Skip to content

Docs 510 import offline iso and plugins #901

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Chr1st0ph3rTurn3r merged 7 commits into from
Dec 19, 2025
Merged

Docs 510 import offline iso and plugins #901

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
6d4e6fb
adding import rpm information
Chr1st0ph3rTurn3r Dec 17, 2025
9791fd6
adding version table for import rpm command
Chr1st0ph3rTurn3r Dec 17, 2025
5581989
fix broken link
Chr1st0ph3rTurn3r Dec 17, 2025
a83d8a4
interim commit
Chr1st0ph3rTurn3r Dec 18, 2025
fcf1c52
updates per review comments.
Chr1st0ph3rTurn3r Dec 18, 2025
94b314f
fixing link
Chr1st0ph3rTurn3r Dec 18, 2025
db3c720
Merge branch 'master' into DOCS-510-import-oline-iso-plugins
Chr1st0ph3rTurn3r Dec 19, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions docs/cli_reference.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1954,6 +1954,12 @@ import rpm [check-rpm-signature <check-rpm-signature>] [force] [verbose] filepat
| force | Skip confirmation prompt |
| verbose | Increase log level verbosity |

#### Version History

| Release | Modification |
| ------- | ----------------------------|
| 7.0.1 | This feature was introduced |

## `initialize conductor`

Initializes the current device as a conductor.
Expand Down
127 changes: 125 additions & 2 deletions docs/upgrade_restricted_access.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,6 +62,10 @@ An issue has been identified that may be observed in conductor deployments runni

We have identified an issue when onboarding SSR routers installed with older versions of software (such as 5.4.4) to Conductors running 6.3.x, when running in offline-mode. In some cases, certain software packages are not available to be installed during onboarding. To work around this issue, import the **package-based** (the "128T" prefixed) ISO for the current conductor version onto the conductor. This provides the necessary software packages to complete the onboarding process. This issue will be resolved in a future release.

**Use of the [Import ISO](#import-iso) and [Import RPM](#import-plugin-rpms) Commands**

When using the `import iso` and `import rpm` commands to install plugins necessary for your deployment, it is important to copy both the specific image (ISO) as well as the individual plugin RPMs and all associated dependencies for the plugins. All of these files are imported to the conductor for and available for router installation.

### Single-Version 6.3.0 Upgrade

The following process is used to upgrade a Conductor and Conductor-managed Routers to **version 6.3.0** of the SSR software. Beginning with SSR software version 6.3.0, a conductor can manage routers running image-based software installations.
Expand Down Expand Up @@ -150,8 +154,127 @@ The [`import iso`](cli_reference.md#import-iso) command is used to import the SS

`import iso [check-rpm-signature <check-rpm-signature>] [force] [verbose] {hunt | filepath <filepath>}`

Use the `filepath` argument to specify the exact location of the ISO. `hunt` will search for files that match the patterns `128T*.iso`, `SSR*.iso`, or `SSR*.tar`, and the corresponding checksum and signature files. These checksum and signature files are essential for security verification and are included as part of the `import iso` operation. To install the 6.3.0 software, the following file must be downloaded to the USB and imported onto the conductor:
Use the `filepath` argument to specify the exact location of the ISO. `hunt` will search for files that match the patterns `128T*.iso`, `SSR*.iso`, or `SSR*.tar`, (important when installing SSR 6.3.0) and the corresponding checksum and signature files. These checksum and signature files are essential for security verification and are included as part of the `import iso` operation. For example, to install the 6.3.0 software, the following file must be downloaded to the USB and imported onto the conductor:

- `SSR-6.3.0-107.r1.el7.x86_64.ibu-v1.iso`

After the local software repository has been updated with the ISO, the upgrade can proceed.
Versions later than 6.3.0 use the `SSR*.iso`. The following steps provide the process to download and import the 7.1.0 ISO as well as plugin RPMs.
<!-- markdown-link-check-disable -->
1. On a system that has internet access, use the [ISO Download procedure](intro_downloading_iso.md#downloading-an-iso) to download the `SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso` and any necessary plugin RPMs from the [Download page](https://software.128technology.com/artifactory/list/generic-128t-isos-release-local/). The image and RPMs can be downloaded onto a USB, or some other media that allows you to copy the files to the conductor in the air-gap network. <!-- markdown-link-check-enable -->

:::note
The SSR400 and SSR440 platforms use an ARM CPU processor and require the `aarch64` version of the plugins. All other platforms should use the `x86_64` files.
:::

2. If you are using a USB, plug the USB into your device.
3. Copy the ISO (and plugin RPMs if required) to a directory on the Conductor, for example `/home/t128`.

```
[root@conductor-t285 t128]# ll /home/t128/.iso
Copy link
Contributor

@MichaelBaj MichaelBaj Dec 17, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Obviously we don't need to teach people about the cp command, but you should add steps for:

  • copy the files to the USB
  • mount the USB onto the conductor
  • copy the files to the conductor (is the location /home/t128 correct? If so, please specify that the files must go here.

Copy link
Contributor

@agrawalkaushik agrawalkaushik Dec 17, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The location can be anywhere on the system - the import rpm command takes a full path and copies it to the right spot. Technically, that can be the path be the mount directory too - so possibly no need for an extra cp operation. I'm not sure if we absolutely must use the USB mount for this in the doc (might add some confusion). A lot of conductors tend to be virtual deployments.

-rw-r----- 1 root root 4346347520 Nov 25 03:13 /home/t128/SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso
[root@conductor-t285 t128]# ll /home/t128/.rpm
-rw-r----- 1 root root 11249371 Nov 14 17:11 /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.aarch64.rpm
-rw-r----- 1 root root 12315170 Nov 14 17:09 /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.x86_64.rpm
-rw-r----- 1 root root 6030629 Nov 14 17:11 /home/t128/128T-mist-agent-5.2.9458-1.el9.aarch64.rpm
-rw-r----- 1 root root 6586440 Nov 14 17:09 /home/t128/128T-mist-agent-5.2.9458-1.el9.x86_64.rpm
-rw-r----- 1 root root 4330389 Nov 14 17:11 /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.aarch64.rpm
-rw-r----- 1 root root 4402674 Nov 14 17:09 /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.x86_64.rpm
```

4. Import the ISO.

```
[root@conductor-t285 t128]# su - admin
admin@node0.conductor-t285# import iso filepath /home/t128/SSR-7.1.0-50.r1.el9.x86_64.ibu-v1.iso
This command is resource intensive and can take a while. Are you sure? [y/N]: y
✔ Importing...
Import success

admin@node0.conductor-t285# show system software available
Wed 2025-12-10 00:12:48 UTC
✔ Retrieving versions 1/1 targets complete...

========= ============= =========== ===========
Release Version Channel Source
========= ============= =========== ===========
7.1 SSR-7.1.0-50 downloads downloads
```

If you are **only ugrading the SSR ISO**, once the local software repository has been updated with the ISO, the upgrade can proceed using the [Conductor Upgrade](upgrade_ibu_conductor.md) and [Router Upgrade](upgrade_router.md) procedures. If you are also upgrading plugins, continue below.

### Import Plugin RPMs

The [`import rpm`](cli_reference.md#import-rpm) command is used to import SSR plugin RPMs onto a local repository, allowing the plugins to be upgraded along with the ISO without connecting to Juniper servers. When upgrading a conductor or when `offline-mode` is defined for a router, the plugin RPMs and all the associated dependencies must be imported to the target conductor to perform the upgrade.

:::note
The `import-rpm` command is available beginning with SSR version 7.0.1.
:::

When using the `import-rpm` command, be sure the downloaded files include the ISO and plugin RPMs as shown above.

1. Import each RPM file path along with the dependencies.

```
admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.x86_64.rpm
This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y
✔ Importing...
Import success

admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-mist-agent-5.2.9458-1.el9.x86_64.rpm
This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y
✔ Importing...
Import success

admin@node0.conductor-t285# import rpm distribution el9 architecture x86_64 filepath /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.x86_64.rpm
This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y
✔ Importing...
Import success
```

The SSR400 and SSR440 platforms use an ARM CPU processor and require the `aarch64` version of the plugins. All other platforms should use the `x86_64` files.

```
admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-cloud-intel-agent-5.2.9458-1.el9.aarch64.rpm
This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y
✔ Importing...
Import success

admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-mist-agent-5.2.9458-1.el9.aarch64.rpm
This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y
✔ Importing...
Import success

admin@node0.conductor-t285# import rpm distribution el9 architecture aarch64 filepath /home/t128/128T-mist-wan-assurance-3.101.0-302.el9.aarch64.rpm
This command is resource intensive and can take a while. Please ensure that the specified distribution and architecture matches all RPMs to import. Are you sure? [y/N]: y
✔ Importing...
Import success
```

2. Use `show plugins available` to see the current and new versions of the plugin software.

```
admin@node0.conductor-t285# show plugins available name 128T-mist-wan-assurance
Wed 2025-12-10 00:15:40 UTC
✔ Querying...

MIST WAN ASSURANCE

Category:
Monitoring

Summary:
128T Mist WAN Assurance

Description:
Provides applications and configuration to enable connectivity to Mist cloud for 128T Routers.

Installed RPM:
node0: 128T-mist-wan-assurance-3.100.0-3031.el9

Available RPMs:
128T-mist-wan-assurance-3.101.0-302.el9

Completed in 0.06 seconds
```

3. After the local software repository has been updated with the ISO and plugin RPMs, the upgrade can proceed using the [Conductor Upgrade](upgrade_ibu_conductor.md) and [Router Upgrade](upgrade_router.md) procedures.