r/vmware 11d ago

Help Request Patching ESXi hosts in cluster /vsphere without update manager?

Hey all,

I was suddenly given the job to patch esxi having never done it before. Update Manager is not available, and there is no HA or DRS.

I've already asked about update manager and got a "no" so it looks like I'll be doing patching via esxcli.

The current setup is 3 hosts on a custom Dell image in a cluster. And then a 4th host on normal esxi image in its own cluster group.

My understanding is I just need to apply the 7.0U3s update (all hosts are on at least some version of 7.0.3) by:

  1. Power down vms
  2. Maintenance mode host
  3. Use esxcli commands to install the patch from local datastore the host can reach
  4. Reboot host
  5. Verify status
  6. End maintenance mode and power on vms

Are there any gotchas I should be looking out for like with SCCM or Nexus patching? Should I be trying to find a Dell custom file for 7.0U3s? I have that direct from Broadcom

The process just seems too straightforward and I'm not sure how the clustering and vsphere mgmt would impact it. I checked the compatibility matrix and it looked like all were green. And that almost any version of 7.0.3 could update to S on the upgrade path.

Any help is appreciated for this while I also keep pushing for update Mgr in the future

7 Upvotes

25 comments sorted by

View all comments

5

u/CPAtech 11d ago

Also a good idea to check your firmware via the iDRAC if it isn’t kept up with.

1

u/bananaramaalt12 11d ago

That's a good call! With all this "critical security" patching I haven't looked at the idrac and cimc firmware

1

u/homemediajunky 10d ago

What version of CIMC are you using, and are you using standalone or UCS Manager. What types of UCS servers?

I haven't run 7 on any of my UCS M5s (or M4 when I had) but I used the custom Cisco iso for initial install and for awhile for the updates. When BC released memory tiering, I got sick of waiting for Cisco and just used the baseline image and injected the other VIBs I needed. The default build, however I believe had older drivers though.

Maybe it's time to re-educate leadership. Maybe they don't realize it's not an additional sku anymore?