diff --git a/docs/cli_reference.md b/docs/cli_reference.md index 30337f3fc6..d11e812ceb 100755 --- a/docs/cli_reference.md +++ b/docs/cli_reference.md @@ -1954,6 +1954,12 @@ import rpm [check-rpm-signature ] [force] [verbose] filepat | force | Skip confirmation prompt | | verbose | Increase log level verbosity | +#### Version History + +| Release | Modification | +| ------- | ----------------------------| +| 7.0.1 | This feature was introduced | + ## `initialize conductor` Initializes the current device as a conductor. diff --git a/docs/upgrade_restricted_access.md b/docs/upgrade_restricted_access.md index da1fef7bf9..17f582a6e9 100644 --- a/docs/upgrade_restricted_access.md +++ b/docs/upgrade_restricted_access.md @@ -62,6 +62,10 @@ An issue has been identified that may be observed in conductor deployments runni We have identified an issue when onboarding SSR routers installed with older versions of software (such as 5.4.4) to Conductors running 6.3.x, when running in offline-mode. In some cases, certain software packages are not available to be installed during onboarding. To work around this issue, import the **package-based** (the "128T" prefixed) ISO for the current conductor version onto the conductor. This provides the necessary software packages to complete the onboarding process. This issue will be resolved in a future release. +**Use of the [Import ISO](#import-iso) and [Import RPM](#import-plugin-rpms) Commands** + +When using the `import iso` and `import rpm` commands to install plugins necessary for your deployment, it is important to copy both the specific image (ISO) as well as the individual plugin RPMs and all associated dependencies for the plugins. All of these files are imported to the conductor for and available for router installation. + ### Single-Version 6.3.0 Upgrade The following process is used to upgrade a Conductor and Conductor-managed Routers to **version 6.3.0** of the SSR software. Beginning with SSR software version 6.3.0, a conductor can manage routers running image-based software installations. @@ -150,8 +154,127 @@ The [`import iso`](cli_reference.md#import-iso) command is used to import the SS `import iso [check-rpm-signature ] [force] [verbose] {hunt | filepath }` -Use the `filepath` argument to specify the exact location of the ISO. `hunt` will search for files that match the patterns `128T*.iso`, `SSR*.iso`, or `SSR*.tar`, and the corresponding checksum and signature files. These checksum and signature files are essential for security verification and are included as part of the `import iso` operation. To install the 6.3.0 software, the following file must be downloaded to the USB and imported onto the conductor: +Use the `filepath` argument to specify the exact location of the ISO. `hunt` will search for files that match the patterns `128T*.iso`, `SSR*.iso`, or `SSR*.tar`, (important when installing SSR 6.3.0) and the corresponding checksum and signature files. These checksum and signature files are essential for security verification and are included as part of the `import iso` operation. For example, to install the 6.3.0 software, the following file must be downloaded to the USB and imported onto the conductor: - `SSR-6.3.0-107.r1.el7.x86_64.ibu-v1.iso` -After the local software repository has been updated with the ISO, the upgrade can proceed. +Versions later than 6.3.0 use the `SSR*.iso`. The following steps provide the process to download and import the 7.1.0 ISO as well as plugin RPMs. + +1. On a system that has internet access, use the [ISO Download procedure](intro_downloading_iso.md#downloading-an-iso) to download the `SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso` and any necessary plugin RPMs from the [Download page](https://software.128technology.com/artifactory/list/generic-128t-isos-release-local/). The image and RPMs can be downloaded onto a USB, or some other media that allows you to copy the files to the conductor in the air-gap network. + +:::note +The SSR400 and SSR440 platforms use an ARM CPU processor and require the `aarch64` version of the plugins. All other platforms should use the `x86_64` files. +::: + +2. If you are using a USB, plug the USB into your device. +3. Copy the ISO (and plugin RPMs if required) to a directory on the Conductor, for example `/home/t128`. + +``` +[root@conductor-t285 t128]# ll /home/t128/.iso +-rw-r----- 1 root root 4346347520 Nov 25 03:13 /home/t128/SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso +[root@conductor-t285 t128]# ll /home/t128/.rpm +-rw-r----- 1 root root 11249371 Nov 14 17:11 /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.aarch64.rpm +-rw-r----- 1 root root 12315170 Nov 14 17:09 /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.x86_64.rpm +-rw-r----- 1 root root 6030629 Nov 14 17:11 /home/t128/128T-mist-agent-5.2.9458-1.el9.aarch64.rpm +-rw-r----- 1 root root 6586440 Nov 14 17:09 /home/t128/128T-mist-agent-5.2.9458-1.el9.x86_64.rpm +-rw-r----- 1 root root 4330389 Nov 14 17:11 /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.aarch64.rpm +-rw-r----- 1 root root 4402674 Nov 14 17:09 /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.x86_64.rpm +``` + +4. Import the ISO. + +``` +[root@conductor-t285 t128]# su - admin +admin@node0.conductor-t285# import iso filepath /home/t128/SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso +This command is resource intensive and can take a while. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# show system software available +Wed 2025-12-10 00:12:48 UTC +✔ Retrieving versions 1/1 targets complete... + +========= ============= =========== =========== + Release Version Channel Source +========= ============= =========== =========== + 7.1 SSR-7.1.0-50 downloads downloads +``` + +If you are **only ugrading the SSR ISO**, once the local software repository has been updated with the ISO, the upgrade can proceed using the [Conductor Upgrade](upgrade_ibu_conductor.md) and [Router Upgrade](upgrade_router.md) procedures. If you are also upgrading plugins, continue below. + +### Import Plugin RPMs + +The [`import rpm`](cli_reference.md#import-rpm) command is used to import SSR plugin RPMs onto a local repository, allowing the plugins to be upgraded along with the ISO without connecting to Juniper servers. When upgrading a conductor or when `offline-mode` is defined for a router, the plugin RPMs and all the associated dependencies must be imported to the target conductor to perform the upgrade. + +:::note +The `import-rpm` command is available beginning with SSR version 7.0.1. +::: + +When using the `import-rpm` command, be sure the downloaded files include the ISO and plugin RPMs as shown above. + +1. Import each RPM file path along with the dependencies. + +``` +admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.x86_64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-mist-agent-5.2.9458-1.el9.x86_64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.x86_64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success +``` + +The SSR400 and SSR440 platforms use an ARM CPU processor and require the `aarch64` version of the plugins. All other platforms should use the `x86_64` files. + +``` +admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.aarch64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-mist-agent-5.2.9458-1.el9.aarch64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.aarch64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success +``` + +2. Use `show plugins available` to see the current and new versions of the plugin software. + +``` +admin@node0.conductor-t285# show plugins available name 128T-mist-wan-assurance +Wed 2025-12-10 00:15:40 UTC +✔ Querying... + +MIST WAN ASSURANCE + + Category: + Monitoring + + Summary: + 128T Mist WAN Assurance + + Description: + Provides applications and configuration to enable connectivity to Mist cloud for 128T Routers. + + Installed RPM: + node0: 128T-mist-wan-assurance-3.100.0-3031.el9 + + Available RPMs: + 128T-mist-wan-assurance-3.101.0-302.el9 + +Completed in 0.06 seconds +``` + +3. After the local software repository has been updated with the ISO and plugin RPMs, the upgrade can proceed using the [Conductor Upgrade](upgrade_ibu_conductor.md) and [Router Upgrade](upgrade_router.md) procedures.