AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
#Power
 View Only

  • 1.  How to identify the obsolete packages which can be uninstalled and removed from the AIX server

    Posted 5 days ago

    Hi Team,

    On server we can see old packages are available and their installation/modification date is pretty old. Can we identify whether those can be removed or not.

    Day be day system is updating, so probably we are not using all those file set. But can you please suggest how to do that check? It is from 7.3 system.

    lslpp -hac|grep -i "/13:"
    /usr/lib/objrepos:GSKit8.gskcrypt32.ppc.rte:8.0.14.22::COMMIT:COMPLETE:05/08/13:12;12;26
    /usr/lib/objrepos:GSKit8.gskcrypt32.ppc.rte:8.0.14.22::APPLY:COMPLETE:05/08/13:12;12;26
    /usr/lib/objrepos:GSKit8.gskcrypt64.ppc.rte:8.0.14.22::COMMIT:COMPLETE:05/08/13:12;12;25
    /usr/lib/objrepos:GSKit8.gskcrypt64.ppc.rte:8.0.14.22::APPLY:COMPLETE:05/08/13:12;12;25
    /usr/lib/objrepos:GSKit8.gskssl32.ppc.rte:8.0.14.22::COMMIT:COMPLETE:05/08/13:12;14;19
    /usr/lib/objrepos:GSKit8.gskssl32.ppc.rte:8.0.14.22::APPLY:COMPLETE:05/08/13:12;14;19
    /usr/lib/objrepos:GSKit8.gskssl64.ppc.rte:8.0.14.22::COMMIT:COMPLETE:05/08/13:12;13;55
    /usr/lib/objrepos:GSKit8.gskssl64.ppc.rte:8.0.14.22::APPLY:COMPLETE:05/08/13:12;13;55
    /usr/lib/objrepos:Tivoli_Management_Agent.client.rte:3.7.1.0::COMMIT:COMPLETE:05/06/13:13;59;44
    /usr/lib/objrepos:Tivoli_Management_Agent.client.rte:3.7.1.0::APPLY:COMPLETE:05/06/13:13;59;44
    /usr/lib/objrepos:des:5.3.0.0::COMMIT:COMPLETE:05/08/13:12;09;04
    /usr/lib/objrepos:des:5.3.0.0::APPLY:COMPLETE:05/08/13:12;09;04
    /usr/lib/objrepos:gsksa.rte:7.0.4.42::COMMIT:COMPLETE:05/08/13:12;08;51
    /usr/lib/objrepos:gsksa.rte:7.0.4.42::APPLY:COMPLETE:05/08/13:12;08;51
    /usr/lib/objrepos:gskta.rte:7.0.4.42::COMMIT:COMPLETE:05/08/13:12;08;39
    /usr/lib/objrepos:gskta.rte:7.0.4.42::APPLY:COMPLETE:05/08/13:12;08;39
    /usr/lib/objrepos:httpd.license:2.2.14.0::COMMIT:COMPLETE:05/08/13:12;08;34
    /usr/lib/objrepos:httpd.license:2.2.14.0::APPLY:COMPLETE:05/08/13:12;08;34
    /usr/lib/objrepos:httpd.man.en_US:2.2.14.0::COMMIT:COMPLETE:05/08/13:12;08;33
    /usr/lib/objrepos:httpd.man.en_US:2.2.14.0::APPLY:COMPLETE:05/08/13:12;08;33
    /usr/lib/objrepos:idsldap.clt32bit63.rte:6.3.0.14::COMMIT:COMPLETE:05/08/13:12;08;30
    /usr/lib/objrepos:idsldap.clt32bit63.rte:6.3.0.14::APPLY:COMPLETE:05/08/13:12;08;30
    /usr/lib/objrepos:idsldap.clt64bit63.rte:6.3.0.14::COMMIT:COMPLETE:05/08/13:12;08;27
    /usr/lib/objrepos:idsldap.clt64bit63.rte:6.3.0.14::APPLY:COMPLETE:05/08/13:12;08;27
    /usr/lib/objrepos:idsldap.clt_max_crypto32bit63.rte:6.3.0.14::COMMIT:COMPLETE:05/08/13:12;13;53
    /usr/lib/objrepos:idsldap.clt_max_crypto32bit63.rte:6.3.0.14::APPLY:COMPLETE:05/08/13:12;13;53
    /usr/lib/objrepos:idsldap.clt_max_crypto64bit63.rte:6.3.0.14::COMMIT:COMPLETE:05/08/13:12;13;51
    /usr/lib/objrepos:idsldap.clt_max_crypto64bit63.rte:6.3.0.14::APPLY:COMPLETE:05/08/13:12;13;51
    /usr/lib/objrepos:idsldap.cltbase63.adt:6.3.0.14::COMMIT:COMPLETE:05/08/13:12;08;24



    ------------------------------
    Manoj Kumar
    ------------------------------


  • 2.  RE: How to identify the obsolete packages which can be uninstalled and removed from the AIX server

    Posted 4 days ago

    Hi,

    The packages you listed are not part of standard AIX distribution, but installed from separate media.

    Most of the packages (GS* and gs*)  are related to Global Security Kit

    IBM Global Security Kit Installation 

    or to LDAP client packages (idsldap*).

    So if you are not using LDAP in authentication, and there is no other applications on your system using GSKit, then those should be safe to be removed.

    However, I would always take a full mksysb / alt disk backup before any uninstallations, so that you have a  valid returning point in case needed.

    Br,

    tommi



    ------------------------------
    Tommi Sihvo, Lead Service Architect
    Vivicta
    email tommi.sihvo@vivicta.com mobile +358 (0)40 5180 Finland
    ------------------------------

    Original Message


  • 3.  RE: How to identify the obsolete packages which can be uninstalled and removed from the AIX server

    Posted 4 days ago

    Hi

    Just because a fileset is old , does not mean it is unused.

    AIX keeps many base OS components for compatibility. Before removing anything, you must verify dependency, usage, and system requirements.

    Most of the files you listed (GSKit, IDS LDAP, Tivoli Agent, HTTPD, etc.) are common base components that other tools depend on.



    ------------------------------
    Anas AlSaleh
    IBM Power Systems Software Specialist
    Saudi Business Machines ( SBM )
    Riyadh
    ------------------------------

    Original Message


  • 4.  RE: How to identify the obsolete packages which can be uninstalled and removed from the AIX server

    Posted 4 days ago

    installp has a preview option to check what your going to do (-p). After safely backing up the system, you should be able to preview removing any fileset or not, and observe if any package you care about will be removed during the preview.



    ------------------------------
    John Cuningham
    ------------------------------

    Original Message


  • 5.  RE: How to identify the obsolete packages which can be uninstalled and removed from the AIX server

    Posted 3 days ago

    "probably" doesn't cut it.  You have to verify that you are not using them.



    ------------------------------
    José Pina Coelho
    IT Specialist at Kyndryl
    ------------------------------

    Original Message


  • 6.  RE: How to identify the obsolete packages which can be uninstalled and removed from the AIX server
    Best Answer

    Posted 2 days ago

    Great question - identifying obsolete or removable filesets on AIX can be tricky, especially when the installation dates are very old. AIX does not automatically classify a fileset as "safe to remove," so the key is understanding whether anything in the system still depends on it.

    A few checks that usually help:

    1. Verify whether any installed software depends on the fileset:
       lslpp -L <fileset_name>

    2. Check for active dependencies:
       lslpp -q <fileset_name>
       or
       instfix -i | grep <fileset_name>

    3. GSKit and IBM LDAP client filesets (like the ones in your list) are often installed as prerequisites for other components such as WebSphere, Tivoli agents, or SSL-based applications. Even if the timestamp is old, they may still be required.

    4. Before removing anything, it's a good idea to confirm whether any application on the system still uses SSL/LDAP components that rely on GSKit 7 or 8.

    5. For a conservative approach on AIX 7.3, IBM generally recommends keeping legacy prereq filesets unless you have validated that no running application links against them.

    If you want to be fully certain, you can test the removal on a non-production LPAR or clone the rootvg and validate behavior before uninstalling.

    Curious to hear what others in the AIX community recommend as best practices when cleaning up older filesets.



    ------------------------------
    [Nawaf] [Alsabah]
    Leader
    ------------------------------

    Original Message


  • 7.  RE: How to identify the obsolete packages which can be uninstalled and removed from the AIX server

    Posted yesterday

    Thank you everyone for your suggestion.



    ------------------------------
    Manoj Kumar
    ------------------------------

    Original Message


Related Content