OnApp 6.2 Patch 1 CloudBoot Update (6.2.0-156)

28 January 2020

This document provides information on improvements, as well as the upgrade instructions for CloudBoot.

The following packages have been released for CloudBoot:

  • onapp-ramdisk-centos6-kvm-6.2.0-14.noarch.rpm
  • onapp-ramdisk-centos6-xen-6.2.0-14.noarch.rpm
  • onapp-ramdisk-centos7-kvm-6.2.0-14.noarch.rpm
  • onapp-ramdisk-centos7-xen-6.2.0-14.noarch.rpm

Improvements

Key

Release Notes

CLOUDBOOT-576

Updated the following components for CentOS7 KVM ramdisk:

  • kernel version to 3.10.0-1062.9.1.el7.x86_64 to address the CVE-2019-0155, CVE-2019-0154, CVE-2019-11135, CVE-2018-12207, CVE-2019-14821, and the CVE-2019-15239 issues
  • A UFS filesystem sources based on the kernel version 3.10.0-1062.9.1.el7.x86_64 and compiled with the R/W support patch
  • An XFS filesystem driver sources version to 3.10.0-327.36.3.el7.x86_64 based on a kernel version 3.10.0-1062.9.1.el7.x86_64 compiled with the following patches:
    • xfs-make-xfs_bmbt_to_iomap-available-outside-of-xfs_.patch
    • iomap-Switch-from-blkno-to-disk-offset.patch
    • dax-give-DAX-clearing-code-correct-bdev.patch
CLOUDBOOT-577

Updated the following components for CentOS7 Xen ramdisk:

  • kernel version to 4.9.206-36.el7.x86_64
  • A UFS filesystem sources based on the kernel version 4.9.206-36.el7.x86_64 and compiled with the super-ufs_fs_write.patch
  • WireGuard kernel module(s) version 0.0.20190702 built against kernel version 4.9.206-36.el7.x86_64
  • Xen version to 4.10.4.36.g6cb1cb9c63-1.el7 to address the XSA-307/CVE-2019-19581,CVE-2019-19582, XSA-308/CVE-2019-19583, XSA-309/CVE-2019-19578, XSA-310/CVE-2019-19580, and the XSA-311/CVE-2019-19577 issues
CLOUDBOOT-578

Updated the following components for CentOS6 Xen ramdisk:

  • kernel version to 4.9.206-36.el6.x86_64
  • A UFS filesystem sources based on the kernel version 4.9.206-36.el6.x86_64 and compiled with the super-ufs_fs_write.patch
  • WireGuard kernel module(s) version 0.0.20190702 built against kernel version 4.9.206-36.el6.x86_64
  • Xen version to 4.8.5.75.g4c666a7e15-1.el6 to address the XSA-307/CVE-2019-19581,CVE-2019-19582, XSA-308/CVE-2019-19583, XSA-309/CVE-2019-19578, XSA-310/CVE-2019-19580, and the XSA-311/CVE-2019-19577 issues
CLOUDBOOT-579Updated the kernel version for CentOS6 KVM ramdisk to 4.8.5.86.g8db85532cb-1.el6 to address the CVE-2019-14821, CVE-2018-12207, CVE-2019-11135, CVE-2019-0154, and the CVE-2019-0155 issues.

Upgrade CloudBoot Packages

  • Create a backup of the /tftpboot directory in case the storage packages rollback is needed.
  • Power off Windows virtual servers before proceeding to the following procedures.

To upgrade the OnApp Storage packages, follow the next procedure.

  1. Upgrade the repo (run on Control Panel box):

    1
    
    # yum -y update http://rpm.repo.onapp.com/repo/onapp-repo-6.2.noarch.rpm
    
  2. Update the onapp -store-install package (run on Control Panel box):

    1
    
    # yum update onapp-store-install
    
  3. Update the following packages (run on Control Panel box):

    1
    2
    3
    4
    5
    6
    
    # yum update onapp-ramdisk-tools 
    # yum update onapp-ramdisk-centos6-xen 
    # yum update onapp-ramdisk-centos6-kvm 
    # yum update onapp-ramdisk-centos7-xen 
    # yum update onapp-ramdisk-centos7-kvm 
    # yum update onapp-ramdisk-centos7-default
    
    After the packages installation, go to the Control Panel’s Settings menu > Configuration and click the Save Configuration button.
  4. Run the script:

    1
    
    # /onapp/onapp-store-install/onapp-store-install.sh
    
    Be aware that the disk-less nodes password is the root password for the CloudBoot compute resources. By default it is blank.

    When run in the interactive mode, enter the required information.

To upgrade CloudBoot backup servers, refer to the Upgrade Guide. The “Simple Reboot” and “Migrate and Reboot” options are available.