MetroCluster Manuals ( CA08871-401 )

Install or upgrade to Tiebreaker 1.5

Perform a new installation or upgrade to Tiebreaker 1.5 on your host Linux operating system to monitor MetroCluster configurations.

About this task

Your storage system must be running a supported version of ONTAP. See the Software requirements table for more details.
You must have installed OpenJDK by using the yum install java-x.x.x-openjdk command. Tiebreaker 1.5 and later supports OpenJDK 17, 18, or 19.
You can install MetroCluster Tiebreaker as a non-root user with sufficient administrative privileges to perform the Tiebreaker installation, create tables and users, and set the user password.

Steps

Download the MetroCluster Tiebreaker software and the MetroCluster_Tiebreaker_RPM_GPG key.

The MetroCluster_Tiebreaker_RPM_GPG key is available to download from the same page that you download the software package for Tiebreaker 1.5 from the DVD included in the Product.
Log in to the host as the root user.
Create a non-root user and the mcctbgrp group.
1. Create a non-root user and set the password.
  
  The following example commands create a non-root user named mcctbuser1:
  [root@mcctb ~]# useradd mcctbuser1 [root@mcctb ~]# passwd mcctbuser1 Changing password for user mcctbuser1. New password: Retype new password: passwd: all authentication tokens updated successfully.
2. Create a group named mcctbgrp:
  
  [root@mcctb ~~]# groupadd mcctbgrp
3. Add the non-root user you created to the mcctbgrp group.
  
  The following command adds mcctbuser1 to the mcctbgrp group:
  
  [root@mcctb ~]# usermod -a -G mcctbgrp mcctbuser1

Verify the RPM file.

Run the following substeps from the directory containing the RPM key.

Download and import the RPM key file:

[root@mcctb ~]# rpm --import MetroCluster_Tiebreaker_RPM_GPG.key

Verify the that the correct key was imported by checking the fingerprint.

The following example shows a correct key fingerprint:

root@mcctb:~/signing/mcctb-rpms# gpg --show-keys --with-fingerprint MetroCluster_Tiebreaker_RPM_GPG.key
pub   rsa3072 2022-11-17 [SCEA] [expires: 2025-11-16]
      65AC 1562 E28A 1497 7BBD  7251 2855 EB02 3E77 FAE5
uid                      MCCTB-RPM (mcctb RPM production signing) <mcctb-rpm@fujitsu.com>

Verify the signature: rpm --checksig Fujitsu-MetroCluster-Tiebreaker-Software-1.5-1.x86_64.rpm
```
Fujitsu-MetroCluster-Tiebreaker-Software-1.5-1.x86_64.rpm: digests OK
```
You must only proceed with installation after you have successfully verified the signature.

Install or upgrade the Tiebreaker software:

You can only upgrade to Tiebreaker version 1.5 when you are upgrading from Tiebreaker version 1.4. Upgrading from earlier versions to Tiebreaker 1.5 is not supported.

Select the correct procedure depending on whether you’re performing a new installation or upgrading an existing installation.

Perform a new installation

Retrieve and record the absolute path for Java:

[root@mcctb ~]# readlink -f /usr/bin/java
/usr/lib/jvm/java-19-openjdk-19.0.0.0.36-2.rolling.el8.x86_64/bin/java

Run the following command: rpm -ivh Fujitsu-MetroCluster-Tiebreaker-Software-1.5-1.x86_64.rpm

The system displays the following output for a successful installation:

When prompted during the installation, provide the non-root user that you previously created and assigned to the mcctbgrp group.

Verifying... ################################# [100%]
Preparing... ################################# [100%]
Updating / installing...
1:Fujitsu-MetroCluster-Tiebreaker-So################################# [100%]
Enter the absolute path for Java : /usr/lib/jvm/java-19-openjdk-19.0.0.0.36-2.rolling.el8.x86_64/bin/java
Verifying if Java exists...
Found Java. Proceeding with the installation.
Enter host user account to use for the installation:
mcctbuser1
User account mcctbuser1 found. Proceeding with the installation
Enter database user name:
root
Please enter database password for root
Enter password:
Sealed false
Do you wish to auto unseal vault(y/n)?y
Enter the key1:
Enter the key2:
Enter the key3:
Success! Uploaded policy: mcctb-policy
Error enabling approle auth: Error making API request.
URL: POST http://127.0.0.1:8200/v1/sys/auth/approle
Code: 400. Errors:
* path is already in use at approle/
Success! Enabled the kv secrets engine at: mcctb/
Success! Data written to: auth/approle/role/mcctb-app
Password updated successfully in the vault.
Synchronizing state of fujitsu-metrocluster-tiebreaker-software.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.
Executing: /usr/lib/systemd/systemd-sysv-install enable fujitsu-metrocluster-tiebreaker-software
Created symlink /etc/systemd/system/multi-user.target.wants/fujitsu-metrocluster-tiebreaker-software.service → /etc/systemd/system/fujitsu-metrocluster-tiebreaker-software.service.
Attempting to start Fujitsu MetroCluster Tiebreaker software services
Started Fujitsu MetroCluster Tiebreaker software services
Successfully installed Fujitsu MetroCluster Tiebreaker software version 1.5.

Upgrading an existing installation

Verify that a supported version of OpenJDK is installed and is the current Java version located on the host.

For upgrades to Tiebreaker 1.5, you must install either OpenJDK version 17, 18, or 19.
```
[root@mcctb ~]# readlink -f /usr/bin/java
/usr/lib/jvm/java-19-openjdk-19.0.0.0.36-2.rolling.el8.x86_64/bin/java
```

Verify the Vault service is unsealed and running: vault status

[root@mcctb ~]# vault status
Key             Value
---             -----
Seal Type       shamir
Initialized     true
Sealed          false
Total Shares    5
Threshold       3
Version         1.12.2
Build Date      2022-11-23T12:53:46Z
Storage Type    file
Cluster Name    vault
Cluster ID      <cluster_id>
HA Enabled      false

Upgrade the Tiebreaker software.

[root@mcctb ~]# rpm -Uvh Fujitsu-MetroCluster-Tiebreaker-Software-1.5-1.x86_64.rpm

The system displays the following output for a successful upgrade:

Enter the absolute path for Java : /usr/lib/jvm/java-19-openjdk-19.0.0.0.36-2.rolling.el8.x86_64/bin/java
Verifying if Java exists...
Found Java. Proceeding with the installation.
Enter host user account to use for the installation:
mcctbuser1
User account mcctbuser1 found. Proceeding with the installation
Sealed false
Do you wish to auto unseal vault(y/n)?y
Enter the key1:
Enter the key2:
Enter the key3:
Success! Uploaded policy: mcctb-policy
Error enabling approle auth: Error making API request.
URL: POST http://127.0.0.1:8200/v1/sys/auth/approle
Code: 400. Errors:
* path is already in use at approle/
Success! Enabled the kv secrets engine at: mcctb/
Success! Data written to: auth/approle/role/mcctb-app
Enter database user name : root
Please enter database password for root
Enter password:
Password updated successfully in the database.
Password updated successfully in the vault.
Synchronizing state of fujitsu-metrocluster-tiebreaker-software.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.
Executing: /usr/lib/systemd/systemd-sysv-install enable fujitsu-metrocluster-tiebreaker-software
Attempting to start Fujitsu MetroCluster Tiebreaker software services
Started Fujitsu MetroCluster Tiebreaker software services
Successfully upgraded Fujitsu MetroCluster Tiebreaker software to version 1.5.
Cleaning up / removing...
2:Fujitsu-MetroCluster-Tiebreaker-So################################# [100%]

If you enter the wrong MySQL root password, the Tiebreaker software indicates that it was installed successfully, but displays "Access denied" messages. To resolve the issue, you must uninstall the Tiebreaker software by using the rpm -e command, and then reinstall the software by using the correct MySQL root password.

Check the Tiebreaker connectivity to the MetroCluster software by opening an SSH connection from the Tiebreaker host to each of the node management LIFs and cluster management LIFs.