Skip to main content

AirGap Vault Agent - In-place Upgrade

Upgrade Pre-checks

  1. SSH to the AirGap Vault Agent VM as the ecaadmin user.

  2. Get output of the following command and copy it to a notepad: ecactl isilons list

  3. Run the following commands to verify AirGap is working:

    a. ecactl airgap syncjob

    • Output should be the list of airgap job names.

    b. ecactl airgap check --prod <NAME_OF_PROD_CLUSTER> (name of the protected cluster will be in the Step 2 output)

    • Output should show connection to the production Eyeglass as succeeded. If failing, open a support ticket to troubleshoot further.
    • If multiple production Isilons, then test for each separately.
  4. If all looks good, proceed with upgrade.


Upgrade Steps

  1. Take a VM level snapshot of the Vault Agent VM.

  2. Download the latest AirGap upgrade file from the support portal: https://support.superna.net/hc/en-us

  3. Use WinSCP to transfer the ecaxxxxxxx.run upgrade file to the AirGap Vault Agent VM.

  4. Log in as ecaadmin.

  5. Run: ecactl cluster down

  6. Run ecactl cluster status to verify all services are down.

  7. Run: chmod +x ecaxxxxxxx.run

    warning

    Make sure the upgrade filename matches the OS version currently installed.

  8. Run: ./ecaxxxxxxx.run

  9. Once upgrade completes, run: sudo systemctl restart docker

  10. Run: ecactl cluster up

    warning

    Do NOT use the --clean flag, otherwise zk-ramdisk gets cleared.


Post Upgrade Checks

  1. Run ecactl isilons list and verify the output is the same as before the upgrade.

  2. Run the following commands to verify AirGap is working:

    a. ecactl airgap syncjobs

    • Output should be the list of airgap job names and scheduled job times.

    b. ecactl airgap check --prod <NAME_OF_PROD_CLUSTER> (name of the protected cluster will be in the Step 1 output)

    • Output should show connection to the production Eyeglass as succeeded. If failing, open a support ticket to troubleshoot further.
    • If multiple production Isilons, then test for each separately.
  3. Verify the AirGap job list:

    ecactl airgap list

  4. Start an AirGap job if required, or wait for the scheduled run:

    ecactl airgap startjob --job <job name> (job name can be retrieved from Step 3 output)

  5. View the job status:

    ecactl jobs view --follow --id <Job_ID> (Job ID can be retrieved from Step 4 output)