933271 - Compare list of installed updates between win64-rev1 and rev2 machines

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: CIDuty, task)

Comment 1

[John Hopkins (:jhopkins)]

Attachment: rev1-w64-ix-slave46-updates1of2.png

win64-rev1 installed Windows updates part 1 of 2

Comment 2

[John Hopkins (:jhopkins)]

Attachment: rev1-w64-ix-slave46-updates2of2.png

win64-rev1 installed Windows updates part 2 of 2

Comment 3

[John Hopkins (:jhopkins)]

Attachment: rev2-w64-ix-slave03-updates.png

win64-rev2 installed Windows updates

Comment 4

[John Hopkins (:jhopkins)]

Mark:
* could you produce a text listing of the installed updates on each type of machine (rev1/rev2)?
* are any of the rev1 patches included in the Windows OS revision of the rev2 machines or are we really missing what we see here?

Comment 5

[Mark Cornmesser [:markco] OOO 2024/04/15]

The rev2 base imaged was based off of an a slip streamed version that included several updates that were released after SP1. Those updates will not be reflected in the installed KBs. 

We are going to spin up a WSUS instance and audit to see exactly where the machine stands.

Is there a current issue that we think a missing update is causing?

Comment 6

[John Hopkins (:jhopkins)]

> Is there a current issue that we think a missing update is causing?

No visible issue, but certain patches may have been applied to address an issue that isn't covered by our test automation.

Comment 7

[John Hopkins (:jhopkins)]

Q, markco: builds on w64-ix-slave129 are looking good.  Please bring us up to patch level 2011/06/28 on the remaining win64-rev2 build slaves.

Comment 8

[Mark Cornmesser [:markco] OOO 2024/04/15]

jhopkins: fyi, I will be working on getting this set up today.

Comment 9

[Mark Cornmesser [:markco] OOO 2024/04/15]

The rev2 deployment image now includes a patch level through 2011/06/28. The missing updates were added to the base image and a capture was performed. Following the capture the MDT rev2 task sequence step "Install OS" was then changed to point at the new capture.

Comment 10

[John Hopkins (:jhopkins)]

Do we still need to deploy the missing updates to the original set of rev2 hosts?  If so, what is the procedure?

Comment 11

[Mark Cornmesser [:markco] OOO 2024/04/15]

The original set will still need the updates installed. I currently have a GPO set up to handle this. We will need to pick a time for the updates to install. The following reboot will take about 15 minutes, so that the updates will apply.

Comment 12

[John Hopkins (:jhopkins)]

My understanding is we do not need to take the machines offline to perform this upgrade, and they will simply upgrade at their next reboot opportunity (after their next build).

Assuming the above is correct, please go ahead and deploy these patches today.

Comment 13

[Mark Cornmesser [:markco] OOO 2024/04/15]

I have set this up to kick in at 11:00 pst. This will allow sometime for the GPO to be picked up prior to the updates being downloaded.  

I will check spot check a machine around 12:00 pst to see what the status is at that time.

Comment 14

[Mark Cornmesser [:markco] OOO 2024/04/15]

According to the WSUS server 5 machines haven't fully updated yet:

slave-117
slave-118
slave-123
slave-128 

and 
w0864-001 (which was a test machine)

I will keep an eye on these. Hopefully they will complete on one of the next few reboots. 

Once these are complete I will generate a report from the WSUS server and attach it to this bug.

Comment 15

[Mark Cornmesser [:markco] OOO 2024/04/15]

117, 118, and 128 are still not completely updated. 

jhopkins: Would it be cool to jump on one of these machines to take a look at what is going on? It may require a reboot or two.

Comment 16

[John Hopkins (:jhopkins)]

markco: I've disabled the above 3 machines in slavealloc and I'll ping you in IRC when one of them becomes available for inspection (they are all running jobs at the moment).

Comment 17

[John Hopkins (:jhopkins)]

Re-enabled in slavealloc per IRC chat.  They will pick up the failed updates automatically in just over 1 hour.

Comment 18

[Mark Cornmesser [:markco] OOO 2024/04/15]

Attachment: Updates Report for 2013-11-12.pdf

This about the best we can get for a report from the WSUS server. It is a bit wonky because it includes installed and N/A updates. However, all rev 2 machines are now updated. I am going to disable the update GPO and re-enable the disable updates gpo.

Comment 19

[Mark Cornmesser [:markco] OOO 2024/04/15]

Attachment: Computers Report 2013-11-12.pdf

Report shows per computer name with no failures.