[cisco-voip] VMTools - CUCM 10.5

Fri Feb 26 05:46:27 EST 2016

Hi Erik,

Do you know at which point we have to install the mentioned cop file during an upgrade? The readme tells how to install the cop file but not when to install it.
Lets say I do an upgrade from version 9.X to 10.5.2SU3. Should I install the file under version 9 or should I install the file after the upgrade and before the switch-version?

/Robert

-----Ursprüngliche Nachricht-----
Von: cisco-voip [mailto:cisco-voip-bounces at puck.nether.net] Im Auftrag von Erick Bergquist
Gesendet: Friday, February 26, 2016 5:55 AM
An: Baha Akman (makman)
Cc: cisco-voip at puck.nether.net
Betreff: Re: [cisco-voip] VMTools - CUCM 10.5

Thanks for the heads up on this, was looking at doing this.

Speaking of selinux permissive mode, watch out if you use the 10.5.2
SU3 patch on a Unity Connection cluster. The switch version on the secondary has failed (sync error) on 2-3 separate ones in my experience the past few weeks.  There is a cop file for 1052su3 to address bug with the switch version by setting selinux to permissive on both nodes then installing cop on both but that hasn't solved the switch version issue. We had to reinstall secondary unity connection node from scratch to get it to work w/SU3.

Erick

On Thu, Feb 25, 2016 at 9:40 AM, Baha Akman (makman) <makman at cisco.com> wrote:
> Glad I was able to save at least one of you from this nugget :)
>
> I’ve got 90+ CUCMs waiting to be cleaned not sure if I’m going to be 
> able to even though all have remote access enabled prior to blowing up.
>
> --
> Baha
>
>
> On Feb 25, 2016, at 9:13 AM, Ed Leatherman <ealeatherman at gmail.com> wrote:
>
> So yeah - we were actually getting ready to log in a change board 
> request to do the reboots to get vmtools installed and then selinux 
> back to enforce, which would have happened while I was away on 
> vacation out of cell phone range :) Soooooo glad I glanced through my 
> emails today and saw Scott and Baha's messages!!! We're going to get a 
> case started anyway as he has already done the whole operation on PLM.
>
>
> On Thu, Feb 25, 2016 at 7:09 AM, Baha Akman (makman) 
> <makman at cisco.com>
> wrote:
>>
>> I’m sorry to report, the problem with latest VMTools update failure 
>> is not like CSCul78735 as many of you may have experienced when you 
>> upgraded to CUCM 10.0 and was familiar with the workaround.
>>
>> Latest ESXi 5.5 Builds as well as 6.0 Builds bundles a new version of 
>> VMtools version 10.0.0.50046 (build-3000743) aka (10240)
>>
>> See https://packages.vmware.com/tools/versions for tools version mapping.
>>
>> This new VMTools has a new functionality built-in called vmware-caf 
>> See release notes of it here; 
>> http://pubs.vmware.com/Release_Notes/en/vmwaretools/1000/vmware-tools
>> -1000-release-notes.html
>>
>> CUCM 9.1 releases are immune to this new functionality their selinux 
>> policies don't interfere with it. However CUCM 10.X and 11.X builds 
>> explicitly block vmtools-caf from functioning properly.
>>
>> If you managed to follow the workaround documented in CSCul78735 
>> where you put selinux to permissive, update vmtools to this new 10.0 
>> release, then put it back to enforcing, you will run out of Root Disk 
>> Space and Virtual Memory.
>>
>> The new defect tracking this issue is CSCux27503 - "Vmware Tools 
>> update on ESXi 6.0 is failing” please inform TAC about this as the 
>> word is still getting around. Not sure if this is going to be the 
>> ultimate defect to fix it but track this one for now.
>>
>> For those of you who have not yet experienced this serious issue, My 
>> suggestion would be to hold off on updating your VMTools after you 
>> have patched your ESXi 5.5 or 6.0 builds to the latest builds. If you 
>> have already put selinux to permissive mode as a workaround to get 
>> vmtools updated DO NOT put it back to enforcing mode. Contact TAC. If 
>> you have already put it back to enforcing mode after upgrading 
>> vmtools to 10.0 then contact TAC immediately as you will certainly 
>> run out of Memory and Disk Space soon.
>>
>> Hate to report this here, but this one is a doozy.
>>
>>
>> --
>> Baha
>>
>>
>> On Feb 25, 2016, at 6:46 AM, Ed Leatherman <ealeatherman at gmail.com> wrote:
>>
>> We just patched vsphere this past weekend and ran into the selinux 
>> bug with vmtools, and have also noted some weird stuff with memory 
>> and disk space but on Unity Connection. I'll check in with the guy 
>> that was handling it and see if there was any other strangeness, this 
>> doesn't give me warm and fuzzies.
>>
>> On Wed, Feb 24, 2016 at 9:13 PM, Hughes, Scott GRE-MG 
>> <SHughes at grenergy.com> wrote:
>>>
>>> Has anyone dealt with bugID
>>> CSCul78735 lately?
>>> We just installed our latest round of VMware 5.5 patches. Along with 
>>> it came new VMtools. Usual (automatic) upgrade method did not work. 
>>> The VMware tools status went from 'out of date' to 'not installed'
>>>
>>> We were able to get the tools installed on our two subscribers by 
>>> switching SELinux to permissive mode as the bug describes. We 
>>> switched them back to enforcing. Then, we found that the active 
>>> partition filled over the next 2 days before the subscriber died a 
>>> horrible death and had to be rebuilt.
>>>
>>> I believe that /var and /etc/selinux had most of the runaway logs. 
>>> TAC couldn't even create a root support account because the partition was full.
>>>
>>> Just a caution to those who patch VMware regularly. Make sure you 
>>> have alerting on filesystem capacity. Ours were 2500 user nodes so 
>>> there's only
>>> ~3 GB free on the active partition normally.
>>>
>>> I would be very interested if anyone has further info on this bug.
>>>
>>>
>>>
>>>
>>> NOTICE TO RECIPIENT: The information contained in this message from 
>>> Great River Energy and any attachments are confidential and intended 
>>> only for the named recipient(s). If you have received this message 
>>> in error, you are prohibited from copying, distributing or using the 
>>> information. Please contact the sender immediately by return email 
>>> and delete the original message.
>>>
>>>
>>>
>>> _______________________________________________
>>> cisco-voip mailing list
>>> cisco-voip at puck.nether.net
>>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>>
>>
>>
>> --
>> Ed Leatherman
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
>>
>
>
>
> --
> Ed Leatherman
>
>
>
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip
>
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip