view counter

Oracle Linux 6 Installation

Engage the Author Roddy Rodstein Today for your Oracle Project!

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Image CAPTCHA
Enter the characters shown in the image.
 

Copyright © 2013 Mokum Solutions, Inc. All rights reserved.
Distribution of the Oracle Cloud Cookbook or derivative of the work in any form for commercial purposes is prohibited unless prior permission is obtained from the copyright holder.
 
Author: Roddy Rodstein
 
This chapter of the Oracle Cloud Cookbook reviews how to download, install, setup, patch and prepair Oracle Linux 6 for your Oracle technology installations.
 
Table of Contents
 
Change Log
Revision
Change Description
Updated By
Date
1
First Release
Roddy Rodstein
07/15/11
1.1 Linux Patch Management with Free Updates and Errata from Oracle Roddy Rodstein 04/29/12
1.2 oracle-rdbms-server-11gR2-preinstall RPM Roddy Rodstein 05/22/12

Oracle Linux Installation and Oracle Linux Support Introduction

Oracle Linux can be installed either from a CD-ROM drive or ISO file using the graphical (GUI) installation mode or the text installation mode, as well as over the network using a pre-boot execution environment (PXE). The graphical (GUI) and text installation modes for all of the Oracle Linux 6 releases are similarText installation mode has limited capabilities when compared to the GUI installation mode. For example, there is no support for configuring partition layout, storage methods or package selection. To install Oracle Linux using the CD-ROM, ISO file or PXE boot method, visit the Oracle Software Delivery Cloud - Oracle Linux and Oracle VM portal to download the Oracle Linux media. The Oracle Linux media is delivered as a zip file that contains an ISO file. For CD-ROM installations, the ISO file can be burned as a bootable disk and used to install Oracle Linux from a CD-ROM drive. 
 
An Oracle Linux PXE boot installation requires several additional steps; for example, a boot server and a kickstart file to automate the Oracle VM server installation must be created. The boot server allows a bare-metal system to automatically receive an IP address via DHCP, load a kernel via TFTP, and then boot without an operating system. Once the bare-metal server boots, Oracle Linux can be installed using the installation media or a kickstart file to automate the Oracle Linux installation.
 
Note: Oracle Linux is a Red Hat Enterprise Linux tracking distribution. Oracle offers support for Oracle Linux and Red Hat Enterprise Linux. Red Hat offers support exclusively for Red Hat Linux.
 
Oracle recommends installing Oracle Linux using the default software package selection without any customization. Using the default software packages without customizations includes most of the prerequisite packages for Oracle technology products and helps limit the number of manual prerequisite checks.
 
The oracle-rdbms-server-11gR2-preinstall RPM, formally know as oracle-validated, simplifies meeting the software and system configuration prerequisites for installing the Oracle Database, Oracle Enterprise Manager, Oracle E-Business Suite, and many other Oracle technology products on Oracle Linux 6. Installing the oracle-rdbms-server-11gR2-preinstall RPM automatically installs all of the software RPM prerequisites for Oracle Database, Oracle Enterprise Manager, Oracle E-Business Suite, etc..., as well as meeting the system configuration prerequisites, such as creating an oracle user and the oinstall and dba groups, configuring the sysctl.conf settings, system startup parameters, user limits, and driver parameters.

Tip: The oracle-rdbms-server-11gR2-preinstall RPM is available at the Oracle Unbreakable Linux Network, on the Oracle Linux media, and from the Oracle public yum repository.
 
The Oracle Unbreakable Linux Network and the Oracle public yum server are Oracle' cloud repositories for Oracle Linux and Oracle VM RPMs, software patches, updates and fixes. Access to Unbreakable Linux Network requires an Oracle Single Sign-on account, a valid customer service identifier (CSI) and registration. Access to the Oracle public yum server is open to the public without registration.
 
The Oracle Unbreakable Linux Network is a cloud resource for Oracle Linux Support customers used to access Oracle Linux and Oracle VM RPM repositories, including software patches, updates and fixes. The Oracle Unbreakable Linux Network portal is located at http://linux.oracle.com. The Oracle Unbreakable Linux Network portal provides a simple dashboard and management interface for registered Linux systems and RPM channels. The Oracle Unbreakable Linux Network repositories are used to patch and install RPMs for Oracle Linux and Oracle VM systems. Oracle Linux support customers have the option to access patchs and RPMs for Oracle Linux and Oracle VM systems from the Oracle Unbreakable Linux Network using the yum program, or from a local yum repository.
 
The Unbreakable Linux Network is password protected. Before you can access the Oracle Unbreakable Linux Network you must have a valid Oracle Linux support contract, CSI number and an Oracle Single Sign-on account. Your existing My Oracle Support (MOS) Oracle Single Sign-on account will not work with the Oracle Unbreakable Linux Network until the account has been registered with the Oracle Unbreakable Linux Network. Click the Register link at the Oracle Unbreakable Linux Network portal to a) create a new Oracle Single Sign-on account or to b) associate your existing Oracle Single Sign-on account with the Oracle Unbreakable Linux Network. Once you have a valid support contract, and CSI number, you can register Oracle Linux systems at the Unbreakable Linux Network by typing “uln_register” as root.
 
In March 2012, Oracle announced that Oracle Linux 4, 5 and 6 latest RPM patches, updates and erratas are available at no cost from the Oracle public yum server located at http://public-yum.oracle.com. The free Oracle Linux 4, 5 and 6 RPM patches, updates and erratas do not include Oracle support or any of the benefits of the Oracle Linux Support program.
 
Oracle's public yum server allows us to keep Oracle Linux, Red Hat Enterprise Linux, and Oracle VM  system up to date to the latest update version, using the "_latest" RPM repository. The Oracle public yum repository RPMs, patches, updates and erratas do not include Oracle support or any of the benefits of the Oracle Linux Support program.
 
The Oracle Linux Support program offers the following benefits over and above the free Oracle Linux RPM patches, updates and erratas from the Oracle public yum server:
  • Full indemnification against intellectual property claims.  Remember the SCO lawsuits?
  • Use of the Oracle Enterprise Manager 12c Linux Host Patching feature for patch management. Oracle Enterprise Manager 12c Linux Host Patching feature has feature parity with Red Hat Satellite Server.
  • Use of the Oracle Enterprise Manager 12c Virtualization Plug-in for Oracle VM for provisioning, patching, management and monitoring.
  • Access to additional Oracle software channels on the Unbreakable Linux Network (ULN).
  • Patch channels for each Linux update level.
  • The ability to create Support Requests with Oracle' World Class support organization.
The Oracle public yum server latest RPM channel include the base OS version installation RPM packages along with the latest software patches, updates and fixes. Patch jobs using the latest RPM channel update hosts to their respected latest version update with the latest software patches, updates and fixes. A patch job executed on a Oracle Linux 6 host would update the host from 6 to 6U3 with the latest latest software patches, updates and fixes. To keep a host at its respected update level, a valid CSI and the Unbreakable Linux Network is required. With the Unbreakable Linux Network, it is possible to register a host the el*/ol*_base channel along with the el*/ol*_patch RPM channel. When hosts are patched using the el*/ol*_base and el*/ol*_patch RPM channels, the hosts are patched with the latest software patches, updates and fixes from their respected update channel, i.e. 6, 6U1, 6U2 and 6U3.
 

Oracle Linux Packaging and Support Pricing

Oracle Linux is not a licensed Oracle technology product. The Oracle Linux installation media is freely available from the Oracle eDelivery Linux portal. Support for Oracle Linux and access to the Unbreakable Linux Network is available as an add-on component of Oracle’s enterprise support package as well as with Sun x86 hardware as an add-on Premier Support for Systems package. Oracle Linux running on third-party hardware (not on Sun Hardware) is always sold as an add-on support component of Oracle’s enterprise support package.
 
Premier Support for Systems costs 12% of the net Sun system purchase price and includes comprehensive support for the system hardware and firmware, as well as operating system support for Oracle Linux, Solaris x86, Solaris 11 Express, and Oracle VM for x86. Along with hardware and firmware support, Premier Support for Systems includes operating system support for one or more virtual instances Oracle Linux, Solaris 10 x86, and Solaris 11 Express x86 running on Oracle VM for x86.
 
Support for Oracle Linux installed on third-party hardware is sold in three packages: Oracle Linux Network, Oracle Linux Basic, and Oracle Linux Premier.
 
List 2 highlights the difference between the three different Oracle Linux support packages.
  • Oracle Linux Network Support includes access to the Unbreakable Linux Network for patches, fixes and security alerts. Oracle Linux Network support does not include 24x7 global OS support. For example, Oracle Linux Network Support does not include the ability to create Service Requests (SRs) to work with Oracle support.
  • Oracle Linux Basic Support includes 24x7 global OS support, access to the Unbreakable Linux Network for patches, fixes and security alerts, the Linux Management Pack (An Oracle Enterprise Manager Linux server lifecycle management Plug-in), and Oracle's OCFS2 cluster software for servers with up to two sockets.
  • Oracle Linux Premier Support includes 24x7 global OS support, access to the Unbreakable Linux Network for patches, fixes and security alerts, the Linux Management Pack (An Oracle Enterprise Manager Linux server lifecycle management Plug-in), Oracle's OCFS2 cluster software, Premier backports, and Oracle Lifetime Support for servers with four or more sockets.

How to Download the Oracle Linux Installation Media

The Oracle Linux Installation media is freely available at the Software Delivery Cloud - Oracle Linux and Oracle VM portal. Access to the Software Delivery Cloud - Oracle Linux and Oracle VM portal requires an Oracle.com user account and password to authenticate into the Oracle Linux and Oracle VM Cloud Portal. If you do not already have an Oracle.com user account, visit the Oracle Linux and Oracle VM Cloud Portal, click the Sign In / Register link or button to create an Oracle.com account.
 
Figure 1 shows the Software Delivery Cloud - Oracle Linux and Oracle VM portal.
Oracle Linux Download
 
From the Sign In page, enter your Oracle.com user name and password, then click the Sign In button.
 
Figure 2 shows the Oracle.com Sign In page.
Oracle Linux Download Sign In
 
Once authenticated, accept the registration/export regulations to access to the Oracle VM and Oracle Linux Media.
 
Figure 3 shows the registration/export regulations form.
Oracle Linux Terms & Restrictions
 
After completing the registration/export regulation form, you will be redirected to the Media Pack Search page. From the Media Pack Search page, select Oracle Linux from the Select a Product Pack dropdown menu. Next, select x86 64-bit or x86 32-bit from the Platform dropdown menu, then click the Go button to be taken to the Oracle Linux Media Pack download page.
 
Tip: If you do not see Oracle Linux or Oracle VM from the Select a Product Pack dropdown menu, you are not in the Oracle Linux and Oracle VM section of the Software Delivery Cloud. Click the Software Delivery Cloud link in the page header, then click the Oracle Linux/VM drop down menu to be redirected to the Oracle Linux and Oracle VM section of the Software Delivery Cloud .
 
Figure 4 shows the Media Pack Search page.
Oracle Linux Media Pack Search
 
 
From the Oracle Linux Media Pack page, click the desired Oracle Linux Media Pack hyperlink, or select the radio button and click the Continue button to go to the download page.
 
Tip: Do not download the source DVD for an operating system installation. Oracle Linux is distributed as Open Source software, therefore the source DVD is also available along with the DVD ISO images. The source DVDs are required by the GNU GPL license.
 
Figure 5 shows the Oracle Linux x86 64 bit Media Pack page highlighting the Oracle Linux Release 6 Update 3 for x86_64 (64 Bit) ISO file download.
Oracle Linux ISO Media Pack
 
From the Oracle Linux Media Pack download page, click the Download button for the ISO file or DVD.
 
Figure 6 shows the Oracle Linux Release 6 Update 3 Media Pack for x86_64 (64 bit) download page.
Oracle Linux Download
 
The Oracle Linux media is delivered as ISO files for OL6 and as DVD images for OL5 and 4.
 

Oracle Linux 6 Installation using the Graphical (GUI) Mode

This section reviews how to install Oracle Linux and Red Hat Enterprise Linux from the DVD/CD-ROM, using the graphical (GUI) mode.
 
1- Boot the server using the DVD ISO image. At the boot prompt, press the Enter key to start the Oracle Linux installation in graphical mode.
 
Tip: The installer needs at least 406 MB of RAM to work. Text mode will automatically be used if the system has less than 632 MB of RAM.
 
Figure 1
Oracle Linux 6 Installation
 
2- On the CD Found window, you can perform a media test to validate the integrity of the installation media. The media test is optional and time consuming. In this example, we will not perform a media test.
 
Press the tab key to select the Skip key. Once the Skip key is selected, press the Enter key to proceed.
Figure 2
Oracle Linux 6 Installation
 
3- On the Welcome screen, click the Next button or Alt+N to proceed.
Figure 3
Oracle Linux 6 Installation

4- On the Language Selection screen, select the preferred language that will be used during the installation process. In this example, select the default language, English (English).
 
Accept the default English (English) language selection, then click the Next button or press Alt+N to proceed.
Figure 4
Oracle Linux 5 Installation
 
5- On the Keyboard Selection screen, select the desired keyboard setting for the system. In this example, select the default keyboard selection, US English.
 
Accept the default US English keyboard selection, then click the Next button or press Alt+N to proceed.
Figure 5
Oracle Linux 6 Installation
 
6- On the Storage Device screen, you can select the Basic Storage Devices or the Specialized Storage Devices options. 


 
In this example, accept the default Basic Storage Devices option, click the Next button or press Alt+N to proceed.
Figure 6
Oracle Linux 6 Installation
 
7- A disk initialization Warning dialogue box will appear after you make your Storage Device selection. Click the Re-initialize button or press Alt+R to proceed with the installation.
Figure 7
Oracle Linux 6 Installation
 
8- On the Networking configuration screen, you can accept the default DHCP setting or configure the networking manually. To use DHCP, accept the defaults, and click the Next button or press Alt+N to proceed.
 
Click the Configure Network button to review the network configurations.
Figure 8
Oracle Linux 6 Installation
 
9- From the Network Connections screen, select the desired connection, i.e. eth0 and click the Edit button.
Figure 9
Oracle Linux 6 Installation
 
10- On the Editing System screen select the Connect automatically checkbox to enable the interface automatically start when the system is starts. To configure the networking manually, click the desired tab to configure the selected interface. Click the Apply button to save the networking setting and to return to the Network Connections screen.
Figure 10
Oracle Linux 6 Installation
 
11- On the Networking Connections screen, click the Close button or press Alt+C, next  click the Next button or Alt+N to proceed.
Figure 11
Oracle Linux 6 Installation
 
12- On the Time Zone screen, select the time zone for your area by clicking your region on the map. Accept the default System clock uses UTC setting, and click the Next button or press Alt+N to proceed.
Figure 12
Oracle Linux 6 Installation
 
13- On the Root Password screen enter a root password for the server, then click the Next button or press Alt+N to proceed.
Figure 13
Oracle Linux 6 Installation
 
14- On the Installation Type screen, you can select the desired partitioning layout or create your own partitioning layout. 

 
In this example, accept the default Replace Existing Linux System(s), click the Next button or press Alt+N to proceed.
 
Note: To edit the default partitioning layout, select Review and modify partitioning layout  option and click Next or Alt+N.
Figure 14
Oracle Linux 6 Installation
 
15- A partition table Warning dialogue box will appear after clicking the previous Next button. Click the Write changes to disk or press Alt+W to proceed.
Figure 15
Oracle Linux 6 Installation
 
16- On the Software Selection screen, you can accept the default selections or select one or more roles for the server and/or customize the entire software selection by selecting the Customize now.
 
Note: The default selections will not install a desktop environment.
 
Oracle recommends installing Linux using the default software package selection without any customization. Using the default software packages without customizations includes most of the prerequisite packages and helps limit the number of manual checks.
 
Select the Desktop option without any customization, then click the Next button or press Alt+N to proceed.
Figure 16
Oracle Linux 6 Installation
 
17- On the Installation Progress screen, you will see a dialogue box about the installation starting. Once the Starting Installation process screen is gone, the installation begins and you see the progress indicators. The installation will take a few minutes.
Figure 17
Oracle Linux 6 Installation
 
18- The Congratulations screen informs you that the installation is complete, and to remove your DVD media from the system and to reboot the system.
 
Remove the CD/DVD media from the system, and click the Next button or press Alt+t to reboot the system.
Figure 18
Oracle Linux 6 Installation
 
19- After the system reboots, you will be presented with the Welcome screen. Click the Forward button or press Alt+F to proceed.
Figure 19
Oracle Linux 6 Installation
 
20- On the License Agreement screen, accept the license agreement and click the Forward button or press Alt+F to proceed.
Figure 20
Oracle Linux 6 Installation
 
21- On the Set Up Software Updates screen, select the desired Unbrekable Linux Network registration option, then click the Forward button or press ALT+F to proceed.
Figure 21
Oracle Linux 6 Installation
 
22- If you selected No from the previous screen, click the No thanks, I'll connect later. button to proceed.
Figure 22
Oracle Linux 6 Installation
 
23- On the Finish Update Setup screen click the Forward button or press ALT+F to proceed.
Figure 23
Oracle Linux 6 Installation
 
24- On the Create User screen, you can create new system users. Click the Forward button or press Alt+F to proceed.
Figure 24
Oracle Linux 6 Installation
 
25- On the Date and Time screen you can configure the Date and Time and Network Time Protocol (NTP) settings. Configure the Date and Time and Network Time Protocol settings, then click the Forward button or press Alt+F to proceed.
Figure 25
Oracle Linux 6 Installation
 
26- On the Kdump screen, accept the default setting and click the Forward button or press Alt+F to proceed.

 
Figure 26
Oracle Linux 6 Installation
 
27- On the Login screen, click on the desired user name and enter the password to access the desktop.

 
Figure 27
Oracle Linux 6 Installation
 
28- Once you have successfully authenticated, you have a fully functional GNOME desktop environment.
 
Figure 28
Oracle Linux 6 Installation
 

Oracle Linux 6 Installation using using Text Mode

Text installation mode has limited capabilities when compared to the GUI installation mode. For example, there is no support for configuring partition layout, storage methods or package selection. The installer needs at least 406 MB of RAM to work. Text mode will automatically be used if the system has less than 632 MB of RAM.

For a text mode installation, at the boot prompt below press tab and enter text after the boot line.
Figure 44
 
Oracle Linux Installation Text Mode
 
Press <Enter> to begin the Installation process. We do not need to test the installation media, so select “Skip” and then press <Enter>.
Figure 45
Oracle Linux Disk Found
 
This takes us to the Welcome screen. Press <Enter> to continue.
Figure 46
 
Welcome to Oracle Linux server
 
Choose your language, press <Tab> to highlight the OK button then press <Enter>.
Figure 47
 
Oracle Linux Language Selection
 
Select the model of your keyboard, press <Tab> to highlight the OK button, then press <Enter>.
Figure 48
 
Oracle Linux Keyboard Selections
 
Press <Tab> to highlight the Re-initialize button then press <Enter> to continue.
Figure 49
 
Oracle Linux Re-initialize Disk
 
Use the default UTC (Coordinated Universal Time) if appropriate for your environment. Select your Time Zone then press <Tab> to highlight the OK button then press <Enter>.
Figure 50
 
Oracle Linux Time Zone
 
Define the root password for your new VM. Press <Tab> to highlight the OK button then press <Enter>.
Figure 51
 
Oracle Linux Root Password Selection
 
Partition using the entire drive, select the appropriate drive then press <Tab> to highlight the OK button then press <Enter>.
Figure 52
 
Oracle Linux Partitioning Type
 
Press <Tab> to highlight the Write changes to disk button then press <Enter>.
Figure 53
 
Oracle Linux Writing Storage Configuration to Disk
 
The installer now creates and formats the volume group and filesystems.
Figure 54
 
Oracle Linux Formatting
 
At this point, installation of your new Oracle Linux system will begin.
Figure 55
 
Oracle Linux Installation Starting
 
This is a Minimal Install so only the base 226 packages are now installed.
Figure 56
 
Oracle Linux Package Installation
 
Press <Tab> to highlight Reboot, then press <Enter> to reboot the system and access the logon prompt.
Figure 57
Oracle Linux Installation Complete
 
A text installaion does not setup networking. After the text installaion completes, access the host as root and configure the networking.
 
There are 3 steps involved:
  • Configure the network interface
  • Configure the hostname
  • Configure DNS 
 

Networking Setup

The network interface configuration files are located in the /etc/sysconfig/network-scripts/ directory. Each network interface has a corresponding interface configuration script. Each files, i.e. /etc/sysconfig/network-scripts/ifcfg-<interface-name> provide information specific to a particular network interface. 
 
To edit or setup an interface, change directory to /etc/sysconfig/network-scripts/:
# cd /etc/sysconfig/network-scripts/
 
Edit edit or create the following files:
/etc/sysconfig/network-scripts/ifcfg-eth0: First Ethernet card configuration file
/etc/sysconfig/network-scripts/ifcfg-eth1: Second Ethernet card configuration file
 
To edit or create the first interface (eth0), type:
 
# vi ifcfg-eth0
 
Append or modify as follows:
 
DEVICE=eth0
BOOTPROTO=static
DHCPCLASS=
HWADDR=00:31:58:66:A6:5E
IPADDR=192.168.2.120
NETMASK=255.255.255.0
GATEWAY=192.168.2.254
NETWORK=192.168.2.0
ONBOOT=yes
 
Save and close the file. 
 
Define the hostname in /etc/sysconfig/network file and in /etc/hosts:
The /etc/sysconfig/network file is used by Linux to specify network configurations. By default, /etc/sysconfig/network contains the following options:
NETWORKING=boolean 
Enter a Boolean yes to enable networking, enter no to disable networking.
NETWORKING=yes
 
HOSTNAME=value 
Enter the hostname of the machine. For example:
HOSTNAME=hostname.example.com
 
As root type "vi /etc/sysconfig/network" to enter the hostname of the machine:
 
Append or modify as follows:
 
HOSTNAME=myserver.example.com
 
Save and close the file. 
 
Oracle technology products, including Oracle Enterprise Manager, rely on a properly formatted /etc/hosts file which allows the host to be pingable, with long and short host names. The host name in the /etc/hosts file must be associated with the server's public IP address.
 
The next example shows the proper syntax from a /etc/hosts file. Note that the localhost entries are one one line, and the IP address with the long and short names are on the next line.
 
127.0.0.1 localhost.localdomain localhost
192.168.4.8 servername.com servername
 
The next example shows an improperly formatted /etc/hosts file. Note that the long and short names are on the same line as the localhost entries.
 
127.0.0.1 servername.com servername localhost.localdomain localhost
192.168.4.8 servername.com servername
 
Tip: The IPv6 entries in the /etc/hosts files should be removed to aviod "Bug 13652664 : AGENT DEPLOY FAILS WITH AGENT PORT PASSED BY USER IS BUSY" with Oracle Management Agent installations:
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
 
The /etc/hosts file can be edited by the root user bu typing “vi /etc/hosts”, as shown in the next example.
 
# vi
127.0.0.1 localhost.localdomain localhost
192.168.4.8 servername.com servername
 
Save and close the file. 
 
Next, restart networking:
# service network restart
 
Setup DNS in the /etc/resolv.conf file:
The resolv.conf file is used by Linux to configure the Domain Name System (DNS) resolver library. The resolv.conf file contains directives including the default search domains used for fully qualified domain name (FQDN) completion when no domain suffix is supplied as part of a query. The resolv.conf file also contains a list of IP addresses of nameservers available to a host. For more information about this file, refer to the resolv.conf man page.
 
The /etc/resolv.conf file can be edited by the root user bu typing “vi /etc/resolv.conf”, as shown in the next example.
# vi /etc/resolv.conf
 
Setup the search prefix and the DNS Server as follows:
 
search my.domain1.com my.domain2.com
nameserver 8.8.8.8
nameserver 8.8.4.4
 
Save and close the file. Next, ping the gateway or other hosts to confirm connectivity:
 
$ ping yahoo.com
 

802.1Q Setup

The IEEE 802.1Q standard was introduced to partition large networks into smaller virtual local area networks (VLANs) using software without the need to move cables or add switch ports. The IEEE 802.1Q standard also defines how multiple layer-2 networks/VLANs can share the same physical link, this is also referred to as EtherChannel and 802.1Q trunking.
 
For example, with 802.1Q adding a network to a local area network (LAN) entails provisioning a VLAN on the switch and enabling the VLAN on the desired switch ports and/or trunks. Linux hosts that are connected to the switch ports and/or trunks could use the new VLAN by creating a VLAN interface on the desired NIC and/or bond without moving or changing the network cabling.
 
The following configuration enables 802.1q for the current session.
 
First, as root, enable the 8021q kernel module by typing "modprobe 8021q".
 
# modprobe 8021q
 
Next, create a VLAN interface on eth0, i.e. VLAN 21. Substitute 21 with the desired VLAN ID for your VLAN.  
 
# vconfig add eth0 21
 
Next, plumb the VLAN interface.
 
# ifconfig eth0.21 xx.xx.xx.xx netmask xx.xx.xx.xx up
 
To preserve the 802.1 configuration across reboots, create a /etc/sysconfig/network-scripts file for the VLAN interface.
 
# vi /etc/sysconfig/network-scripts/ifcfg-eth0.21
DEVICE=eth0.21
IPADDR=xx.xx.xx.xx
NETMASK=xx.xx.xx.xx
ONBOOT=yes
BOOTPROTO=static
USERCTL=no
VLAN=yes
 
Next, edit the /etc/sysconfig/network-scripts/eth0 file as shown in the next example:
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=none
USERCTL=no
HWADDR=00:25:90:75:3C:2F
 
Once the /etc/sysconfig/network-scripts file is created, restart the network service to load the interface.
 
# service network restart
 

Disable IPv6

Even if IPv6 is not being used, IPv6 can still cause problems such a duplicate addresses with many Oracle technology products. For example, IPv6 uses a dual stack protocol format that runs IPv4 and IPv6 at the same time. IPv6 creates an IPv6 interface for each IPv4 interface. WebLogic and many other Oracle technologies see the IPv6 interfaces as duplicate address. If IPv6 is not being used, a best practice is to disable IPv6.
 
The first step to desable IPv6 is to create a new file /etc/modprobe.d/ECS.conf containing:
alias net-pf-10 off
alias ipv6 off
 
Next, edit /etc/sysconfig/network and add the following line:
NETWORKING_IPV6=off
 
Next, type chkconfig ip6tables off
 
Finally, remove the IPv6 entries in the /etc/hosts file to aviod "Bug 13652664 : AGENT DEPLOY FAILS WITH AGENT PORT PASSED BY USER IS BUSY" with Oracle Management Agent installations. The next example shows the Pv6 entries in the /etc/hosts file that should be removed.
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
 

iptables

iptables is a userspace firewall application used to configure the Linux IPv4 and IPv6 packet filtering rulesets. iptables is installed and enabled by default on Oracle Linux with a default policy and ruleset in /etc/sysconfig/iptables. iptables rules can be configured at the command line as well as with the system setup utility, i.e. "/usr/bin/setup".
 
Host firewalls, for example iptables, are a fundamental part of an information security program. If your information security program requires host firewalls, a best practice is to configure host firewalls during the last phase of the Oracle deployment.
 
To open the necessary ports in iptables, as root edit the /etc/sysconfig/iptables file and add the desired iptables rules. The next example show the iptables rules from a default Oracle Linux installation.
 
*filter
:INPUT ACCEPT [1:52]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1:148]
-A INPUT -p tcp -m state --state NEW -m tcp --dport 10000 -j ACCEPT
COMMIT
 
The next example shows the iptabes rules from a Oracle Linux host with an Oracle Database that allows a SQL client with IP address 192.168.30.101 to communicate with the Database. 
 
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
# What: oracle database: permit SQL*Net traffic from client
-A INPUT -m state --state NEW -m tcp -p tcp -s 192.168.30.101 --dport 1521 -j ACCEPT
# End of modifications for oracle database
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
 
iptables can be disabled by typing the following command as root.
# service iptables stop && service ip6tables stop && chkconfig iptables off && chkconfig ip6tables off
 
iptables can be re-inabled by typing the following command as root.
# service iptables start && service ip6tables start && chkconfig iptables on && chkconfig ip6tables on
 

SELinux

Security Enhanced Linux (SELinux) is a default Linux feature that offers mandatory access controls, using Linux kernel security modules (LSM) along with user-space tools. Starting with Oracle Database 11g Release 2 (11.2), Security Enhanced Linux is supported for Oracle Linux 4, Red Hat Enterprise Linux 4, Oracle Linux 5, and Red Hat Enterprise Linux 5. Security Enhanced Linux is not supported for the Oracle Enterprise Manager 12c Oracle Management Service.
 
Mandatory access controls, for example Security Enhanced Linux, may be a part of your organizations information security program. If your information security program requires mandatory access controls for the 12c Oracle Management Repository, a best practice is to configure Security Enhanced Linux during the last phase of the Enterprise Manager deployment.
 
To confirm the status of SELinux, as root type sestatus as shown in the next example.
# sestatus
SELinux status:                 disabled
 
The above example shows a host with SELinux disabled.
 
Security Enhanced Linux can be temporarily disabled by typing "echo 0 > /selinux/enforce", as root. Security Enhanced Linux can be re-enabled by typing "echo 1 > /selinux/enforce", as root.
 
Security Enhanced Linux can be permanently disabled by changing the "SELINUX=enforcing" entry to "SELINUX=disabled" in the "/etc/selinux/config" file. Security Enhanced Linux can be re-enabled by changing the "SELINUX=disabled" entry to "SELINUX=enforcing" in the "/etc/selinux/config" file. A re-boot is required after changing the "SELINUX=” value to enable to new settings.
 

SSH and X11 Forwarding

Installing the Oracle Enterprise Manager 12c components using the Oracle Universal Installer (OUI) GUI requires local or remote access to the server' console or a remote X Windows (X11) session. Please note that the only software requirements on the Linux Oracle Enterprise Manager host for remote X Windows (X11) sessions is the xauth RPM package. The xauth RPM package handles the X11 forwarding authentication. X-windows and xhost are not required on the Linux Oracle Enterprise Manager host for remote X Windows (X11) sessions. 
 
SSH and X11 forwarding enables the redirection of an X11 session from a remote Oracle Linux machine to a local desktop. For example, from a local desktop, ssh to a remote Oracle Linux server using X11 forwarding and run the Oracle Universal Installer, i.e. by typing “./runInstaller”. The Oracle Universal Installer will be displayed on the local desktop and the Oracle Enterprise Manager 12c components can be installed on the remote Oracle Linux server.  
 
On the Oracle Linux server, enable X11 forwarding in the /etc/ssh/sshd_config by adding "ForwardX11 yes" to the file as shown in the next example.
 
Change
#X11Forwarding no
to
X11Forwarding yes
 
Once the "ForwardX11 yes" entry has been added to the /etc/ssh/sshd_config file, restart ssh by typing "service sshd restart" to enable X11 forwarding. With X11 forwarding enabled, the Oracle Universal Installer (OUI) GUI can be exported from the Oracle Linux server to your local desktop.  
 
Tip: To aviod X11 challanges install the xauth and xorg-x11-apps RPMs on the Linux host. To check for the RPMs, as root type, rpm -qa | grep -i xauth and rpm -qa | grep -i xorg-x11-apps. To install xauth and the xorg-x11-apps RPMs, type yum -y install xorg-x11-apps xauth
 
To enable X11 forwarding from a Linux desktop, use the "-X" switch with ssh. For example, type "ssh -X oracle@<ORACLE LINUX SERVER>" to create a ssh tunnel with X11 forwarding. Do not forget that -X enables X11 forwarding, and -x actually disables X11 forwarding. Also, using the su command within a SSH session with X11 forwarding breaks X11 authentication.
 
To test remote X Windows (X11), open a new ssh session with X11 forwarding enabled (ssh -X user@servername), and type xclock. The xclock application should open on your desktop. xclock is an X window client application that is included in the xorg-x11-apps RPM package. xclock is often used to test remote X Windows (X11) sessions.
 
Tip: To troubleshoot ssh connections, use ssh verbose mode, i.e. ssh -v -v -X user@servername
 
If your using a Windows PC, a PC X Server like XMing is required to run an X Windows session, along with an ssh client like putty that supports X11 forwarding.
 

OS Watcher Black Box Setup

OS Watcher Black Box (oswbb) is a utility that uses native Linux commands and shell scripts to collect and archive metrics for diagnostics and performance troubleshooting. OS Watcher Black Box operates as a set of background processes that collect and archive data on a regular basis, using ps, top, mpstat, iostat, netstat, traceroute and vmstatOS Watcher Black Box is comprised of three components:
1. oswbb: a shell script that collects and archives data
2. oswbba: a java utility with a GUI used to analyze oswbb data with charts and graphs
3. oswbb-service-1.1.5-1.noarch.rpm: The init script to automatically start OS Watcher Black Box
 
OS Watcher Black Box (oswbb & oswbba) can be downloaded via My Oracle Support document ID 301137.1: OSWatcher Black Box (Includes: [Video]) [ID 301137.1]. The init script (oswbb-service-1.1.5-1.noarch.rpm) to automatically start OS Watcher Black Box can be downloaded via My Oracle Support document ID 580513.1: How To Start OSWatcher Black Box Every System Boot [ID 580513.1]

Tip: OSW is one of Oracle support's primary tool for working Linux Service Requests (SRs). To expedite your Linux SRs, always include the OSW archive files from each Linux Server.
 
OS Watcher Black Box Installation and Setup
Once you have downloaded the OS Watcher Black box tar file and the oswbb-service, copy the tar file and the RPM file to each Linux Server and untar the file in the directory where you would like to run OS Watcher Black Box, i.e. /opt, and install the RPM.
 
The next example shows how to install OS Watcher Black Box. Substitute path_to_the_oswbb_directory with the directory name you would like to place and run OS Watcher Black Box. As root type:
# tar xvf oswbb601.tar -C path_to_the_oswbb_directory, i.e. tar xvf oswbb601.tar -C /opt
 
Next, chown the oswbb directoty to root, chown -R /opt/oswbb.
 
Next, install the RPM by typing rpm -ivh oswbb-service-1.1.5-1.noarch.rpm. The oswbb-service RPM package adds an init script with the osw service to run the OS Watcher Black Box at system boot, and to stop it down gracefully at system shutdown. OS Watcher Black Box can be started and stoped using the standard Linux init scripts:
# /sbin/chkconfig oswbb on
The oswbb-service RPM package automatically configures the osw service to start at runlevel 3, 5 and 5. The next example shows the default runlevels for the oswatcher service.
# chkconfig --list |grep oswatcher
oswatcher       0:off   1:off   2:on    3:on    4:on    5:on    6:off
OS Watcher Black Box can be started by typing:
# /sbin/service oswbb start
OS Watcher Black Box can be stoped by typing:
# /sbin/service oswbb stop
 
The last step is to edit the OS Watcher Black Box configuration file with your enviromentail settings. The OS Watcher Black Box configuration file is located at /etc/oswbb.conf.
 
The next example shows the default OS Watcher Black Box settings. The bold text below should be edited to meet your environmental requirements.
 
# cat /etc/oswbb.conf
# Set OSW_HOME to the directory where your OSWatcher tools are installed
OSW_HOME='/opt/osw'
# Set OSW_INTERVAL to the number of seconds between collections
OSW_INTERVAL='60'
# Set OSW_RETENTION to the number of hours logs are to be retained
OSW_RETENTION='48'
# Set OSW_USER to the owner of the OSWHOME directory
OSW_USER='root'
# Set OSW_COMPRESSION to the desired compression scheme
OSW_COMPRESSION='gzip'


The OSW_HOME directive controls the {OSWHOME} directory. {OSWHOME} is where the oswatcher logs are kept. For example, the default OSW_HOME=/opt/osw creates the /opt/ows directory for the log files. The OSW_INTERVAL directive controls the interval in seconds between statistics collections. The default OSW_INTERVAL='60' should not be modified, unless requested by Oracle support. The OSW_RETENTION='48' directive controls the retention policy in hours of the log files in the {OSWHOME}/archive directory. 
 
The OSW log files are saved in the following directories:

{OSWHOME}/archive/
oswiostat
oswmeminfo
oswmpstat
oswnetstat
oswprvtnet
oswps
oswslabinfo
oswtop
oswvmstat

 

Linux Patch Management using the Oracle Unbreakable Linux Network

Before an Oracle Linux host can be regsistered and patched from the Oracle Unbreakable Linux Network, Oracle’s GPG key must be imported using the rpm command. To import the Oracle’s GPG key, as root type “rpm --import /etc/pki/rpm-gpg/RPM-GPG-KEY”.

The Unbreakable Linux Network registration requires an Oracle Single Sign-on account and a valid customer service identifier (CSI). Before registering the yum server, visit the Unbreakable Linux Network, sign in, or create an Oracle Single Sign-on account, then sign in to the Unbreakable Linux Network portal.
 
Tip: If the RPM-GPG-KEY is not in the /etc/pki/rpm-gpg/ directory, locate the file and use the correct path to import the GPG key. For example, as root, type "find / -name RPM-GPG-KEY -print" to locate the RPM-GPG-KEY file.
 
Once the GPG key has been imported, the Linux host can be registered at the Oracle Unbreakable Linux Network from the command line or using a X Windows application. Linux 6 systems use the "uln_register" command as root to access the registration screen. The registration process requires you to enter your Unbreakable Linux Network associated Oracle Single Sign-on user name and password and a valid Oracle Linux Support Identifier number (CSI).
 
Oracle Linux 6 systems use the “--proxy” option to specify a http proxy, i.e. “# uln_register --proxy=<HOST NAME>:<PORT NUMBER> “. If your proxy server requires authentication, use the “--proxyUser” and “--proxyPassword” to add a username and password, i.e “# uln_register –proxy=<HOST NAME>:<PORT NUMBER> --proxyUser=<USER NAME> --proxyPassword=<PASSWORD>”
 
List 4 shows the six steps to register a Linux host with the Oracle Unbreakable Linux Network:
1.      Review the Unbreakable Linux Privacy Statement
2.      Register a User Account
3.      Register a System Profile—Hardware
4.      Register a System Profile—Packages
5.      Send Profile Information to the Unbreakable Linux Network
6.      Finished Registration
 
The following examples walk through the six steps to register a Linux host with the Oracle Unbreakable Linux Network.
 
Step 1. Review the Unbreakable Linux Privacy Statement
From the Review the Unbreakable Linux Privacy Statement screen use the Alt key to select the Next tab, once the Next tab is selected press the Enter key to proceed.  
 
Figure 1 shows the Review the Unbreakable Linux Privacy Statement screen.
Unbreakable Linux Privacy Statement

Step 2. Register a User Account
On the Register a User Account screen, enter your  your Unbreakable Linux Network associated Oracle Single Sign-on User namePassword, Password confirmation and a valid Oracle VM CSI number. Use the Alt key to select the Next tab, and then press the Enter key to proceed.
 
Figure 2 shows the Register a User Account screen.
Oracle Unbreakable Linux Network Register a User Account
 
Step 3. Register a System Profile—Hardware
On the Register a System Profile—Hardware screen, accept the defaults and use the Alt key to select the Next tab. Once the Next tab is selected, press the Enter key to proceed.
 
Note: The information gathered from the system profile step is saved in your user profile at the Oracle Unbreakable Linux Network. 
 
Figure 3 shows the Register a System Profile—Hardware screen.
Oracle Unbreakable Linux Network Register a System Profile
 
Step 4. Register a System Profile— Packages
On the Register a System Profile—Packages screen, accept the defaults and use the Alt key to select the Next tab. Once the Next tab is selected, press the Enter key to proceed.
 
Figure 4 shows the Register a System Profile—Packages screen.
Oracle Unbreakable Linux Network Register a System Profile
 
Step 5. Send Profile Information to the Unbreakable Linux Network
From the Send Profile Information to the Unbreakable Linux Network screen, accept the defaults and use the Alt key to select the Next tab. Once the Next tab is selected, press the Enter key to proceed.
 
Figure 5 shows the Send Profile Information to the Unbreakable Linux Network screen.
Oracle Unbreakable Linux Network Send Profile Information
 
Step 6 Finished Registration
On the Finished Registration screen, accept the defaults and use the Alt key to select the Next tab. Once the Next tab is selected, press the Enter key to proceed.
 
Figure 6 shows the Finished Registration screen.
Oracle Unbreakable Linux Network Registration Finnshed
 
The Oracle Linux host has been successfully registered.
 
Next, type “yum update -y” to patch the host.

 

Linux Patch Management with Free Updates and Errata from Oracle

In March 2012, Oracle announced that Oracle Linux 4, 5 and 6 latest RPM patches, updates and erratas are available at no cost from separate yum repositories on http://public-yum.oracle.com. Oracle's public yum repository allows us to keep Oracle Linux and Red Hat Enterprise Linux system up to date to the latest update version, using the "_latest" RPM repository. The free Oracle Linux 4, 5 and 6 RPM patches, updates and erratas do not include Oracle support or any of the benefits of the Oracle Linux Support program.

The Oracle Linux Support program offers the following benefits over and above the free Oracle Linux RPM patches, updates and erratas:
  • Full indemnification against intellectual property claims.  Remember the SCO lawsuits?
  • Use of the Oracle Enterprise Manager 12c Systems Management Plug-in for Linux for provisioning, patching, management and monitoring.  The Systems Management Plug-in for Linux has feature parity with Red Hat Satellite Server.
  • Access to additional Oracle software channels on the Unbreakable Linux Network (ULN).
  • The ability to create Support Requests with Oracle' World Class support organization.
The Oracle public yum server latest RPM channel include the base OS version installation RPM packages along with the latest software patches, updates and fixes. Patch jobs using the latest RPM channel update hosts to their respected latest version update with the latest software patches, updates and fixes. A patch job executed on a Oracle Linux 6 host would update the host from 6 to 6U3 with the latest latest software patches, updates and fixes. To keep a host at its respected update level, a valid CSI and the Unbreakable Linux Network is required. With the Unbreakable Linux Network, it is possible to register a host the el*/ol*_base channel along with the el*/ol*_patch RPM channel. When hosts are patched using the el*/ol*_base and el*/ol*_patch RPM channels, the hosts are patched with the latest software patches, updates and fixes from their respected update channel, i.e. 6, 6U1, 6U2 and 6U3.

To configure an Oracle Linux, Red Hat Enterprise Linux 6 host to use Oracle's public yum repository, as root, change to the /etc/yum.repos.d/ directory and type “wget http://public-yum.oracle.com/public-yum-ol6.repo” to download the public-yum-ol6.repo file. Next, type “yum update -y” to patch the host.

The next example shows how to download the public-yum-ol6.repo file from Oracle, then update an Oracle Linux or Red hat Enterprise Linux host. Type the following commands as root:

# cd /etc/yum.repos.d/
# wget http://public-yum.oracle.com/public-yum-ol6.repo
# yum update -y
 
The oracle-rdbms-server-11gR2-preinstall RPM, formally know as oracle-validated, simplifies meeting the software and system configuration prerequisites for installing the Oracle Database 11g R2 on Oracle Linux 6. Installing the oracle-rdbms-server-11gR2-preinstall RPM automatically installs all of the software RPM prerequisites for Oracle Database 11g R2 as well as meeting the system configuration prerequisites, such as creating an oracle user and the oinstall and dba groups, configuring the sysctl.conf settings, system startup parameters, user limits, and driver parameters.

The oracle-rdbms-server-11gR2-preinstall RPM is available at the Oracle Unbreakable Linux Network, on the Oracle Linux media, and from the Oracle public yum repository.

To install the oracle-rdbms-server-11gR2-preinstall RPM from the Oracle public yum repository, as root type "yum install oracle-rdbms-server-11gR2-preinstall"

The next examples shows the public-yum-ol6.repo file.

Tip: You can enable any of the repositories in the public-yum-ol6.repo file by changing enabled=0 to enabled=1.

# vi /etc/yum.repos.d/public-yum-ol6.repo
[ol6_latest]
name=Oracle Linux $releasever Latest ($basearch)
baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/latest/$basearch/
gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6
gpgcheck=1
enabled=1
 
[ol6_ga_base]
name=Oracle Linux $releasever GA installation media copy ($basearch)
baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/0/base/$basearch/
gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6
gpgcheck=1
enabled=0
 
[ol6_u1_base]
name=Oracle Linux $releasever Update 1 installation media copy ($basearch)
baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/1/base/$basearch/
gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6
gpgcheck=1
enabled=0
 
[ol6_u2_base]
name=Oracle Linux $releasever Update 2 installation media copy ($basearch)
baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/2/base/$basearch/
gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6
gpgcheck=1
enabled=0
 
[ol6_UEK_latest]
name=Latest Unbreakable Enterprise Kernel for Oracle Linux $releasever ($basearch)
baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/UEK/latest/$basearch/
gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6
gpgcheck=1
enabled=0
 
[ol6_UEK_base]
name=Unbreakable Enterprise Kernel for Oracle Linux $releasever ($basearch)
baseurl=http://public-yum.oracle.com/repo/OracleLinux/OL6/UEK/base/$basearch/
gpgkey=http://public-yum.oracle.com/RPM-GPG-KEY-oracle-ol6
gpgcheck=1
enabled=0
 

How to Uninstall or Remove Oracle Linux

There is not an option to “uninstall” Oracle Linux, although there are many ways to remove Oracle Linux from a system. The method you select to remove Oracle Linux or Red Hat Enterprise Linux from a system will depend on your organizations security requirements. For example, if the data on the hard drive needs to be securely deleted, formatting or re-partitioning the hard drive will not completely remove the data from the disks. To completely wipe Oracle Linux or Red Hat Enterprise Linux as well as the data from the hard disks, boot the system using data destruction application like Darik's Boot and Nuke (DBAN) and wipe all of the disks. If the data on the hard drive does not need to be securely deleted, you could a) delete all the files on the disks b) format or re-partition the hard drives c) uninstall the bootloader and d) install another operating system on top of the existing one.
 
List 3 shows several of the options to remove Oracle Linux from a system.
  • Boot the system using data destruction application like Darik's Boot and Nuke (DBAN) and wipe all of the disks.
  • Delete all the files on the disks, i.e. type “rm -rf /” as root.
  • Format or delete the partitions.
  • Uninstall the bootloader.
  • Install another operating system on top of Oracle Linux or Red Hat Enterprise Linux.
view counter