Skip to main content
Migration Notice
We're migrating documentation from the old portal into this one. Some things may look a little different or out of place in the meantime — we know, and we're working to get it right. If something's unclear or doesn't look right, let us know.

AirGap Vault Agent - In-place Upgrade

Upgrade Pre-checks​

  1. SSH to the AirGap Vault Agent VM as the ecaadmin user.

  2. Get output of the following command and copy it to a notepad: ecactl isilons list

  3. Run the following commands to verify AirGap is working:

    a. ecactl airgap syncjob

    • Output should be the list of airgap job names.

    b. ecactl airgap check --prod <NAME_OF_PROD_CLUSTER> (name of the protected cluster will be in the Step 2 output)

    • Output should show connection to the production Eyeglass as succeeded. If failing, open a support ticket to troubleshoot further.
    • If multiple production Isilons, then test for each separately.

  4. If all looks good, proceed with upgrade.

Upgrade Steps​

  1. Take a VM level snapshot of the Vault Agent VM.

  2. Download the latest AirGap upgrade file from the support portal: https://support.superna.net/hc/en-us

  3. Use WinSCP to transfer the ecaxxxxxxx.run upgrade file to the AirGap Vault Agent VM.

  4. Log in as ecaadmin.

  5. Run: ecactl cluster down

  6. Run ecactl cluster status to verify all services are down.

  7. Run: chmod +x ecaxxxxxxx.run

    warning

    Make sure the upgrade filename matches the OS version currently installed.

  8. Run: ./ecaxxxxxxx.run

  9. Once upgrade completes, run: sudo systemctl restart docker

  10. Run: ecactl cluster up

    warning

    Do NOT use the --clean flag, otherwise zk-ramdisk gets cleared.

Post Upgrade Checks​

  1. Run ecactl isilons list and verify the output is the same as before the upgrade.

  2. Run the following commands to verify AirGap is working:

    a. ecactl airgap syncjobs

    • Output should be the list of airgap job names and scheduled job times.

    b. ecactl airgap check --prod <NAME_OF_PROD_CLUSTER> (name of the protected cluster will be in the Step 1 output)

    • Output should show connection to the production Eyeglass as succeeded. If failing, open a support ticket to troubleshoot further.
    • If multiple production Isilons, then test for each separately.

  3. Verify the AirGap job list:

    ecactl airgap list

  4. Start an AirGap job if required, or wait for the scheduled run:

    ecactl airgap startjob --job <job name> (job name can be retrieved from Step 3 output)

  5. View the job status:

    ecactl jobs view --follow --id <Job_ID> (Job ID can be retrieved from Step 4 output)