Abstract: A system can determine to uninstall a patch that is installed on a computer, wherein an image of an operating system of the computer and a package that was used to install the patch are cryptographically signed. The system can further identify a first stored location of the package, and a second stored location of the image of the operating system. The system can further extract a file manifest from the package at the first stored location. The system can further extract versions of files identified on the file manifest from the image of the operating system at the second stored location, resulting in extracted versions of files. The system can further store the extracted versions of files to a temporary storage location. The system can further move the extracted versions of files in the temporary storage location to respective original running locations of the versions of files.

Abstract: Techniques are provided for installing patches during upgrades. In an example, an administrator specifies an upgrade image and a patch for a computing cluster. The computing cluster verifies compatibility between the upgrade image and the patch, registers the patch, and stores the patch for later use at the cluster level. Then, at the node level, the upgrade image and the patch are applied to each node that is upgraded.

Abstract: Techniques are provided for installing patches using a jail. In an example, a computing node boots from a first partition and then mounts a second partition. The computing node can install an upgrade image for an operating system on the second partition. The computing node can then create a jail that sets the mount point of the second partition as the apparent root directory, and install one or more patches within the jail. The computing node can then reboot from the patched and upgraded operating system of the second partition. In this manner, the node can be upgraded with an operating system and one or more patches, while being rebooted once.

Abstract: Techniques are provided for installing patches using a jail. In an example, a computing node boots from a first partition and then mounts a second partition. The computing node can install an upgrade image for an operating system on the second partition. The computing node can then create a jail that sets the mount point of the second partition as the apparent root directory, and install one or more patches within the jail. The computing node can then reboot from the patched and upgraded operating system of the second partition. In this manner, the node can be upgraded with an operating system and one or more patches, while being rebooted once.

Abstract: Techniques are provided for installing multiple patches during upgrades. In an example, an administrator specifies an upgrade image and multiple patches for a computing cluster. The computing cluster verifies compatibility between the upgrade image and the patch, registers the patch, and stores the patch for later use at the cluster level. This compatibility check can include a check that multiple patches do not write to the same file. Then, at the node level, the upgrade image and the patch are applied to each node that is upgraded.

Abstract: Techniques are provided for installing patches during upgrades. In an example, an administrator specifies an upgrade image and a patch for a computing cluster. The computing cluster verifies compatibility between the upgrade image and the patch, registers the patch, and stores the patch for later use at the cluster level. Then, at the node level, the upgrade image and the patch are applied to each node that is upgraded.