Upgrade TufinOS 3 to 4: In-place, VMWare ESXi, Central/Remote Cluster, TOS Reinstall

Overview

This procedure is for upgrading TufinOS 3 to 4 on the same VMWare ESXi machines in a central or remote cluster. For central clusters, this is relevant when there are changes to the server configuration. This requires upgrading first the worker nodes and then the data node.

If you have both central and remote clusters, upgrade the central cluster first.

During the TufinOS upgrade there will be some downtime. TOS will need to be reinstalled

Is This The Right Procedure?

This procedure is ONLY for:

  • TOS R24-1

  • Single data node remote clusters

  • Single data node central clusters - if you plan on making changes to the server configurations (for example: IP address, server timezone)

  • Upgrades on the same VMWare ESXI machines

If your TOS release is not R24-1, go to the Knowledge Center that matches your TOS version. If other requirements are not met, select a different procedure.

Prerequisites

  1. This procedure must be performed by an experienced Linux administrator with knowledge of network configuration.

  2. If you are using NFS, your backup server needs to be running NFS 4.

  3. For data nodes only. Make sure you do not have unsupported LVM Volume Groups:

    [<ADMIN> ~]$ sudo vgdisplay --noheadings -C -o vg_name | grep -qs -v "[\t ]*VolGroup0[12]$" && echo "You cannot uppgrade."
    sudo vgdisplay --noheadings -C -o vg_name | grep -qs -v "[\t ]*VolGroup0[12]$" && echo "You cannot uppgrade."

    If the output returns "You cannot upgrade.", do not use the upgrade method in the boot menu to upgrade to TufinOS 4.40. Perform the upgrade on new VMWare ESXi machines.

    If you receive no output, proceed with the next step below.

  4. For data nodes only. Make sure your /var/log partition is large enough:

    [<ADMIN> ~]$ sudo lsblk | grep "MOUNTPOINT\|/var/log$"
    sudo lsblk | grep "MOUNTPOINT\|/var/log$"

    If the output returns a partition size of 400 MB or less, do not perform this upgrade procedure. Perform the upgrade on new VMWare ESXi machines.

  5. If you have any external disks (for example, etcd), disconnect them. These disks should be reconnected after the TufinOS upgrade is complete.

Downloads

  1. Download the TufinOS 4.40 installation package from the Download Center.

    • For a VMWare ESXi machine, download the .iso image file.

  2. Extract the TufinOS image from its archive.

    [<ADMIN> ~]$ sudo tar xzvf <FILENAME>.tgz
    sudo tar xzvf <FILENAME>.tgz

    The run file name includes the release, version, build number, and type of installation.

    TufinOS ISO file example: TufinOS-4.40-4368238-x86_64-Final.iso

  3. Verify the integrity of the TufinOS installation package.

    [<ADMIN> ~]# sha256sum -c TufinOS-X.XX-XXXXXX-x86_64-Final.iso.sha256
    sha256sum -c TufinOS-X.XX-XXXXXX-x86_64-Final.iso.sha256

    The output should return OK

Preliminary Preparations

  1. If you are running a multi-node cluster, get a list of your nodes.

    [<ADMIN> ~]$ sudo tos cluster node list
    sudo tos cluster node list

Upgrade Worker Nodes

Repeat these steps for each worker node.

Upgrade the Data Node