Migrating the application stack to version 7.6.0.20

When upgrading your system from version 7.6.0.19 to version 7.6.0.20, you must complete additional steps to upgrade the application stack.

Before you begin

Verify that the gateway and data servers are already upgraded. Make sure you have the version 7.6.0.20 OVA and upgrade ISO images both available.

About this task

For the application stack, the underlying operating system version has changed to Community Enterprise Operating System (CentOS) version 7 with IBM® StoredIQ® version 7.6.0.20. Therefore, you cannot upgrade the application stack in place and continue to use it. Instead, you must complete a three-step process where you set up a new version 7.6.0.20 OVA deployment for the application stack, update your existing version 7.6.019 application stack to version 7.6.0.20, and then copy your application stack data from the old system to the new system. Make sure to also copy any customizations that are not included in the backups described in the procedure and apply them as required before you start working with the new application stack.

If you have reports or audit logs on your old system that you want to keep, download them. You will no longer have access to the reports or audit logs after the old system is decommissioned.

Procedure

Deploy the IBM StoredIQ version 7.6.0.20 application stack OVA as described in Deploying the virtual appliances.
Make a note of the new application stack's IP address.
Configure the new application stack (in the following steps referred to as CentOS 7 AppStack) including certificate configuration as described in Configuring the application stack.
You can use the /etc/siq/local.yaml file on the CentOS 6.5 AppStack as a reference when you configure the new application stack.
If your CentOS 6.5 AppStack is configured to use LDAP to manage user accounts, also configure the connection to the LDAP server on the new application server as described in Connecting to the LDAP server.
In this case, also use the /etc/siq/local.yaml file on the CentOS 6.5 AppStack as a reference when you configure the connection.

The following steps must be completed on your old application stack VM (in the following steps referred to as CentOS 6.5 AppStack).

Using an SSH tool, log in to the CentOS 6.5 AppStack server as root user.
Check the version by viewing the siq/version file and make sure the system is on the latest IBM StoredIQ version 7.6.0.19 level.
Create backup copies of the following files in the /etc/siq directory because these files are overwritten during the upgrade.
- oauth.conf
- proxy.conf
- report.conf if you customized any of the settings.
1. Change to the /etc/siq directory: cd /etc/siq
2. In the /etc/siq directory, run the following command for each file:
```
cp conf_file conf_file.org
```
Upgrade the system to IBM StoredIQ version 7.6.0.20 as described in Preparing the application stack for migration.
This step is required for a successful migration of your data to the new system. Such an upgraded system is not a supported configuration.
After the upgrade is complete, stop all services with this command: service appstack stop
Verify that all services are stopped using this command: service appstack status
It might take some time for all services to stop completely.
Copy the /etc/siq/siqkwd file from the CentOS 6.5 AppStack to the CentOS 7 AppStack:
1. Change to the /etc/siq directory: cd /etc/siq
2. In the /etc/siq directory, run the following command replacing ip_address with the IP address of the newly deployed application stack:
```
scp siqkwd root@ip_address:/etc/siq/siqkwd
```
This file must exist on the CentOS 7 AppStack before the database is started for the first time.

If you are using LUKS encryption, the next step is required and must be completed at this point. The application data on the new CentOS 7 AppStack is not automatically LUKS-encrypted. Therefore, you must enable LUKS encryption on the CentOS 7 AppStack before you copy any data to the new system.

Enable LUKS encryption:
1. Using an SSH tool, log in to the newly deployed CentOS 7 AppStack as root user.
2. Complete the procedure described in Enabling encryption of IBM StoredIQ AppStack application data.
When the encryption is complete, go back to the CentOS 6.5 AppStack and complete the remaining steps of the migration procedure.
Copy the /var/siq/data/postgresql directory from the CentOS 6.5 AppStack to the CentOS 7 AppStack:
1. Change to the /var/siq/data directory: cd /var/siq/data/
2. In the /var/siq/data directory, run the following command to create backup copy:
```
tar -zcvf postgresql_backup.tar.gz postgresql/
```
3. After the .tar file is created, copy it to the new application stack. Use the following command replacing ip_address with the IP address of the newly deployed application stack:
```
scp postgresql_backup.tar.gz root@ip_address:/var/siq/data/
```
Copy selected files from the /siqsec directory on the CentOS 6.5 AppStack to the CentOS 7 AppStack:
1. Change to the root directory: cd /
2. In the root directory, run the following command to create a backup copy of the selected files:
```
tar -zcvf siqsec_backup.tar.gz /siqsec/vault.secret /siqsec/data
```
3. After the .tar file is created, copy it to the new application stack. Use the following command replacing ip_address with the IP address of the newly deployed application stack:
```
scp siqsec_backup.tar.gz root@ip_address:/
```
Copy the backup copies of the oauth.conf and proxy.conf files from the CentOS 6.5 AppStack to the CentOS 7 AppStack replacing the CentOS 7 AppStack files.
1. Change to the /etc/siq directory: cd /etc/siq
2. In the /etc/siq directory, run the following command for each file replacing ip_address with the IP address of the newly deployed application stack:
```
scp conf_file.org root@ip_address:/etc/siq/conf_file
```
Optional: Copy the backup copy of your customized report configuration file from the CentOS 6.5 AppStack to the CentOS 7 AppStack replacing the CentOS 7 AppStack file.
1. Change to the /etc/siq directory: cd /etc/siq
2. In the /etc/siq directory, run the following command replacing ip_address with the IP address of the newly deployed application stack:
```
scp report.conf.org root@ip_address:/etc/siq/report.conf
```
Note the IP address and the host name of the CentOS 6.5 AppStack.
Run ifconfig and hostname to obtain these values.
Shut down and power off the CentOS 6.5 AppStack by running this command:
```
shutdown –P now
```

The following steps must be completed on the new CentOS 7 AppStack VM.

Using an SSH tool, log in to the newly deployed application stack as root user.
Stop all appstack services by running this command:
```
systemctl stop appstack.target
```
Stop the database service by running this command:
```
systemctl stop appstack-postgresql
```
Verify that all services are completely stopped by running this command:
```
systemctl list-dependencies appstack.target
```
It might take some time for all services to stop completely. The indicator for each service should have changed from green to red except for the service named docker.service.
Restore the postgresql directory:
1. Change to the /var/siq/data directory: cd /var/siq/data/
2. In the /var/siq/data directory, run the following command to rename the existing directory:
```
mv postgresql old_postgresql
```
3. Restore the postgresql directory from the backup copied from the CentOS 6.5 AppStack by running this command:
```
tar -zxvf postgresql_backup.tar.gz
```
Restore the copied files from the /siqsec directory:
1. Change to the root directory: cd /
2. In the root directory, run the following command to copy the existing /siqsec directory:
```
cp -a siqsec old_siqsec
```
3. Restore selected files in the /siqsec directory from the backup copied from the CentOS 6.5 AppStack by running this command:
```
tar -zxvf siqsec_backup.tar.gz
```
If you want to reuse the host name of the CentOS 6.5 AppStack, change the host name on the CentOS 7 AppStack accordingly.
Open the following files and edit them as required:
- /etc/hosts
- /etc/hostname
- /etc/sysconfig/network
For an application stack with a static IP address, change the IP address to the IP address of the old application stack by editing the /etc/sysconfig/network-scripts/ifcfg-ens160 file.
You can also do this for an application stack with a dynamically assigned IP address but you can also work with the new IP address. In this case, you must update the gateway configuration with the new IP address after you complete the application stack setup. To do this, run the /usr/bin/set-appstack-ip.sh script on the gateway. For more information, see Updating the gateway configuration.
If you copied a customized report configuration file from the CentOS 6.5 AppStack, you must add a property introduced with version 7.6.0.20.
Edit the /etc/siq/report.conf file and add the following lines setting the value as required:
```
# Include document digest column for audit reports
use_digest_id=false
```
Restart the CentOS 7 AppStack VM by running the following command:
```
shutdown -r now
```
When all services are up and running on the new VM, log in through the UI and verify that all data has been restored successfully.