Re: [External] : Re: Oracle 21c

From: Gerald Venzl <gerald.venzl_at_oracle.com>
Date: Thu, 12 May 2022 19:40:29 +0000
Message-ID: <E491E8DA-1E76-44C2-BE2E-7998D8634CF7_at_oracle.com>



Hey Andy,

If you’d like to share the SR number with me offline, I’m happy to take a look and see whether resolution can be accelerated. Would also be curious about the one-off patch number, so that I can see why the trace isn’t written into $ORACLE_BASE/diag.

Thx,


Gerald Venzl | Senior Director | Product Management Email: gerald.venzl_at_oracle.com<mailto:gerald.venzl_at_oracle.com> Oracle ST & Database Development
400 Oracle Parkway | Redwood Shores | 94065 | USA

On May 12, 2022, at 12:17, Andy Sayer <andysayer_at_gmail.com<mailto:andysayer_at_gmail.com>> wrote:

I would be on team RO Home except it seems some processes have missed the memo. We have traces being dumped to the read only home every time we start up (SR has been open for over a year). A one-off patch we've been given to sort out a SEV1 problem is also now dumping stuff to the read only home when we shutdown unless we have an event set.

We're using it for rolling out goldcopy images but having to remove logs each time we do this is a bit of a faff.

Thanks,
Andy

On Thu, 12 May 2022 at 18:36, Gerald Venzl <gerald.venzl_at_oracle.com<mailto:gerald.venzl_at_oracle.com>> wrote: Nobody said anything about successfully other than you...


Gerald Venzl | Senior Director | Product Management Email: gerald.venzl_at_oracle.com<mailto:gerald.venzl_at_oracle.com> Oracle ST & Database Development
400 Oracle Parkway | Redwood Shores | 94065 | USA

On May 12, 2022, at 10:33, Andrew Kerber <andrew.kerber_at_gmail.com<mailto:andrew.kerber_at_gmail.com>> wrote:

Huh. I have been doing out of place patching and out of place upgrades since at least oracle 10.2. I never realized we needed a whole new paradigm in order to do them successfully.

On Thu, May 12, 2022 at 11:37 AM Gerald Venzl <gerald.venzl_at_oracle.com<mailto:gerald.venzl_at_oracle.com>> wrote: Actually, it’s a solution to many problems and something that many customers wanted us to do for quite a long time. If you think about it, it doesn’t really make sense to co-locate database specific configuration and log files with the software binaries. The Oracle Home binaries could be used for many databases on the server, not just one, and the configuration files for a database are part of the database itself, not the software installation. When you think about an ASM configuration, parts of that has already happened for years, for example, that the SPFILE residing in ASM as well.

So what are the benefits? Simple:

As Oracle allows for out of place patching<https://docs.oracle.com/cd/E91266_01/OPTCH/GUID-10EF5AF2-BB81-488B-8F5A-362C04E4E6BE.htm#OPTCH675> and out of place upgrades<https://docs.oracle.com/en/database/oracle/oracle-database/19/cwlin/understanding-out-of-place-upgrades.html#GUID-88AB25ED-D20C-41A4-92BC-05A88EB76BC7>, if you no longer attach your database config and log files to the software binaries themselves, you can now do something like fleet out of place patching/upgrade. Let’s stick with patching for a moment, instead of applying say an RU 100 times in 100 different Oracle Homes for 100 different databases on 100 different servers, one can apply the RU once in a new home, and then send that new home to these 100 locations all at once and restart the Oracle Database with the patched Oracle Home. Not easily doable if you have to carry forward the config and log files into the new Oracle Home, but super easy if you don’t. Same thing goes for upgrade.
Does it automate the entire process, no, not really and we have other tools to help with that, like FFP, but it’s an important part to enable that.

Another simple reason, security.
Why having write access to the Oracle Home when there are only binaries and libraries? Well, we needed to because of the config and log files. But if you move them out of the Oracle Home, you can now make the home read-only and add another layer of security so that nobody can inject or swap some binary/library at the OS level. That was actually the majority of customer requests, security. The two obviously can also go hand-in-hand, you build and sign-off a patched Oracle Home one time and then send that to your servers, knowing that these are read-only and signed. Not a new concept either, so it makes sense that customers like that solution.

Does everybody need read-only Oracle Homes? No, obviously there are plenty of installations where one doesn’t care about the benefits, like me with my local DB on my laptop.

However, are there any downsides to them? Not really, other than perhaps some grumpy users that have to change the way they were doing things for N years rather than embracing the change and asking for what the real benefits are and how it could also make their lives easier…

Thx,


Gerald Venzl | Distinguished Product Manager Email: gerald.venzl_at_oracle.com<mailto:gerald.venzl_at_oracle.com> Oracle ST & Database Development
400 Oracle Parkway | Redwood Shores | 94065 | USA

On May 12, 2022, at 05:24, Andrew Kerber <andrew.kerber_at_gmail.com<mailto:andrew.kerber_at_gmail.com>> wrote:

So as with the entire concept of CDB's, another solution in search of a problem.

On Wed, May 11, 2022 at 3:56 PM Gerald Venzl <gerald.venzl_at_oracle.com<mailto:gerald.venzl_at_oracle.com>> wrote: Read-Only Oracle Homes were introduced in 18c<https://docs.oracle.com/en/database/oracle/oracle-database/18/upgrd/understanding-read-only-oracle-homes.html#GUID-D848002A-DBAD-48FA-8467-E849630B8E42> and made the default in 21c. Thanks to this change, the Oracle software installation itself can be image-based.<https://docs.oracle.com/en/database/oracle/oracle-database/18/upgrd/image-based-oracle-database-installations.html#GUID-0315AA15-1C03-4E96-B801-3A8E5F5D4B39>

There are a lot of benefits with ROOH and not tying the database configuration files to a particular OH location. For those of you on 19c, we highly encourage you to check this feature out and perhaps already make the move, as you will have to eventually anyway.

Thx,


Gerald Venzl | Distinguished Product Manager Email: gerald.venzl_at_oracle.com<mailto:gerald.venzl_at_oracle.com> Oracle ST & Database Development
400 Oracle Parkway | Redwood Shores | 94065 | USA

On May 11, 2022, at 12:11, Franky Weber Faust <weber08weber_at_gmail.com<mailto:weber08weber_at_gmail.com>> wrote:

All the config files moved to $ORACLE_BASE mainly because of the ROOH (read only Oracle Home) feature and that is the way 21c behaves. 21c OH is read only by default afaik.

Regards,

[LORE DATA]
Franky Weber Faust
Consultor de Banco de Dados | LORE DATA Oracle ACE ♠️
Fone: 47 99125 2714
Email: franky_at_loredata.com.br<mailto:franky_at_loredata.com.br> loredata.com.br<https://urldefense.com/v3/__http://loredata.com.br/__;!!ACWV5N9M2RV99hQ!NFb1CShoVdnaTM0sbiGEBm7A_bMa64dGe-tBQ7a1ZFUevjSrQ3vM6kNgHipISqAbuE6bA7NY4RZHMjqe9NFk8T1z$>

On Wed, May 11, 2022 at 12:20 AM P C <puravc_at_gmail.com<mailto:puravc_at_gmail.com>> wrote: Me too!

So I read a little to understand why this change amd it is to separate the installation from configuration…. makes sense!

Looks like a step towards cloud….

On Wed, 11 May 2022 at 6:04 AM, Mark J. Bobak <mark_at_bobak.net<mailto:mark_at_bobak.net>> wrote: Interesting...I had no idea! :-)

On Tue, May 10, 2022 at 3:12 PM Andrew Kerber <andrew.kerber_at_gmail.com<mailto:andrew.kerber_at_gmail.com>> wrote: Oracle home is not writable under 21c. https://docs.oracle.com/en/database/oracle/oracle-database/21/ladbi/file-path-directory-changes-read-only-oracle-home.html#GUID-695D5458-A4AF-4F2A-AE4B-FB1062CF6014

I discovered it the same way you just did.

On Tue, May 10, 2022 at 2:09 PM Scott Canaan <srcdco_at_rit.edu<mailto:srcdco_at_rit.edu>> wrote: I’m trying to create my first database in Oracle 21c. I want to do it manually the first time. I’m following the steps I’ve used in the past when creating an Oracle 19c container database, but I’m having a strange issue that I’ve never run into before.

When I try to create the database, it says it can’t find the init.ora file. The file is in the $ORACLE_HOME/dbs (/oracle/app/product/21.0.0.0/dbs<https://urldefense.com/v3/__http://21.0.0.0/dbs__;!!ACWV5N9M2RV99hQ!NFb1CShoVdnaTM0sbiGEBm7A_bMa64dGe-tBQ7a1ZFUevjSrQ3vM6kNgHipISqAbuE6bA7NY4RZHMjqe9K2UVi34$>) directory, as it always has been, but it is looking for it in the $ORACLE_BASE/dbs (/oracle/app/dbs) directory instead. Is this a change with 21c? The environment is configured the same as in the past. How do I fix it?

Scott Canaan ‘88
Sr Database Administrator
Information & Technology Services
Finance & Administration
Rochester Institute of Technology
o: (585) 475-7886 | f: (585) 475-7520
srcdco_at_rit.edu<mailto:srcdco_at_rit.edu> | c: (585) 339-8659

CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.

--

Andrew W. Kerber

'If at first you dont succeed, dont take up skydiving.'

--

Andrew W. Kerber

'If at first you dont succeed, dont take up skydiving.'

--

Andrew W. Kerber

'If at first you dont succeed, dont take up skydiving.'

--

http://www.freelists.org/webpage/oracle-l Received on Thu May 12 2022 - 21:40:29 CEST

Original text of this message