Updating HP servers firmware and software on Linux using hpsum

Procedure for applying patches

• Download and install hpsum, you can use instructions posted at the bottom of this page to setup repository for this purpose.
• Download DVD iso with “HP Service Pack for Pro Liant Version” (currently version 2015.04.0) and mount it on the server.
• Start hpsum, Baseline library, Add Baseline, point it to soemthing like “DVD/hp/swpackages/bp002502.xml”
• Localhost Guided Update, Assign different baseline, type anything in field to get list of baselines, use 2015.04.0
• Next, Deploy, Reboot, job done and dusted.

Bonus hint

Mount iso image on management server and make it available say with Apache or NGINX if you have more servers to patch up:

 mount -o loop -t iso9660 /state/partition1/service/HP_Service_Pack_for_ProLiant_2015.04.iso /var/www/html/DVD

Point hpsum to “HTTP Share URL” baseline, in my case URL was

http://management.server/DVD/hp/swpackages/bp002502.xml

That will save you some time coping DVD iso around.

 

 

Repositories

 

Personally I find downloads.linux.hpe.com *very* slow. If you have lots of HP servers you might be better of with creating local repo and then modifying below

baseurl

line, pointing this repo to your local copy.

I used this command fetch data from HP servers, roughly 40G of space is needed:

rsync -avH --progress rsync.linux.hpe.com::SDR/repo/hpsum /export/pub/repo/
rsync -avH --progress rsync.linux.hpe.com::SDR/repo/spp /export/pub/repo/

and then I configured NGINX to serve data from /export/pub/

Update June 2016: now I use Spacewalk for this. Create channel, add repo and let Spacewalk take care of keeping this in sync with HP mirror.

 

Centos 7

 

vim /etc/yum.repos.d/hp.repo

[spp]
name=Service Pack for ProLiant
baseurl=http://downloads.linux.hpe.com/repo/spp/rhel/7/x86_64/current/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/GPG-KEY-ServicePackforProLiant
[hpsum]
name=HP Smart Update Manager
baseurl=http://downloads.linux.hpe.com/repo/hpsum/rhel/7/x86_64/current/
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/GPG-KEY-hpsum

then

rpm --import http://downloads.linux.hpe.com/SDR/repo/mcp/GPG-KEY-mcp
yum update && yum install -y hp-snmp-agents hpdiags
wget http://downloads.linux.hpe.com/SDR/repo/hpsum/GPG-KEY-hpsum -O /etc/pki/rpm-gpg/GPG-KEY-hpsum
yum --disablerepo="*" --enablerepo="hpsum" list available
yum install hpsum

Centos 6

vim /etc/yum.repos.d/hp.repo

[hpsum]
name=HP Smart Update Manager
baseurl=http://downloads.linux.hpe.com/repo/hpsum/RedHat/6/x86_64/current/
enabled=1
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/GPG-KEY-hpsum

[HP-PSP-packages]
name=HP Software Delivery Repository Repository for PSP Packages
baseurl=http://downloads.linux.hpe.com/repo/spp/rhel/6/x86_64/current/
enabled=1
gpgcheck=0

 

Centos 5

vim /etc/yum.repos.d/hp.repo

[HP-MCP]
name=HP Management Component Pack
baseurl=http://downloads.linux.hpe.com/SDR/repo/mcp/centos/5/x86_64/current/
enabled=1
gpgcheck=0
[hpsum]
name=HP Smart Update Manager
baseurl=http://downloads.linux.hpe.com/repo/hpsum/RedHatEnterpriseServer/5Server/x86_64/current/
enabled=1
gpgcheck=0
gpgkey=file:///etc/pki/rpm-gpg/GPG-KEY-hpsum

 

Debian

HP support for Debian isn’t great to say at least, only repo available is for management Component Pack (drivers, system management homepage, etc) – see the very bottom of this page.

No Debian repo for hpsum 🙁 I tried some tricks, I grabbed rpm package for RedHat 7, extracted it and started hpsum manually.

sudo mkdir /opt/hp/hpsum -p
wget http://downloads.linux.hpe.com/SDR/repo/hpsum/RedHat/7Server/x86_64/current/hpsum-7.2.1-6.rhel7.x86_64.rpm -O /opt/hp/hpsum/hpsum.rpm
sudo apt-get install rpm2cpio
cd /opt/hp/hpsum
rpm2cpio hpsum.rpm | cpio -i --make-directories
cd /opt/hp/hpsum/opt/hp/hpsum/bin
./hpsum
# hpsum_service_x64 started successfully on port 63001, ssl port 63002 and ftp port disabled.

I was able to point web browser to https://server.adres:63002 logged in OK and tried inventorying/deploying at least firmware updates – but unfortunately hpsum service was dying without any meaningful reason in logs.

So essentially on Debian we are stuck with offline update only (i.e. boot your server from SPP iso or DVD). Bugger.

That is an exact reason why I prefer to go to Dell when shopping for servers! Not only made in Poland so rock solid 😉 but also with great support for Debian.

Debian repo for management Component Pack

vim /etc/apt/sources.list.d/HP-proliantsupportpack.list

Wheezy

deb http://downloads.linux.hpe.com/SDR/downloads/MCP/Debian/ wheezy/current non-free

or Jessie

deb http://downloads.linux.hpe.com/SDR/downloads/MCP/Debian/ jessie/current non-free

and then

wget http://downloads.linux.hpe.com/SDR/repo/mcp/GPG-KEY-mcp
apt-key add GPG-KEY-mcp
aptitude update
apt-get install hpacucli

 

Other way of adding missing key

key=FADD8D64B1275EA3
gpg --keyserver keyserver.ubuntu.com --recv-keys $key
gpg --armor --export $key |apt-key add -

---