Collecting AHF (Autonomous Health Framerwork) Compliance Report in Oracle

AHF(Autonomous Health Framework) Compliance proactively checks if your system drifts from best practice configuration and how to fix it again with automatic health checks. All issues found are ranked according to their impact, so you can understand what to take action on. AHF provides detailed recommendations on how to correct your configuration along with any supporting links. It also includes earlier utilities such as TFA and ORAchk/EXAchk and comes as a bundle. 

In this blog, we are collecting AHF compliance reports on two nodes of RAC setup on Linux 8 VMs.

Prerequisites - Download and Install AHF on both Linux machines as Root.

• Set RAT_CRS_HOME to grid home.

        $export  $RAT_CRS_HOME=$GRID_HOME

• Navigate to AHF binaries

        cd /u01/app/19c/grid/ahf/oracle.ahf/bin

• Run AHF Compliance

        [oracle@rac1 bin]$ ahfctl compliance
This computer is for [S]ingle instance database or part of a [C]luster to run RAC database [S|C] [C]: C

Checking Status of Oracle Software Stack - Clusterware, ASM, RDBMS
.
.  .  .  .  .  .  .  .
-------------------------------------------------------------------------------------------------------
                                                 Oracle Stack Status
-------------------------------------------------------------------------------------------------------
  Host Name       CRS Installed       ASM HOME  RDBMS Installed    CRS UP    ASM UP  RDBMS UP    DB Instance Name
-------------------------------------------------------------------------------------------------------
       rac1                       Yes          Yes           No           No       No       No
-------------------------------------------------------------------------------------------------------

Copying plug-ins
. .
.  .  .  .  .  .

283 of the included audit checks require root privileged data collection on . If sudo is not configured or the root password is not available, audit checks which require root privileged data collection can be skipped.
1. Enter 1 if you will enter root password for each  host when prompted
2. Enter 2 if you have sudo configured for oracle user to execute root_orachk.sh script
3. Enter 3 to skip the root privileged collections
4. Enter 4 to exit and work with the SA to configure sudo  or to arrange for root access and run the tool later.
Indicate your selection from one of the above options for root access[1-4][1]:-  1

Enter root password :-
Verifying root password ...


*** Checking Best Practice Recommendations ( Pass / Warning / Fail ) ***
.
============================================================
                   Node name - rac1
============================================================
. . . . . .

 Collecting - /proc/cmdline
 Collecting - /proc/modules
 Collecting - CPU Information
 Collecting - CRS active version
 Collecting - CRS software version
 Collecting - CSS Reboot time
 Collecting - Disk I/O Scheduler on Linux
 Collecting - DiskFree Information
 Collecting - DiskMount Information
 Collecting - Huge pages configuration
 Collecting - Kernel parameters
 Collecting - Linux module config.
 Collecting - Maximum number of semaphore sets on system
 Collecting - Maximum number of semaphores on system
 Collecting - Maximum number of semaphores per semaphore set
 Collecting - Memory Information
 Collecting - NUMA Configuration
 Collecting - Network Interface Configuration
 Collecting - Network Performance
 Collecting - OS Packages
 Collecting - OS version
 Collecting - Operating system release information and kernel version
 Collecting - Oracle executable attributes
 Collecting - Patches for Grid Infrastructure
 Collecting - RDBMS and GRID software owner UID across cluster
 Collecting - Table of file system defaults
 Collecting - Voting disks (clusterware)
 Collecting - number of semaphore operations per semop system call
Preparing to run root privileged commands  rac1.

 Collecting - CHMAnalyzer to report potential Operating system resources usage
 Collecting - CRS Opatch version
 Collecting - Clusterware patch inventory
 Collecting - Custom rc init scripts (rc.local)
 Collecting - Database Server Infrastructure Software and Configuration
 Collecting - Disk Information
 Collecting - Grid Infastructure user shell limits configuration
 Collecting - Linux system service and RAC process configuration
 Collecting - Network interface stats
 Collecting - Root user limits
 Collecting - Verify ORAchk scheduler configuration
 Collecting - Verify TCP Selective Acknowledgement is enabled
 Collecting - Verify the vm.min_free_kbytes configuration
 Collecting - root time zone check
 Collecting - slabinfo
 Collecting - umask setting for GI owner

Data collections completed. Checking best practices on rac1.
------------------------------------------------------------


 INFO =>     Important Automatic Storage Management (ASM) Notes and Technical White Papers
 INFO =>     umask for grid home owner is not set to 0022
 WARNING =>  Package glibc-2.17-55.el7-i686 is recommended but not installed
 WARNING =>  Package libstdc++-4.8.2-16.el7-i686 is recommended but not installed
 WARNING =>  Package libstdc++-4.8.2-16.el7-x86_64 is recommended but not installed
 WARNING =>  Package libaio-devel-0.3.109-12.el7-i686 is recommended but not installed
 WARNING =>  Package libaio-devel-0.3.109-12.el7-x86_64 is recommended but not installed
 WARNING =>  Package glibc-2.17-55.el7-x86_64 is recommended but not installed
 WARNING =>  Package glibc-devel-2.17-55.el7-i686 is recommended but not installed
 WARNING =>  Package libXi-1.7.2-2.1.el7-i686 is recommended but not installed
 WARNING =>  Package libXi-1.7.2-2.1.el7-x86_64 is recommended but not installed
 WARNING =>  Package libXtst-1.2.2-2.1.el7-i686 is recommended but not installed
 WARNING =>  Package libXtst-1.2.2-2.1.el7-x86_64 is recommended but not installed
 WARNING =>  Package compat-libcap1-1.10-7.el7-x86_64 is recommended but not installed
 WARNING =>  Package libstdc++-devel-4.8.2-16.el7-i686 is recommended but not installed
 WARNING =>  Package libstdc++-devel-4.8.2-16.el7-x86_64 is recommended but not installed
 WARNING =>  Package sysstat-10.1.5-4.el7-x86_64 is recommended but not installed
 WARNING =>  Package binutils-2.23.52.0.1-16.el7-x86_64 is recommended but not installed
 WARNING =>  Package libgcc-4.8.2-16.el7-i686 is recommended but not installed
 WARNING =>  Package libgcc-4.8.2-16.el7-x86_64 is recommended but not installed
 WARNING =>  Package make-3.82-21.el7-x86_64 is recommended but not installed
 WARNING =>  Package libaio-0.3.109-12.el7-x86_64 is recommended but not installed
 WARNING =>  Package glibc-devel-2.17-55.el7-x86_64 is recommended but not installed
 WARNING =>  Package ksh-20120801-19.el7-x86_64 is recommended but not installed
 WARNING =>  Package libaio-0.3.109-12.el7-i686 is recommended but not installed
 FAIL =>     The vm.min_free_kbytes configuration is not set as recommended
 FAIL =>     CSS disktimeout is not set to the default value of 200
 WARNING =>  OCR is not being backed up daily
 WARNING =>  Package compat-libstdc++-33-3.2.3-61-x86_64 is recommended but not installed
 CRITICAL => Temporary location is not configured for auto cleanup
 WARNING =>  SELinux is being Enforced.
 INFO =>     Important Storage Minimum Requirements for Grid & Database Homes
 FAIL =>     CRS=true is missing or not pointing to right Grid Infrastructure home in Oracle software inventory
 WARNING =>  CSS reboot time is not set to the default value of 3
 FAIL =>     system service rngd is not running
 WARNING =>  Oracle database software owner hard stack shell limits is not configured according to recommendation
 WARNING =>  Package libaio-0.3.107-10.el6-x86_64 is recommended but not installed
 WARNING =>  Perl Patch 33912872 is not found in 19c CRS_HOME. None
 FAIL =>     Network configuration files in Oracle Grid Infrastructure Home are not valid.
 WARNING =>  loopback address is NOT configured as recommended in /etc/hosts
 INFO =>     Software maintenance best practices
 WARNING =>  Linux Disk I/O Scheduler should be configured to Deadline
------------------------------------------------------------
                      CLUSTERWIDE CHECKS
------------------------------------------------------------
------------------------------------------------------------
UPLOAD [if required] - /u01/app/19c/grid/ahf/oracle.ahf/data/rac1/orachk/user_oracle/output/orachk_rac1_061423_09526.zip

Note - Above output is collected when root.sh failed while Grid configuration on Node1(rac1). As root.sh is pending on Node2(rac2) it's not collecting any reports on Node2.