Patching ESXi hosts from SSH using VMware online repository

Patching VMware Hosts

Turn on SSH on host
hightlight host -> configuration -> Security Profile -> Properties -> SSH -> Options -> Service commands -> Start

Verify Virtual Machine Startup and Shutdown
hightlight host -> configuration -> Virtual Machine Startup and Shutdown -> Properties ->  Move Up to Automatic Startup


Using putty ssh to host
ssh  <hostname>

ONLINE PATCHING
Note ESXi must have https internet access

Opens firewall
esxcli network firewall ruleset set -e true -r httpClient

Finds updates
esxcli software sources profile list -d https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml | grep -i ESXi-6.7.0-2019

Installs update
esxcli software profile update -p ESXi-6.7.0-20190504001-standard -d https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml

Installs clean
esxcli software profile install -p ESXi-6.7.0-20190504001-standard  -d https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml --ok-to-remove

Removes dependancy VIB
esxcli software vib remove -n net-mst

Enable ESXi Side-Channel-Aware Scheduler Version 2 (SCAv2) using ESXCLI 

*****must be 6.7 update 2 or later*****

esxcli system settings kernel set -s hyperthreadingMitigation -v TRUE

esxcli system settings kernel set -s hyperthreadingMitigationIntraVM -v FALSE

Enable ESXi Side-Channel-Aware Scheduler SCAv1 (Legacy up to 30% performance hit)
esxcli system settings kernel list -o hyperthreadingMitigation
esxcli system settings kernel set -s hyperthreadingMitigation -v TRUE

 

Have more questions? Submit a request

0 Comments

Please sign in to leave a comment.