Entrust appliance upgrade to 5.47 version fail.
This is due a known issue affecting upgrades to
Gateway version 5.47 when RPM dependency version conflicts are present on the
appliance. In these situations, the upgrade process may fail because DNF cannot
automatically resolve conflicting package versions.
You have to follow the steps mentioned below:
Problem:
Gateway
upgrades install the target IDaaS-Gateway meta package, which pins the
appliance RPM set to specific package versions. The upgrade script currently
executes DNF without the --allowerasing option.
When
upgrading an Enterprise Service Gateway to version 5.47, the upgrade can fail
if an installed RPM package requires an older dependency version than the
target Gateway version.
Sample log
entry:
Installed
grub2-tools-extra-1:2.06-114.0.1.el9_7 requires grub2-common =
1:2.06-114.0.1.el9_7. The target Gateway meta package requires grub2-common =
1:2.06-114.0.1.el9_7.1.
Cause:
The
Gateway upgrade script invokes DNF package installation commands without the
--allowerasing option. When existing RPMs require package versions that differ
from those required by the target Gateway release, DNF cannot automatically
remove or replace conflicting packages and therefore aborts the transaction.
Solution:
The
approach to solving the upgrade failure consists of the following three steps.
Step 1: Re-register the Gateway
- Login to IDaaS
Admin Portal
- Navigate to
GATEWAYS
- Select the Eclipsis
(Three vertical dots)
- Select Re-Activate,
and RE-ACTIVATE again
- Copy the generated
Registration Code
- Login to the ESG
Cockpit
- Click Re-Activate.
- Select Register,
leaving options 1,2 and 3 as-is
- Paste the copied
Registration Code in the respective field.
- Click Register.
- Wait for the
registration to complete.
Step 2: Modify the Upgrade Script
- Select
Terminal
- Navigate to tools directory:
cd /home/entrust/tools
- Verify and
note the current permissions and ownership of the upgrade script:
ls -la upgrade.sh
- Edit the
gateway upgrade script:
vi /home/entrust/tools/upgrade.sh
- Locate the
following line:
if ! dnf install -y "${META_PACKAGE}"; then
Replace it with:
if ! dnf install -y --allowerasing "${META_PACKAGE}";
then
- Locate the
following line:
if ! dnf install -y
"${META_PACKAGE}-${TARGET_GATEWAY_VERSION}"; then
Replace it with:
if ! dnf install -y --allowerasing
"${META_PACKAGE}-${TARGET_GATEWAY_VERSION}"; then
- Save the
file.
- Verify that the modifications
were saved successfully.
- Reconfirm that the permissions
and ownership of upgrade.sh remain unchanged from the values recorded
earlier:
- Optional. If different, reset
to default;
sudo chmod 755 upgrade.sh
sudo chown entrust:entrust upgrade.sh
Step 3: Run the Gateway Upgrade Again
- Access the IDaaS
Admin Portal
- Navigate to
GATEWAYS
- Select the Upgrade
icon on the intended gateway
- Select UPGRADE
In case you want to view upgrades logs here it is command:
tail -100 /var/log/gateway_upgrade.log
