Keep Services Available During a SLES 15 SP5 to SP6 Upgrade

A short maintenance window is hard to schedule when a SLES server runs a customer-facing service. SUSE supports online service-pack migration from SLES 15 SP5 to SP6, but the upgraded machine still needs a reboot; “online” does not mean reboot-free. To keep an application reachable, upgrade redundant nodes one at a time or build an SP6 replacement and move traffic to it. A single server cannot keep its own operating system available while it reboots.

Illustrative scenario: A fictional team runs a web application across three SLES 15 SP5 nodes behind a load balancer. The application can serve requests from the other two nodes while one node is maintained. The sequence below shows how that team could migrate the cluster; it is an example, not a claim that a test was performed or that every cluster can tolerate a node outage.

1. Choose a path that matches the service

For a SLES 15 SP5 to SP6 move, SUSE documents both online and offline upgrade methods. The online method uses YaST migration or zypper migration while the operating system is running, then requires a system restart after the migration. Package changes may also restart services, so online migration alone cannot guarantee application continuity.

Use the SLE High Availability rolling-upgrade procedure only if your workload is already protected by a supported, healthy cluster. The cluster must retain quorum and enough capacity to run the service with a node offline. An ordinary load balancer without application redundancy, or a two-node cluster that loses quorum when one node stops, is not enough. If the server is standalone, use a parallel SP6 host and a tested workload/data cutover to maintain reachability; otherwise schedule downtime for its reboot.

Illustrative terminal showing the crm status command used to inspect cluster health
Illustrative command view for checking cluster health before taking a node out of service.

2. Check the target and prepare a recovery plan

Before touching the cluster, verify the starting release, registration, repositories, and supported extensions. SUSE lists SLES 15 SP5 to SP6 as a supported path. Online migration requires the machine to be registered with SUSE Customer Center or a local RMT server; SUSE Manager clients must use the Manager client-migration procedure instead of running zypper migration directly. The available target can depend on registered products and extensions.

As of January 1, 2026, SUSE’s release information says SLES 15 SP6 has moved to LTSS. Confirm that your subscription and registration source currently expose the SP6 target before scheduling this specific migration. If it is not offered, do not force a repository change to imitate a supported migration.

Back up application data and configuration using the application’s supported method, and confirm that you can restore them. Review the SLE HA upgrade guide and SP6 release notes for your extensions, databases, storage, and hardware. In the fictional cluster, the operator also checks quorum, fencing, replication health, spare capacity, load-balancer health checks, and a tested way to move traffic away from each node. A snapshot can aid rollback on supported Btrfs root setups, but it does not replace application or database backups.

Illustrative terminal with the zypper migration command ready to inspect available service-pack targets
Illustrative migration command; run it on the node being upgraded after confirming the target is available.

3. Upgrade one drained node at a time

For each node, follow the SLE HA rolling-upgrade procedure and your cluster’s runbook. Never upgrade multiple nodes at once unless the product-specific procedure explicitly allows it.

  1. Confirm the remaining nodes can serve the workload. Check application health and cluster status. Move or drain traffic from the node using the documented controls for your load balancer and cluster resources. Do not proceed if the remaining nodes cannot preserve quorum or meet the service’s minimum capacity.
  2. Stop the cluster stack on that node. SUSE warns that leaving the cluster resource manager active during the software update can cause fencing of active nodes. On the node selected for maintenance, run:
sudo crm cluster stop
Illustrative terminal showing crm cluster stop on a node selected for maintenance
Illustrative command to stop the cluster stack on the node being upgraded, as required by the rolling-upgrade procedure.
  1. Start the service-pack migration and inspect the proposal. Run the documented Zypper migration command:
sudo zypper migration

Select SLES 15 SP6 only if it appears as an available target. Read the repository and package plan, especially packages proposed for removal or downgrade, and stop if the changes are unexpected. Do not accept a plan you have not reviewed. The exact package list varies with installed software and registered extensions.

Illustrative migration target screen with SLES 15 SP6 selected
Illustrative target-selection view; verify the offered product and service pack for the specific host.
Illustrative terminal prompt to review package changes before continuing the service-pack migration
Illustrative package review prompt: inspect removals, downgrades, and repository changes before continuing.
  1. Reboot the upgraded node. After Zypper reports a successful migration, restart the machine so it boots the SP6 kernel and services:
sudo reboot
Illustrative terminal showing the reboot command after service-pack migration
Illustrative reboot step; this node will be unavailable while it restarts, so the remaining cluster nodes must carry the service.
  1. Rejoin and verify before moving to the next node. After the node returns, start its cluster stack:
sudo crm cluster start
sudo crm status

Wait until the cluster reports the node joined and resources are healthy, then restore it to service according to your runbook. Check the application from outside the cluster. Only then repeat the process for the next node. SUSE permits mixed versions only briefly during a rolling upgrade and instructs administrators to complete the cluster upgrade within one week.

Illustrative terminal showing crm cluster start to rejoin an upgraded node
Illustrative cluster rejoin command for the node after it has booted SLES 15 SP6.
Illustrative terminal showing crm status for post-upgrade cluster verification
Illustrative verification command to check cluster state before proceeding to the next node.

4. Verify the service, not just the operating-system label

After all nodes are upgraded, confirm their release with cat /etc/os-release, inspect cluster health with crm status, and check failed systemd units with systemctl --failed. Then test the actual application through its normal client-facing address, including the health checks, database or storage access, and any scheduled jobs that matter to users. Review migration logs and confirm the expected repositories and extensions are active on every node.

A successful OS migration does not prove that every application dependency is compatible or that no request was interrupted. If the application cannot tolerate a node failover, use a blue-green deployment with validated data replication and a controlled endpoint switch, or plan a maintenance window. For exact command options and support conditions, consult SUSE’s SLES 15 SP6 online-upgrade guide, supported upgrade paths, SLE HA rolling-upgrade procedure, and the SUSE Multi-Linux Manager 5.1 release notes for the SP6 lifecycle transition note.

Leave a Comment

Keep Services Available During a SLES 15 SP5 to SP6 Upgrade

Keep Services Available During a SLES 15 SP5 to SP6 Upgrade

SLES 15 SP5 can migrate online to SP6, but each node must reboot. Use a tested rolling upgrade or blue-green cutover to keep workloads reachable.

Apply the SLES 15 STIG Safely with OpenSCAP

Apply the SLES 15 STIG Safely with OpenSCAP

Use SUSE’s supported STIG profile to scan SLES 15, test remediation, review remaining findings, and retain assessment evidence.

Restore Cockpit Access to SUSE Linux Enterprise Server

Restore Cockpit Access to SUSE Linux Enterprise Server

Trace a failed Cockpit connection through DNS, port 9090, the systemd socket, firewalld, TLS, and login settings using current SUSE guidance.

Configure Reliable Ethernet Failover with SLES 15 Bonding

Configure Reliable Ethernet Failover with SLES 15 Bonding

Create a redundant Ethernet connection on SLES 15 with YaST and Wicked, configure active-backup bonding, and verify both ports and failover.

Build a Reusable AutoYaST Profile for SLES 15 Installs

Build a Reusable AutoYaST Profile for SLES 15 Installs

Turn an existing SLES 15 system into a reviewed AutoYaST profile, validate it, and use it to deploy a test server with fewer manual steps.

SLES 15 KVM Setup: Make Selected VMs Start at Boot

SLES 15 KVM Setup: Make Selected VMs Start at Boot

Install the SLES 15 KVM and libvirt tools, enable the right host service, and configure selected virtual machines to start after a reboot.

Diagnose a SUSE Server That Hangs at the systemd Shutdown Screen

Diagnose a SUSE Server That Hangs at the systemd Shutdown Screen

Use systemd jobs and the previous boot journal to locate a slow service, mount, or storage dependency, then correct it without masking the cause.

Open Only the Web Traffic Your SLES 15 Server Needs

Open Only the Web Traffic Your SLES 15 Server Needs

Use firewall-cmd to inspect the active zone, allow HTTP safely, preserve SSH access, and verify that the rule survives a reload on SLES 15.

Diagnose SLES PAM Login Failures Without Locking Yourself Out

Diagnose SLES PAM Login Failures Without Locking Yourself Out

Trace a PAM failure to its service, account policy, or identity provider, then repair the right SLES configuration while preserving a working admin session.

SLES Boot Module Load Failure: Find the Driver and Fix It

SLES Boot Module Load Failure: Find the Driver and Fix It

Trace a failed kernel module at SLES startup, correct an obsolete boot entry or repair the required driver, and verify the next boot.