From 6d4e6fb20ebef5e45530d4a7f76d48febe431434 Mon Sep 17 00:00:00 2001 From: Chris Date: Wed, 17 Dec 2025 15:21:57 -0500 Subject: [PATCH 1/6] adding import rpm information --- docs/upgrade_restricted_access.md | 123 +++++++++++++++++++++++++++++- 1 file changed, 121 insertions(+), 2 deletions(-) diff --git a/docs/upgrade_restricted_access.md b/docs/upgrade_restricted_access.md index da1fef7bf9..3af8c5e128 100644 --- a/docs/upgrade_restricted_access.md +++ b/docs/upgrade_restricted_access.md @@ -62,6 +62,10 @@ An issue has been identified that may be observed in conductor deployments runni We have identified an issue when onboarding SSR routers installed with older versions of software (such as 5.4.4) to Conductors running 6.3.x, when running in offline-mode. In some cases, certain software packages are not available to be installed during onboarding. To work around this issue, import the **package-based** (the "128T" prefixed) ISO for the current conductor version onto the conductor. This provides the necessary software packages to complete the onboarding process. This issue will be resolved in a future release. +**Use of the [Import ISO](#import-iso) and [Import RPM](#import-rpm) Commands** + +When using the `import iso` and `import rpm` commands to install plugins necessary for your deployment, it is important to create a bootable USB that contains both the specific image (ISO) as well as the individual plugin RPMs and all associated dependencies for the plugins. All of these files are imported to the conductor for and available for router installation. + ### Single-Version 6.3.0 Upgrade The following process is used to upgrade a Conductor and Conductor-managed Routers to **version 6.3.0** of the SSR software. Beginning with SSR software version 6.3.0, a conductor can manage routers running image-based software installations. @@ -150,8 +154,123 @@ The [`import iso`](cli_reference.md#import-iso) command is used to import the SS `import iso [check-rpm-signature ] [force] [verbose] {hunt | filepath }` -Use the `filepath` argument to specify the exact location of the ISO. `hunt` will search for files that match the patterns `128T*.iso`, `SSR*.iso`, or `SSR*.tar`, and the corresponding checksum and signature files. These checksum and signature files are essential for security verification and are included as part of the `import iso` operation. To install the 6.3.0 software, the following file must be downloaded to the USB and imported onto the conductor: +Use the `filepath` argument to specify the exact location of the ISO. `hunt` will search for files that match the patterns `128T*.iso`, `SSR*.iso`, or `SSR*.tar`, (important when installing SSR 6.3.0) and the corresponding checksum and signature files. These checksum and signature files are essential for security verification and are included as part of the `import iso` operation. For example, to install the 6.3.0 software, the following file must be downloaded to the USB and imported onto the conductor: - `SSR-6.3.0-107.r1.el7.x86_64.ibu-v1.iso` -After the local software repository has been updated with the ISO, the upgrade can proceed. + +Versions later than 6.3.0 use the `SSR*.iso`. The following steps provide the process to download and import the 7.1.0 ISO as well as plugin RPMs. + +1. Copy the SSR-7.1.0 ISO and necessary plugin RPMs to the conductor. + +``` +admin@node0.conductor-t285# + +[root@conductor-t285 t128]# ll /home/t128/.iso +-rw-r----- 1 root root 4346347520 Nov 25 03:13 /home/t128/SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso +[root@conductor-t285 t128]# ll /home/t128/.rpm +-rw-r----- 1 root root 11249371 Nov 14 17:11 /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.aarch64.rpm +-rw-r----- 1 root root 12315170 Nov 14 17:09 /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.x86_64.rpm +-rw-r----- 1 root root 6030629 Nov 14 17:11 /home/t128/128T-mist-agent-5.2.9458-1.el9.aarch64.rpm +-rw-r----- 1 root root 6586440 Nov 14 17:09 /home/t128/128T-mist-agent-5.2.9458-1.el9.x86_64.rpm +-rw-r----- 1 root root 4330389 Nov 14 17:11 /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.aarch64.rpm +-rw-r----- 1 root root 4402674 Nov 14 17:09 /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.x86_64.rpm +``` + +2. Import the ISO. + +``` +[root@conductor-t285 t128]# su - admin +admin@node0.conductor-t285# import iso filepath /home/t128/SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso +This command is resource intensive and can take a while. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# show system software available +Wed 2025-12-10 00:12:48 UTC +✔ Retrieving versions 1/1 targets complete... + +========= ============= =========== =========== + Release Version Channel Source +========= ============= =========== =========== + 7.1 SSR-7.1.0-50 downloads downloads +``` + +If you are only ugrading the SSR ISO, once the local software repository has been updated with the ISO, the upgrade can proceed. If you are also upgrading plugins, continue below. + +### Import Plugin RPMs + +The [`import rpm`](cli_reference.md#import-rpm) command is used to import SSR plugin RPMs onto a local repository, allowing the plugins to be upgraded along with the ISO without connecting to Juniper servers. When upgrading a conductor or when `offline-mode` is defined for a router, the plugin RPMs and all the associated dependencies must be imported to the target conductor to perform the upgrade. + +:::note +The `import-rpm` command is available beginning with SSR version 7.0.1. +::: + +When using the `import-rpm` command, be sure the downloaded files include the ISO and plugin RPMs as shown above. + +1. Import each RPM file path along with the dependencies. + +``` +admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.x86_64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-mist-agent-5.2.9458-1.el9.x86_64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.x86_64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success +``` + +To provide support for SSR400 and SSR440 hardware platforms (SSR software versions 7.1.0 and higher), the following import commands are used: + +``` +admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.aarch64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-mist-agent-5.2.9458-1.el9.aarch64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success + +admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.aarch64.rpm +This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y +✔ Importing... +Import success +``` + +2. Use `show plugins available` to see the current and new versions of the plugin software. + +``` +admin@node0.conductor-t285# show plugins available name 128T-mist-wan-assurance +Wed 2025-12-10 00:15:40 UTC +✔ Querying... + +MIST WAN ASSURANCE + + Category: + Monitoring + + Summary: + 128T Mist WAN Assurance + + Description: + Provides applications and configuration to enable connectivity to Mist cloud for 128T Routers. + + Installed RPM: + node0: 128T-mist-wan-assurance-3.100.0-3031.el9 + + Available RPMs: + 128T-mist-wan-assurance-3.101.0-302.el9 + +Completed in 0.06 seconds +``` + +3. After the local software repository has been updated with the ISO and plugin RPMs the upgrade can proceed using the [Router Upgrade](upgrade_router.md) procedure. From 9791fd6c6949b08d435e5137589749091790cab1 Mon Sep 17 00:00:00 2001 From: Chris Date: Wed, 17 Dec 2025 15:29:02 -0500 Subject: [PATCH 2/6] adding version table for import rpm command --- docs/cli_reference.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/cli_reference.md b/docs/cli_reference.md index 30337f3fc6..d11e812ceb 100755 --- a/docs/cli_reference.md +++ b/docs/cli_reference.md @@ -1954,6 +1954,12 @@ import rpm [check-rpm-signature ] [force] [verbose] filepat | force | Skip confirmation prompt | | verbose | Increase log level verbosity | +#### Version History + +| Release | Modification | +| ------- | ----------------------------| +| 7.0.1 | This feature was introduced | + ## `initialize conductor` Initializes the current device as a conductor. From 5581989dba7c38122721eb4551326a5fe9780bb1 Mon Sep 17 00:00:00 2001 From: Chris Date: Wed, 17 Dec 2025 15:51:27 -0500 Subject: [PATCH 3/6] fix broken link --- docs/upgrade_restricted_access.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/upgrade_restricted_access.md b/docs/upgrade_restricted_access.md index 3af8c5e128..c3ed0e5e0a 100644 --- a/docs/upgrade_restricted_access.md +++ b/docs/upgrade_restricted_access.md @@ -62,7 +62,7 @@ An issue has been identified that may be observed in conductor deployments runni We have identified an issue when onboarding SSR routers installed with older versions of software (such as 5.4.4) to Conductors running 6.3.x, when running in offline-mode. In some cases, certain software packages are not available to be installed during onboarding. To work around this issue, import the **package-based** (the "128T" prefixed) ISO for the current conductor version onto the conductor. This provides the necessary software packages to complete the onboarding process. This issue will be resolved in a future release. -**Use of the [Import ISO](#import-iso) and [Import RPM](#import-rpm) Commands** +**Use of the [Import ISO](#import-iso) and [Import RPM](#import-plugin-rpms) Commands** When using the `import iso` and `import rpm` commands to install plugins necessary for your deployment, it is important to create a bootable USB that contains both the specific image (ISO) as well as the individual plugin RPMs and all associated dependencies for the plugins. All of these files are imported to the conductor for and available for router installation. From a83d8a4a325c31dd248c308a0e113ea455451fa5 Mon Sep 17 00:00:00 2001 From: Chris Date: Thu, 18 Dec 2025 13:35:06 -0500 Subject: [PATCH 4/6] interim commit --- docs/upgrade_restricted_access.md | 13 +++++++------ 1 file changed, 7 insertions(+), 6 deletions(-) diff --git a/docs/upgrade_restricted_access.md b/docs/upgrade_restricted_access.md index c3ed0e5e0a..1e12baace5 100644 --- a/docs/upgrade_restricted_access.md +++ b/docs/upgrade_restricted_access.md @@ -158,14 +158,15 @@ Use the `filepath` argument to specify the exact location of the ISO. `hunt` wil - `SSR-6.3.0-107.r1.el7.x86_64.ibu-v1.iso` - Versions later than 6.3.0 use the `SSR*.iso`. The following steps provide the process to download and import the 7.1.0 ISO as well as plugin RPMs. -1. Copy the SSR-7.1.0 ISO and necessary plugin RPMs to the conductor. +1. On a system that has internet access, use the [ISO Download procedure](intro_downloading_iso.md#downloading-an-iso) to download the `SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso` from the [Download page](https://software.128technology.com/artifactory/list/generic-128t-isos-release-local/). The image and RPMs can be downloaded onto a USB, or some other media that allows you to copy the files to the conductor in the air-gap network. -``` -admin@node0.conductor-t285# +2. If you are using a USB, plug the USB into your device. +3. Copy the SSR-7.1.0 ISO and necessary plugin RPMs to the conductor. + +``` [root@conductor-t285 t128]# ll /home/t128/.iso -rw-r----- 1 root root 4346347520 Nov 25 03:13 /home/t128/SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso [root@conductor-t285 t128]# ll /home/t128/.rpm @@ -177,7 +178,7 @@ admin@node0.conductor-t285# -rw-r----- 1 root root 4402674 Nov 14 17:09 /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.x86_64.rpm ``` -2. Import the ISO. +4. Import the ISO. ``` [root@conductor-t285 t128]# su - admin @@ -196,7 +197,7 @@ Wed 2025-12-10 00:12:48 UTC 7.1 SSR-7.1.0-50 downloads downloads ``` -If you are only ugrading the SSR ISO, once the local software repository has been updated with the ISO, the upgrade can proceed. If you are also upgrading plugins, continue below. +If you are only ugrading the SSR ISO, once the local software repository has been updated with the ISO, the upgrade can proceed using the [Router Upgrade](upgrade_router.md) procedure. If you are also upgrading plugins, continue below. ### Import Plugin RPMs From fcf1c52bbe319fcaf863ef2f4d323c8613c77554 Mon Sep 17 00:00:00 2001 From: Chris Date: Thu, 18 Dec 2025 15:27:42 -0500 Subject: [PATCH 5/6] updates per review comments. --- docs/upgrade_restricted_access.md | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/docs/upgrade_restricted_access.md b/docs/upgrade_restricted_access.md index 1e12baace5..be59c38434 100644 --- a/docs/upgrade_restricted_access.md +++ b/docs/upgrade_restricted_access.md @@ -64,7 +64,7 @@ We have identified an issue when onboarding SSR routers installed with older ver **Use of the [Import ISO](#import-iso) and [Import RPM](#import-plugin-rpms) Commands** -When using the `import iso` and `import rpm` commands to install plugins necessary for your deployment, it is important to create a bootable USB that contains both the specific image (ISO) as well as the individual plugin RPMs and all associated dependencies for the plugins. All of these files are imported to the conductor for and available for router installation. +When using the `import iso` and `import rpm` commands to install plugins necessary for your deployment, it is important to copy both the specific image (ISO) as well as the individual plugin RPMs and all associated dependencies for the plugins. All of these files are imported to the conductor for and available for router installation. ### Single-Version 6.3.0 Upgrade @@ -160,11 +160,14 @@ Use the `filepath` argument to specify the exact location of the ISO. `hunt` wil Versions later than 6.3.0 use the `SSR*.iso`. The following steps provide the process to download and import the 7.1.0 ISO as well as plugin RPMs. -1. On a system that has internet access, use the [ISO Download procedure](intro_downloading_iso.md#downloading-an-iso) to download the `SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso` from the [Download page](https://software.128technology.com/artifactory/list/generic-128t-isos-release-local/). The image and RPMs can be downloaded onto a USB, or some other media that allows you to copy the files to the conductor in the air-gap network. +1. On a system that has internet access, use the [ISO Download procedure](intro_downloading_iso.md#downloading-an-iso) to download the `SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso` and any necessary plugin RPMs from the [Download page](https://software.128technology.com/artifactory/list/generic-128t-isos-release-local/). The image and RPMs can be downloaded onto a USB, or some other media that allows you to copy the files to the conductor in the air-gap network. -2. If you are using a USB, plug the USB into your device. +:::note +The SSR400 and SSR440 platforms use an ARM CPU processor and require the `aarch64` version of the plugins. All other platforms should use the `x86_64` files. +::: -3. Copy the SSR-7.1.0 ISO and necessary plugin RPMs to the conductor. +2. If you are using a USB, plug the USB into your device. +3. Copy the ISO (and plugin RPMs if required) to a directory on the Conductor, for example `/home/t128`. ``` [root@conductor-t285 t128]# ll /home/t128/.iso @@ -197,7 +200,7 @@ Wed 2025-12-10 00:12:48 UTC 7.1 SSR-7.1.0-50 downloads downloads ``` -If you are only ugrading the SSR ISO, once the local software repository has been updated with the ISO, the upgrade can proceed using the [Router Upgrade](upgrade_router.md) procedure. If you are also upgrading plugins, continue below. +If you are **only ugrading the SSR ISO**, once the local software repository has been updated with the ISO, the upgrade can proceed using the [Conductor Upgrade](upgrade_ibu_conductor.md) and [Router Upgrade](upgrade_router.md) procedures. If you are also upgrading plugins, continue below. ### Import Plugin RPMs @@ -228,7 +231,7 @@ This command is resource intensive and can take a while. Please ensure that the Import success ``` -To provide support for SSR400 and SSR440 hardware platforms (SSR software versions 7.1.0 and higher), the following import commands are used: +The SSR400 and SSR440 platforms use an ARM CPU processor and require the `aarch64` version of the plugins. All other platforms should use the `x86_64` files. ``` admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.aarch64.rpm @@ -274,4 +277,4 @@ MIST WAN ASSURANCE Completed in 0.06 seconds ``` -3. After the local software repository has been updated with the ISO and plugin RPMs the upgrade can proceed using the [Router Upgrade](upgrade_router.md) procedure. +3. After the local software repository has been updated with the ISO and plugin RPMs, the upgrade can proceed using the [Conductor Upgrade](upgrade_ibu_conductor.md) and [Router Upgrade](upgrade_router.md) procedures. From 94b314fb6a0a5fce2791176b66547cb90718bd63 Mon Sep 17 00:00:00 2001 From: Chris Date: Thu, 18 Dec 2025 16:13:56 -0500 Subject: [PATCH 6/6] fixing link --- docs/upgrade_restricted_access.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/upgrade_restricted_access.md b/docs/upgrade_restricted_access.md index be59c38434..17f582a6e9 100644 --- a/docs/upgrade_restricted_access.md +++ b/docs/upgrade_restricted_access.md @@ -159,8 +159,8 @@ Use the `filepath` argument to specify the exact location of the ISO. `hunt` wil - `SSR-6.3.0-107.r1.el7.x86_64.ibu-v1.iso` Versions later than 6.3.0 use the `SSR*.iso`. The following steps provide the process to download and import the 7.1.0 ISO as well as plugin RPMs. - -1. On a system that has internet access, use the [ISO Download procedure](intro_downloading_iso.md#downloading-an-iso) to download the `SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso` and any necessary plugin RPMs from the [Download page](https://software.128technology.com/artifactory/list/generic-128t-isos-release-local/). The image and RPMs can be downloaded onto a USB, or some other media that allows you to copy the files to the conductor in the air-gap network. + +1. On a system that has internet access, use the [ISO Download procedure](intro_downloading_iso.md#downloading-an-iso) to download the `SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso` and any necessary plugin RPMs from the [Download page](https://software.128technology.com/artifactory/list/generic-128t-isos-release-local/). The image and RPMs can be downloaded onto a USB, or some other media that allows you to copy the files to the conductor in the air-gap network. :::note The SSR400 and SSR440 platforms use an ARM CPU processor and require the `aarch64` version of the plugins. All other platforms should use the `x86_64` files.