RACcheck is a RAC Configuration Audit tool designed to check various important configuration settings within a Real Application Clusters (RAC), Oracle Clusterware (CRS), Automatic Storage Management (ASM) and Grid Infrastructure environment. The tool audits configuration settings within the following categories:
- OS kernel parameters
- OS packages
- Many other OS configuration settings important to RAC.
- CRS/Grid Infrastructure
- RDBMS
- ASM
- Database parameters
Many other database configuration settings important to RAC 11.2.0.3 Upgrade Readiness assessment
When I executed RACcheck on my Newly Installed RAC VM’s this is what i got.
Please note that this script has to be executed by Database Owner.(in my case it is oracle)
[oracle@rac1 raccheck]$ ./raccheck
CRS stack is running and CRS_HOME is not set. Do you want to set CRS_HOME to /u01/app/11.2.0/grid?[y/n][y]
Checking ssh user equivalency settings on all nodes in cluster
Node rac2 is configured for ssh user equivalency for oracle user
Searching for running databases . . . . .
. .
List of running databases registered in OCR
1. prod
2. None of above
Select databases from list for checking best practices. For multiple databases, select 1 for All or comma separated number like 1,2 etc [1-2][1].
. 1
.
Checking Status of Oracle Software Stack - Clusterware, ASM, RDBMS
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
-------------------------------------------------------------------------------------------------------
Oracle Stack Status
-------------------------------------------------------------------------------------------------------
Host Name CRS Installed ASM HOME RDBMS Installed CRS UP ASM UP RDBMS UP DB Instance Name
-------------------------------------------------------------------------------------------------------
rac1 Yes Yes Yes Yes Yes Yes prod1
rac2 Yes Yes Yes Yes Yes Yes prod2
-------------------------------------------------------------------------------------------------------
Copying plug-ins
. . . . . . . . . . . . . . . . . . . . .
. . . . . .
13 of the included audit checks require root privileged data collection . If sudo is not configured or the root password is not available, audit checks which require root privileged data collection can be skipped.
1. Enter 1 if you will enter root password for each host when prompted
2. Enter 2 if you have sudo configured for oracle user to execute root_raccheck.sh script
3. Enter 3 to skip the root privileged collections
4. Enter 4 to exit and work with the SA to configure sudo or to arrange for root access and run the tool later.
Please indicate your selection from one of the above options for root access[1-4][1]:- 1
*** Checking Best Practice Recommendations (PASS/WARNING/FAIL) ***
Collections and audit checks log file is
/home/oracle/raccheck/raccheck_rac1_prod_120413_215602/log/raccheck.log
Running raccheck in serial mode because expect(/usr/bin/expect) is not available to supply root passwords on remote nodes
NOTICE: Installing the expect utility (/usr/bin/expect) will allow raccheck to gather root passwords at the beginning of the process and execute raccheck on all nodes in parallel speeding up the entire process. For more info - http://www.nist.gov/el/msid/expect.cfm. Expect is available for all major platforms. See User Guide for more details.
Checking for prompts in /home/oracle/.bash_profile on rac1 for oracle user...
Checking for prompts in /home/oracle/.bash_profile on rac2 for oracle user...
=============================================================
Node name - rac1
=============================================================
Collecting - ASM DIsk I/O stats
Collecting - ASM Disk Groups
Collecting - ASM Diskgroup Attributes
Collecting - ASM disk partnership imbalance
Collecting - ASM diskgroup attributes
Collecting - ASM initialization parameters
Collecting - Active sessions load balance for prod database
Collecting - Archived Destination Status for prod database
Collecting - Cluster Interconnect Config for prod database
Collecting - Database Archive Destinations for prod database
Collecting - Database Files for prod database
Collecting - Database Instance Settings for prod database
Collecting - Database Parameters for prod database
Collecting - Database Properties for prod database
Collecting - Database Registry for prod database
Collecting - Database Sequences for prod database
Collecting - Database Undocumented Parameters for prod database
Collecting - Database Workload Services for prod database
Collecting - Dataguard Status for prod database
Collecting - Files not opened by ASM
Collecting - Log Sequence Numbers for prod database
Collecting - Percentage of asm disk Imbalance
Collecting - Process for shipping Redo to standby for prod database
Collecting - RDBMS Feature Usage for prod database
Collecting - Redo Log information for prod database
Collecting - Standby redo log creation status before switchover for prod database
Collecting - /proc/cmdline
Collecting - /proc/modules
Collecting - CPU Information
Collecting - CRS active version
Collecting - CRS oifcfg
Collecting - CRS software version
Collecting - CSS Reboot time
Collecting - CSS disktimout
Collecting - Cluster interconnect (clusterware)
Collecting - Clusterware OCR healthcheck
Collecting - Clusterware Resource Status
Collecting - DiskFree Information
Collecting - DiskMount Information
Collecting - Huge pages configuration
Collecting - Kernel parameters
Collecting - Maximum number of semaphore sets on system
Collecting - Maximum number of semaphores on system
Collecting - Maximum number of semaphores per semaphore set
Collecting - Memory Information
Collecting - NUMA Configuration
Collecting - Network Interface Configuration
Collecting - Network Performance
Collecting - Network Service Switch
Collecting - OS Packages
Collecting - OS version
Collecting - Operating system release information and kernel version
Collecting - Oracle Executable Attributes
Collecting - Patches for Grid Infrastructure
Collecting - Patches for RDBMS Home
Collecting - Shared memory segments
Collecting - Table of file system defaults
Collecting - Voting disks (clusterware)
Collecting - number of semaphore operations per semop system call
Collecting - slabinfo
Preparing to run root privileged commands rac1. Please enter root password when prompted.
root@rac1's password:
Collecting - Broadcast Requirements for Networks
Collecting - CRS user time zone check
Collecting - Custom rc init scripts (rc.local)
Collecting - Disk Information
Collecting - Grid Infastructure user shell limits configuration
Collecting - Interconnect interface config
Collecting - Network interface stats
Collecting - OLR Integrity
Collecting - Verify no database server kernel out of memory errors
Collecting - root time zone check
Data collections completed. Checking best practices on rac1.
--------------------------------------------------------------------------------------
WARNING => OCR is NOT being backed up daily
INFO => At some times checkpoints are not being completed for prod
WARNING => Open files limit (ulimit -n) for current user is NOT set to recommended value >= 65536 or unlimited
WARNING => Controlfile is NOT multiplexed for prod
WARNING => One or more redo log groups are NOT multiplexed for prod
WARNING => /tmp is NOT on a dedicated filesystem
WARNING => Shell limit soft nproc for DB is NOT configured according to recommendation
WARNING => SELinux is being Enforced.
INFO => Number of SCAN listeners is NOT equal to the recommended number of 3.
WARNING => Database Parameter memory_target is not set to the recommended value on prod1 instance
WARNING => NIC bonding is NOT configured for public network (VIP)
WARNING => OSWatcher is not running as is recommended.
INFO => Jumbo frames (MTU >= 8192) are not configured for interconnect
FAIL => Database parameter DB_BLOCK_CHECKSUM is NOT set to recommended value on prod1 instance
FAIL => Database parameter DB_LOST_WRITE_PROTECT is NOT set to recommended value on prod1 instance
WARNING => Database parameter DB_BLOCK_CHECKING on PRIMARY is NOT set to the recommended value. for prod
FAIL => Flashback on PRIMARY is not configured for prod
INFO => Operational Best Practices
INFO => Database Consolidation Best Practices
INFO => Computer failure prevention best practices
INFO => Data corruption prevention best practices
INFO => Logical corruption prevention best practices
INFO => Database/Cluster/Site failure prevention best practices
INFO => Client failover operational best practices
WARNING => fast_start_mttr_target should be greater than or equal to 300. on prod1 instance
INFO => IMPORTANT: Oracle Database Patch 13466801, 13343438, 13348650, 13696251 13919095,14275572,14727347 or 16083653 PSU is NOT applied to RDBMS Home /d01/app/oracle/product/11.2.0
INFO => Information about hanganalyze and systemstate dump
FAIL => Your Configuration is NOT in Compliance with Oracle Security Alert for CVE-2012-1675 /u01/app/11.2.0/grid
FAIL => Your Configuration is NOT in Compliance with Oracle Security Alert for CVE-2012-1675 /d01/app/oracle/product/11.2.0
FAIL => Package unixODBC-2.2.14-11.el6-i686 is recommended but NOT installed-----------Installed later
FAIL => Package unixODBC-devel-2.2.14-11.el6-i686 is recommended but NOT installed-----Installed later
INFO => Database failure prevention best practices
FAIL => Primary database is NOT protected with Data Guard (standby database) for real-time data protection and availability for prod
WARNING => There is a single voting file and Oracle patch 13869978 is NOT applied as recommended. See details. /u01/app/11.2.0/grid
WARNING => Redo log write time is more than 500 milliseconds for prod
WARNING => ASM memory_target is < recommended value
WARNING => TFA Collector is either not installed or not running
INFO => Parallel Execution Health-Checks and Diagnostics Reports for prod
FAIL => Package unixODBC-devel-2.2.14-11.el6-x86_64 is recommended but NOT installed
WARNING => vm.min_free_kbytes should be set as recommended.
WARNING => Oracle Patch NOT Applied on GI Home for issue different subnet failed to connect to VIP after Restart. /u01/app/11.2.0/grid
WARNING => kernel parameter rp_filter is set to 1.
INFO => Oracle recovery manager(rman) best practices
WARNING => RMAN controlfile autobackup should be set to ON for prod
Best Practice checking completed.Checking recommended patches on rac1.
---------------------------------------------------------------------------------
Collecting patch inventory on CRS HOME /u01/app/11.2.0/grid
Collecting patch inventory on ORACLE_HOME /d01/app/oracle/product/11.2.0
---------------------------------------------------------------------------------
1 Recommended CRS patches for 112030 from /u01/app/11.2.0/grid on rac1
---------------------------------------------------------------------------------
Patch# CRS ASM RDBMS RDBMS_HOME Patch-Description
---------------------------------------------------------------------------------
17272731 no no /d01/app/oracle/product/11.2.0GRID INFRASTRUCTURE PATCH SET UPDATE 11
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
35 Recommended RDBMS patches for 112030 from /d01/app/oracle/product/11.2.0 on rac1
---------------------------------------------------------------------------------
Patch# RDBMS ASM type Patch-Description
---------------------------------------------------------------------------------
13819954 no N-APPLY N-APPLY BUNDLE PATCH I FOR RDBMS 11.2.0.
17272731 no merge GRID INFRASTRUCTURE PATCH SET UPDATE 11.
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
Clusterware patches summary report
---------------------------------------------------------------------------------
Total patches Applied on CRS Applied on RDBMS Applied on ASM
---------------------------------------------------------------------------------
1 0 0 0
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
RDBMS homes patches summary report
---------------------------------------------------------------------------------
Total patches Applied on RDBMS Applied on ASM ORACLE_HOME
---------------------------------------------------------------------------------
35 0 0 /d01/app/oracle/product/11.2.0
---------------------------------------------------------------------------------
=============================================================
Node name - rac2
=============================================================
Collecting - /proc/cmdline
Collecting - /proc/modules
Collecting - CPU Information
Collecting - CRS active version
Collecting - CRS oifcfg
Collecting - CRS software version
Collecting - Cluster interconnect (clusterware)
Collecting - DiskFree Information
Collecting - DiskMount Information
Collecting - Huge pages configuration
Collecting - Kernel parameters
Collecting - Maximum number of semaphore sets on system
Collecting - Maximum number of semaphores on system
Collecting - Maximum number of semaphores per semaphore set
Collecting - Memory Information
Collecting - NUMA Configuration
Collecting - Network Interface Configuration
Collecting - Network Performance
Collecting - Network Service Switch
Collecting - OS Packages
Collecting - OS version
Collecting - Operating system release information and kernel version
Collecting - Oracle Executable Attributes
Collecting - Patches for Grid Infrastructure
Collecting - Patches for RDBMS Home
Collecting - Shared memory segments
Collecting - Table of file system defaults
Collecting - number of semaphore operations per semop system call
Collecting - slabinfo
Preparing to run root privileged commands rac2. Please enter root password when prompted.
root@rac2's password:
Collecting - Broadcast Requirements for Networks
Collecting - CRS user time zone check
Collecting - Disk Information
Collecting - Grid Infastructure user shell limits configuration
Collecting - Interconnect interface config
Collecting - Network interface stats
Collecting - OLR Integrity
Collecting - Verify no database server kernel out of memory errors
Collecting - root time zone check
Data collections completed. Checking best practices on rac2.
--------------------------------------------------------------------------------------
WARNING => Open files limit (ulimit -n) for current user is NOT set to recommended value >= 65536 or unlimited
WARNING => /tmp is NOT on a dedicated filesystem
WARNING => Shell limit soft nproc for DB is NOT configured according to recommendation
WARNING => Shell limit hard nofile for DB is NOT configured according to recommendation
WARNING => SELinux is being Enforced.
INFO => Number of SCAN listeners is NOT equal to the recommended number of 3.
WARNING => Database Parameter memory_target is not set to the recommended value on prod2 instance
WARNING => NIC bonding is NOT configured for public network (VIP)
WARNING => OSWatcher is not running as is recommended.
INFO => Jumbo frames (MTU >= 8192) are not configured for interconnect
FAIL => Database parameter DB_BLOCK_CHECKSUM is NOT set to recommended value on prod2 instance
FAIL => Database parameter DB_LOST_WRITE_PROTECT is NOT set to recommended value on prod2 instance
WARNING => Database parameter DB_BLOCK_CHECKING on PRIMARY is NOT set to the recommended value. for prod
WARNING => fast_start_mttr_target should be greater than or equal to 300. on prod2 instance
INFO => IMPORTANT: Oracle Database Patch 13466801, 13343438, 13348650, 13696251 13919095,14275572,14727347 or 16083653 PSU is NOT applied to RDBMS Home /d01/app/oracle/product/11.2.0
FAIL => Your Configuration is NOT in Compliance with Oracle Security Alert for CVE-2012-1675 /u01/app/11.2.0/grid
FAIL => Your Configuration is NOT in Compliance with Oracle Security Alert for CVE-2012-1675 /d01/app/oracle/product/11.2.0
FAIL => Package unixODBC-2.2.14-11.el6-i686 is recommended but NOT installed
FAIL => Package unixODBC-devel-2.2.14-11.el6-i686 is recommended but NOT installed
WARNING => Redo log write time is more than 500 milliseconds for prod
WARNING => ASM memory_target is < recommended value
WARNING => TFA Collector is either not installed or not running
FAIL => Package unixODBC-devel-2.2.14-11.el6-x86_64 is recommended but NOT installed
WARNING => vm.min_free_kbytes should be set as recommended.
WARNING => Oracle Patch NOT Applied on GI Home for issue different subnet failed to connect to VIP after Restart. /u01/app/11.2.0/grid
WARNING => kernel parameter rp_filter is set to 1.
Best Practice checking completed.Checking recommended patches on rac2.
---------------------------------------------------------------------------------
Collecting patch inventory on CRS HOME /u01/app/11.2.0/grid
Collecting patch inventory on ORACLE_HOME /d01/app/oracle/product/11.2.0
---------------------------------------------------------------------------------
1 Recommended CRS patches for 112030 from /u01/app/11.2.0/grid on rac2
---------------------------------------------------------------------------------
Patch# CRS ASM RDBMS RDBMS_HOME Patch-Description
---------------------------------------------------------------------------------
17272731 no no /d01/app/oracle/product/11.2.0GRID INFRASTRUCTURE PATCH SET UPDATE 11
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
35 Recommended RDBMS patches for 112030 from /d01/app/oracle/product/11.2.0 on rac2
---------------------------------------------------------------------------------
Patch# RDBMS ASM type Patch-Description
---------------------------------------------------------------------------------
13819954 no N-APPLY N-APPLY BUNDLE PATCH I FOR RDBMS 11.2.0.
17272731 no merge GRID INFRASTRUCTURE PATCH SET UPDATE 11.
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
Clusterware patches summary report
---------------------------------------------------------------------------------
Total patches Applied on CRS Applied on RDBMS Applied on ASM
---------------------------------------------------------------------------------
1 0 0 0
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
RDBMS homes patches summary report
---------------------------------------------------------------------------------
Total patches Applied on RDBMS Applied on ASM ORACLE_HOME
---------------------------------------------------------------------------------
35 0 0 /d01/app/oracle/product/11.2.0
---------------------------------------------------------------------------------
--------------------------------------------------------------------------------
CLUSTERWIDE CHECKS
---------------------------------------------------------------------------------
---------------------------------------------------------------------------------
Detailed report (html) - /home/oracle/raccheck/raccheck_rac1_prod_120413_215602/raccheck_rac1_prod_120413_215602.html
UPLOAD(if required) - /home/oracle/raccheck/raccheck_rac1_prod_120413_215602.zip
[oracle@rac1 raccheck]$ cp /home/oracle/raccheck/raccheck_rac1_prod_120413_215602.zip /tmp/
[oracle@rac1 raccheck]$
No comments:
Post a Comment