Efix Manager Initialization
+-----------------------------------------------------------------------------+
Initializing log /var/adm/ras/emgr.log ...
Efix package file is: /work/ifix/IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
MD5 generating command is /usr/bin/csum
MD5 checksum is b09efbab40ce92e1d393ccabed73fbb9
Accessing efix metadata ...
Processing efix label "IJ44761m1a" ...
Verifying efix control file ...

+-----------------------------------------------------------------------------+
Installp Prerequisite Verification
+-----------------------------------------------------------------------------+
Verifying prerequisite file ...
Checking prerequisites ...

Prerequisite Number: 1
   Fileset: bos.mp64
   Minimal Level: 7.3.1.1
   Maximum Level: 7.3.1.1
   Actual Level: 7.3.1.1
   Type: PREREQ
   Requisite Met: yes

Prerequisite Number: 2
   Fileset: bos.net.tcp.client_core
   Minimal Level: 7.3.1.1
   Maximum Level: 7.3.1.1
   Actual Level: 7.3.1.1
   Type: PREREQ
   Requisite Met: yes

All prerequisites have been met.

+-----------------------------------------------------------------------------+
Processing APAR reference file
+-----------------------------------------------------------------------------+
ATTENTION: Interim fix is enabled for automatic removal by installp.

+-----------------------------------------------------------------------------+
Efix Attributes
+-----------------------------------------------------------------------------+
LABEL:            IJ44761m1a
PACKAGING DATE:   Fri Feb 17 23:06:51 CST 2023
ABSTRACT:         Fix for multiple APARs
PACKAGER VERSION: 7
VUID:             00F7CD554C00021723025023
REBOOT REQUIRED:  yes
BUILD BOOT IMAGE: yes
LU CAPABLE:       yes
PRE-REQUISITES:   yes
SUPERSEDE:        no
PACKAGE LOCKS:    no
E2E PREREQS:      no
FIX TESTED:       no
ALTERNATE PATH:   None
EFIX FILES:       2

Install Scripts:
   PRE_INSTALL:   no
   POST_INSTALL:  no
   PRE_REMOVE:    no
   POST_REMOVE:   no

File Number:      1
   LOCATION:      /usr/lib/boot/unix_64
   FILE TYPE:     Standard (file or executable)
   INSTALLER:     installp
   SIZE:          113536
   ACL:           DEFAULT
   CKSUM:         21222
   PACKAGE:       bos.mp64
   MOUNT INST:    no

File Number:      2
   LOCATION:      /usr/lib/drivers/netinet
   FILE TYPE:     Standard (file or executable)
   INSTALLER:     installp
   SIZE:          2720
   ACL:           DEFAULT
   CKSUM:         55058
   PACKAGE:       bos.net.tcp.client_core
   MOUNT INST:    no

+-----------------------------------------------------------------------------+
Efix Description
+-----------------------------------------------------------------------------+
This fix includes IJ44594m1a, which resolves:
IJ44594 - a potential security issue exists
IJ45424 - some cmds may fail for non root users post lku

This fix includes IJ44749m1a, which resolves:
IJ44761 - Memory leak
IJ44749 - lpar crashed @gids_ok
IJ44758 - lpar crashed @.disable_lock
IJ45340 - crash in tcp_output


+-----------------------------------------------------------------------------+
Efix Lock Management
+-----------------------------------------------------------------------------+
Checking locks for file /usr/lib/boot/unix_64 ...
Checking locks for file /usr/lib/drivers/netinet ...

All files have passed lock checks.

+-----------------------------------------------------------------------------+
Space Requirements
+-----------------------------------------------------------------------------+
Checking space requirements ...

Space statistics (in 512 byte-blocks):
File system: /usr, Free: 2665704, Required: 183726, Deficit: 0.
File system: /tmp, Free: 520904, Required: 205004, Deficit: 0.

+-----------------------------------------------------------------------------+
Reboot Processing
+-----------------------------------------------------------------------------+

*** NOTICE ***
This efix package requires the target system to be rebooted after the current
operation is complete. It is recommended that you reboot the target system as
soon as possible after installation to avoid disruption of current functionality.

*******************************************************************************
EFIX MANAGER PREVIEW END
*******************************************************************************

+-----------------------------------------------------------------------------+
Operation Summary
+-----------------------------------------------------------------------------+
Log file is /var/adm/ras/emgr.log

EPKG NUMBER       LABEL               OPERATION              RESULT
===========       ==============      =================      ==============
1                 IJ44761m1a          INSTALL PREVIEW        SUCCESS

ATTENTION: system reboot will be required by the actual (not preview) operation.
Please see the "Reboot Processing" sections in the output above or in the
/var/adm/ras/emgr.log file.

Return Status = SUCCESS
#
```

ファイルセット bos.mp64 と bos.net.tcp.client_core に作用する様子です。


```
# lslpp -l bos.mp64
  Fileset                      Level  State      Description
  ----------------------------------------------------------------------------
Path: /usr/lib/objrepos
  bos.mp64                   7.3.1.1  COMMITTED  Base Operating System 64-bit
                                                 Multiprocessor Runtime

Path: /etc/objrepos
  bos.mp64                   7.3.1.1  COMMITTED  Base Operating System 64-bit
                                                 Multiprocessor Runtime
# lslpp -l bos.net.tcp.client_core
  Fileset                      Level  State      Description
  ----------------------------------------------------------------------------
Path: /usr/lib/objrepos
  bos.net.tcp.client_core    7.3.1.1  COMMITTED  TCP/IP Client Core Support

Path: /etc/objrepos
  bos.net.tcp.client_core    7.3.1.1  COMMITTED  TCP/IP Client Core Support
```



---
##### ③ ifix適用


```
# time emgr -e IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
+-----------------------------------------------------------------------------+
Efix Manager Initialization
+-----------------------------------------------------------------------------+
Initializing log /var/adm/ras/emgr.log ...
Efix package file is: /work/ifix/IJ44761m1a.230217.AIX73TL01SP01.epkg.Z
MD5 generating command is /usr/bin/csum
MD5 checksum is b09efbab40ce92e1d393ccabed73fbb9
Accessing efix metadata ...
Processing efix label "IJ44761m1a" ...
Verifying efix control file ...

+-----------------------------------------------------------------------------+
Installp Prerequisite Verification
+-----------------------------------------------------------------------------+
Verifying prerequisite file ...
Checking prerequisites ...

Prerequisite Number: 1
   Fileset: bos.mp64
   Minimal Level: 7.3.1.1
   Maximum Level: 7.3.1.1
   Actual Level: 7.3.1.1
   Type: PREREQ
   Requisite Met: yes

Prerequisite Number: 2
   Fileset: bos.net.tcp.client_core
   Minimal Level: 7.3.1.1
   Maximum Level: 7.3.1.1
   Actual Level: 7.3.1.1
   Type: PREREQ
   Requisite Met: yes

All prerequisites have been met.

+-----------------------------------------------------------------------------+
Processing APAR reference file
+-----------------------------------------------------------------------------+
ATTENTION: Interim fix is enabled for automatic removal by installp.

+-----------------------------------------------------------------------------+
Efix Attributes
+-----------------------------------------------------------------------------+
LABEL:            IJ44761m1a
PACKAGING DATE:   Fri Feb 17 23:06:51 CST 2023
ABSTRACT:         Fix for multiple APARs
PACKAGER VERSION: 7
VUID:             00F7CD554C00021723025023
REBOOT REQUIRED:  yes
BUILD BOOT IMAGE: yes
LU CAPABLE:       yes
PRE-REQUISITES:   yes
SUPERSEDE:        no
PACKAGE LOCKS:    no
E2E PREREQS:      no
FIX TESTED:       no
ALTERNATE PATH:   None
EFIX FILES:       2

Install Scripts:
   PRE_INSTALL:   no
   POST_INSTALL:  no
   PRE_REMOVE:    no
   POST_REMOVE:   no

File Number:      1
   LOCATION:      /usr/lib/boot/unix_64
   FILE TYPE:     Standard (file or executable)
   INSTALLER:     installp
   SIZE:          113536
   ACL:           DEFAULT
   CKSUM:         21222
   PACKAGE:       bos.mp64
   MOUNT INST:    no

File Number:      2
   LOCATION:      /usr/lib/drivers/netinet
   FILE TYPE:     Standard (file or executable)
   INSTALLER:     installp
   SIZE:          2720
   ACL:           DEFAULT
   CKSUM:         55058
   PACKAGE:       bos.net.tcp.client_core
   MOUNT INST:    no

+-----------------------------------------------------------------------------+
Efix Description
+-----------------------------------------------------------------------------+
This fix includes IJ44594m1a, which resolves:
IJ44594 - a potential security issue exists
IJ45424 - some cmds may fail for non root users post lku

This fix includes IJ44749m1a, which resolves:
IJ44761 - Memory leak
IJ44749 - lpar crashed @gids_ok
IJ44758 - lpar crashed @.disable_lock
IJ45340 - crash in tcp_output


+-----------------------------------------------------------------------------+
Efix Lock Management
+-----------------------------------------------------------------------------+
Checking locks for file /usr/lib/boot/unix_64 ...
Checking locks for file /usr/lib/drivers/netinet ...

All files have passed lock checks.

+-----------------------------------------------------------------------------+
Space Requirements
+-----------------------------------------------------------------------------+
Checking space requirements ...

Space statistics (in 512 byte-blocks):
File system: /usr, Free: 2665704, Required: 183726, Deficit: 0.
File system: /tmp, Free: 520904, Required: 205004, Deficit: 0.

+-----------------------------------------------------------------------------+
Efix Installation Setup
+-----------------------------------------------------------------------------+
Unpacking efix package file ...
Initializing efix installation ...

+-----------------------------------------------------------------------------+
Efix State
+-----------------------------------------------------------------------------+
Setting efix state to: INSTALLING

+-----------------------------------------------------------------------------+
File Archiving
+-----------------------------------------------------------------------------+
Saving all files that will be replaced ...
Save directory is: /usr/emgrdata/efixdata/IJ44761m1a/save
File 1: Saving /usr/lib/boot/unix_64 as EFSAVE1 ...
File 2: Saving /usr/lib/drivers/netinet as EFSAVE2 ...

+-----------------------------------------------------------------------------+
Efix File Installation
+-----------------------------------------------------------------------------+
Installing all efix files:
Installing efix file #1 (File: /usr/lib/boot/unix_64) ...
Installing efix file #2 (File: /usr/lib/drivers/netinet) ...

Total number of efix files installed is 2.
All efix files installed successfully.

+-----------------------------------------------------------------------------+
Package Locking
+-----------------------------------------------------------------------------+
Processing package locking for all files.
File 1: locking installp fileset bos.mp64.
File 2: locking installp fileset bos.net.tcp.client_core.

All package locks processed successfully.

+-----------------------------------------------------------------------------+
Reboot Processing
+-----------------------------------------------------------------------------+

*** NOTICE ***
This efix package requires the target system to be rebooted after the current
operation is complete. It is recommended that you reboot the target system as
soon as possible after installation to avoid disruption of current functionality.

+-----------------------------------------------------------------------------+
Efix State
+-----------------------------------------------------------------------------+
Setting efix state to: REBOOT REQUIRED

+-----------------------------------------------------------------------------+
Boot Image Processing
+-----------------------------------------------------------------------------+
Rebuilding boot image ...
bosboot: Boot image is 65564 512 byte blocks.
Successfully rebuilt boot image.

+-----------------------------------------------------------------------------+
Operation Summary
+-----------------------------------------------------------------------------+
Log file is /var/adm/ras/emgr.log

EPKG NUMBER       LABEL               OPERATION              RESULT
===========       ==============      =================      ==============
1                 IJ44761m1a          INSTALL                SUCCESS

ATTENTION: system reboot is required. Please see the "Reboot Processing"
sections in the output above or in the /var/adm/ras/emgr.log file.

Return Status = SUCCESS

real    2m34.17s
user    0m4.73s
sys     0m1.99s
#
```

実行時間は 2分34秒程度でした。

---


##### ④ 適用後確認

```
# emgr -l

ID  STATE LABEL      INSTALL TIME      UPDATED BY ABSTRACT
=== ===== ========== ================= ========== ======================================
1   *Q*   IJ44761m1a 03/14/23 04:26:56            Fix for multiple APARs

STATE codes:
 S = STABLE
 M = MOUNTED
 U = UNMOUNTED
 Q = REBOOT REQUIRED
 B = BROKEN
 I = INSTALLING
 R = REMOVING
 T = TESTED
 P = PATCHED
 N = NOT PATCHED
 SP = STABLE + PATCHED
 SN = STABLE + NOT PATCHED
 QP = BOOT IMAGE MODIFIED + PATCHED
 QN = BOOT IMAGE MODIFIED + NOT PATCHED
 RQ = REMOVING + REBOOT REQUIRED
#
```

Q = REBOOT REQUIRED が表示されています。
リブートを実行します。

---

##### ⑤ リブート

```
# shutdown -Fr
SHUTDOWN PROGRAM
Tue Mar 14 04:30:59 CDT 2023
0513-044 The sshd Subsystem was requested to stop.
Wait for 'Rebooting...' before stopping.
Error logging stopped...

~ 省略 ~ 
```

---

##### ⑥ リブート後確認

```
# emgr -l

ID  STATE LABEL      INSTALL TIME      UPDATED BY ABSTRACT
=== ===== ========== ================= ========== ======================================
1    S    IJ44761m1a 03/14/23 04:26:56            Fix for multiple APARs

STATE codes:
 S = STABLE
 M = MOUNTED
 U = UNMOUNTED
 Q = REBOOT REQUIRED
 B = BROKEN
 I = INSTALLING
 R = REMOVING
 T = TESTED
 P = PATCHED
 N = NOT PATCHED
 SP = STABLE + PATCHED
 SN = STABLE + NOT PATCHED
 QP = BOOT IMAGE MODIFIED + PATCHED
 QN = BOOT IMAGE MODIFIED + NOT PATCHED
 RQ = REMOVING + REBOOT REQUIRED
#
```

STABLE 状態になりました。



```
# lslpp -l bos.mp64
  Fileset                      Level  State      Description
  ----------------------------------------------------------------------------
Path: /usr/lib/objrepos
  bos.mp64                   7.3.1.1  COMMITTED  Base Operating System 64-bit
                                                 Multiprocessor Runtime
                                      EFIXLOCKED

Path: /etc/objrepos
  bos.mp64                   7.3.1.1  COMMITTED  Base Operating System 64-bit
                                                 Multiprocessor Runtime
                                      EFIXLOCKED
# lslpp -l bos.net.tcp.client_core
  Fileset                      Level  State      Description
  ----------------------------------------------------------------------------
Path: /usr/lib/objrepos
  bos.net.tcp.client_core    7.3.1.1  COMMITTED  TCP/IP Client Core Support
                                      EFIXLOCKED

Path: /etc/objrepos
  bos.net.tcp.client_core    7.3.1.1  COMMITTED  TCP/IP Client Core Support
                                      EFIXLOCKED
#
```

対象のファイルセットはレベルの変更はありませんが EFIXLOCKED マークがついていました。


---

#### おわりに


次のサービス・パック(SP) で今回適用した ifix が盛り込まれるみたいですが、Next SP は2023年4月28日頃リリース予定の様子です。


https://www.ibm.com/support/pages/aix-support-lifecycle-information


以上です。