This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How is the 7.102 Update going for you w/poll

Lets just see how it plays out this time...  Early adopters/testers help out those with only one box and it is in production.


This thread was automatically locked due to age.
  • You actually didn't have an option there for me to vote on; "Multiple Units, one or two with issues" ...

    We support quite a few customers on Astaro, so we test each up2date ourselves before we deploy them...  Found that on some systems, the up2date installs, but all network traffic stops... no webadmin, no SSH, no nothing... tested on VMWare and hardware.  A power cycle (or in VMWare or hardware with a keyboard / video, a login to the console and a shutdown -r now) returns it to operation.  Appears the NICs or Netfilter itself gets hung up, I think the commonality in the 2 I've had troubles with is the existence of an active IPSEC tunnel when the upgrade is performed.  I've reported the issue to Astaro Support... in the meanwhile, if I upgrade a customers' system, I'll be adding a CRON job to reboot the target system about 20 minutes after I apply the update, that way if I lose connection to a remote system, it'll still reboot and come back up.. .the system doesn't quit running when this happens, just stops passing network traffic.  I saw a similar problem at 1 customer site when we applied 7.101... hence my caution when updating remote units.

    Other than that, no other issues.  I have a number of customers who will simply love the Auditor role addition and the Blocked Sites reporting!  Kudos on adding those features!

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.


  • You actually didn't have an option there for me to vote on; "Multiple Units, one or two with issues" ...


    I also miss this option [;)]


    Gregor Kemter
  • action> first attempt installing 7.102

    install stalled at 87%
    Starting service: /etc/init.d/selfmonng

    result> all Internet access gone, not able to log into WebAdmin

    Eval Error: Server returned error: Failed to execute method CallMethod: Not permitted for method get_allowed_uuids of class sys at /PerlApp/RPC/PlServer.pm line 328.

    action> manual reboot of the ASG220 via console front display buttons

    result> Internet and WebAdmin access restored but ASG220 reports being up to data, no updates available for installation and still on version 7.101

    action> second attempt installing 7.102 (Firmware Update package just successfully downloaded)

    Up2Date package installation failed

    result> failed, but no loss of services

    action> third attempt installing 7.102 (using same, already downloaded, package)

    Up2Date package installation failed

    result> failed, but no loss of services

    action> fourth attempt installing 7.102 (Firmware Update package just successfully re-downloaded)

    Up2Date package installation failed

    action> fifth attempt installing 7.102 (SSH)

    result> works

    ================= fifth attempt ==================================

    box:/ # auisys.plx --rpmargs --force
    box:/ # Starting Up2Date Package Installer (Version 1.65)
    Searching for available up2date packages for type 'sys'

    Installing up2date package version 7.102
      Verifying up2date package signature
      Unpacking installation instructions
      Unpacking up2date package container
      Running pre-installation checks
      Starting up2date package installation
        Testing install package: csync2-1.30-14.i686.rpm                           O                          K
        Testing install package: ctsyncd-0.9.1-3.i686.rpm                          O                          K
        Testing install package: chroot-dhcps-7.1-34.i686.rpm                      O                          K
        Testing install package: chroot-ha_proxy-2.5-42.i686.rpm                   O                          K
        Testing install package: chroot-ipsec-7.1-2.i686.rpm                       O                          K
        Testing install package: iftop-0.16-32.2.i686.rpm                          O                          K
        Testing install package: libnetfilter_log-0.0.13-13.i686.rpm               O                          K
        Testing install package: ulogd-2.0.0beta-47.i686.rpm                       O                          K
        Testing install package: krb5-1.6.2-6.i686.rpm                             O                          K
        Testing install package: ep-init-7.1-159.i686.rpm                          O                          K
        Testing install package: ep-libs-7.1-155.i686.rpm                          O                          K
        Testing install package: ep-mdw-7.1-294.i686.rpm                           O                          K
        Testing install package: ep-confd-7.1-342.i686.rpm                         O                          K
        Testing install package: ep-confd-tools-7.1-33.i686.rpm                    O                          K
        Testing install package: ep-webadmin-7.1-351.i686.rpm                      O                          K
        Testing install package: ep-backupconverter-7.1-30.i686.rpm                O                          K
        Testing install package: ep-toolbox-7.1-47.i686.rpm                        O                          K
        Testing install package: ep-aua-7.1-148.i686.rpm                           O                          K
        Testing install package: ep-selfmon-7.1-139.i686.rpm                       O                          K
        Testing install package: ep-up2date-7.1-108.i686.rpm                       O                          K
        Testing install package: ep-up2date-downloader-7.1-104.i686.rpm            O                          K
        Testing install package: ep-up2date-system-install-7.1-113.i686.rpm        O                          K
        Testing install package: ep-syslog-ng-7.1-92.i686.rpm                      O                          K
        Testing install package: ep-notifier-db-7.1-53.i686.rpm                    O                          K
        Testing install package: ep-ha-7.1-231.i686.rpm                            O                          K
        Testing install package: ep-ha-daemon-7.1-151.i686.rpm                     O                          K
        Testing install package: ep-chroot-ha_proxy-7.1-15.i686.rpm                O                          K
        Testing install package: ep-httpproxy-2.0-68.i686.rpm                      O                          K
        Testing install package: ep-webadmin-contentmanager-7.1-81.i686.rpm        O                          K
        Testing install package: ep-cffd-0.50-223.i686.rpm                         O                          K
        Testing install package: ep-cffd-selfmon-0.50-223.i686.rpm                 O                          K
        Testing install package: ep-ha-confd-7.1-49.i686.rpm                       O                          K
        Executing script hook : exec /var/up2date//sys-install/u2d-sys-7.102/./prest                          op7102 OK
        Running service script: /etc/init.d/mdw stop                               O                          K
        Running service script: /var/mdw/scripts/httpproxy stop                    O                          K
        Running service script: /etc/init.d/aua stop                               O                          K
        Running service script: /etc/init.d/selfmonng stop                         O                          K
        Installing rpm package: csync2-1.30-14.i686.rpm                            O                          K
        Installing rpm package: ctsyncd-0.9.1-3.i686.rpm                           O                          K
        Installing rpm package: chroot-dhcps-7.1-34.i686.rpm                       O                          K
    box:/ # OK
        Installing rpm package: chroot-ipsec-7.1-2.i686.rpm                        OK
        Installing rpm package: iftop-0.16-32.2.i686.rpm                           OK
        Installing rpm package: libnetfilter_log-0.0.13-13.i686.rpm                OK
        Installing rpm package: ulogd-2.0.0beta-47.i686.rpm                        OK
        Installing rpm package: krb5-1.6.2-6.i686.rpm                              OK
        Installing rpm package: ep-init-7.1-159.i686.rpm                           OK
        Installing rpm package: ep-libs-7.1-155.i686.rpm                           OK
        Installing rpm package: ep-mdw-7.1-294.i686.rpm                            OK
        Installing rpm package: ep-confd-7.1-342.i686.rpm                          OK
        Installing rpm package: ep-confd-tools-7.1-33.i686.rpm                     OK
        Installing rpm package: ep-webadmin-7.1-351.i686.rpm                       OK
        Installing rpm package: ep-backupconverter-7.1-30.i686.rpm                 OK
        Installing rpm package: ep-toolbox-7.1-47.i686.rpm                         OK
        Installing rpm package: ep-aua-7.1-148.i686.rpm                            OK
        Installing rpm package: ep-selfmon-7.1-139.i686.rpm                        OK
        Installing rpm package: ep-up2date-7.1-108.i686.rpm                        OK
        Installing rpm package: ep-up2date-downloader-7.1-104.i686.rpm             OK
        Installing rpm package: ep-up2date-system-install-7.1-113.i686.rpm         OK
        Installing rpm package: ep-syslog-ng-7.1-92.i686.rpm                       OK
        Installing rpm package: ep-notifier-db-7.1-53.i686.rpm                     OK
        Installing rpm package: ep-ha-7.1-231.i686.rpm                             OK
        Installing rpm package: ep-ha-daemon-7.1-151.i686.rpm                      OK
        Installing rpm package: ep-chroot-ha_proxy-7.1-15.i686.rpm                 OK
        Installing rpm package: ep-httpproxy-2.0-68.i686.rpm                       OK
        Installing rpm package: ep-webadmin-contentmanager-7.1-81.i686.rpm         OK
        Installing rpm package: ep-cffd-0.50-223.i686.rpm                          OK
        Installing rpm package: ep-cffd-selfmon-0.50-223.i686.rpm                  OK
        Installing rpm package: ep-ha-confd-7.1-49.i686.rpm                        OK
        Running service script: /etc/init.d/aua start                              OK
        Running service script: /etc/init.d/selfmonng start                        OK
        Executing script hook : exec /var/up2date//sys-install/u2d-sys-7.102/./update7102 OK
        Running syncing step 0                                                     OK
        Running syncing step 1                                                     OK
      Successfully installed Up2Date package
    Searching for available up2date packages for type 'auav'
    There are no 'auav' packages available for installation
    Searching for available up2date packages for type 'clam'
    There are no 'clam' packages available for installation
    Searching for available up2date packages for type 'ips'
    There are no 'ips' packages available for installation
    Searching for available up2date packages for type 'man-app'
    There are no 'man-app' packages available for installation
    Searching for available up2date packages for type 'ohelp'
    There are no 'ohelp' packages available for installation
    Searching for available up2date packages for type 'rdj'
    There are no 'rdj' packages available for installation

    Up2Date Package Installer finished, exiting
  • Looks like something went wrong during or after:
    exec /var/up2date//sys-install/u2d-sys-7.102/./update7102

    Looks like it's a good idea to first reboot your unit before applying the patch.

    Looks like it's a good idea to enable SSH and have root access to the console before applying the patch.

    Looks like it's a good idea that if applying the patch via WebAdmin doesn't work the next thing to do is:
    auisys.plx --rpmargs --force

    Looks like it's a good idea to be physically present when updating your single production box.

    YMMV