tech note

インフラ技術や車についてつぶやいていくブログ

EX OSVersionUP時のエラーメッセージと対処方法

f:id:tea_cat:20180911055207j:plain

インストールパッケージの破損

> request system software add /var/tmp/jinstall-ex-2200-12.3R12-S10-domestic-signed.tgz reboot

[Oct  4 14:30:43]: Checking pending install on fpc1

[Oct  4 14:30:44]: Checking pending install on fpc0
[Oct  4 14:30:44]: Pushing bundle to fpc1

[Oct  4 14:35:38]: Validating on fpc1
truncated or corrupted package: /var/tmp/jinstall-ex-2200-12.3R12-S10-domestic-signed.tgz
error: Failed to remove bundle from fpc1

正しいイメージを再度DLし確認ください。

時刻同期

パッケージ署名時刻が機器の動作時刻以降となり、エラーとなる

> request system software add /var/tmp/jinstall-ex-4200-15.1R7-S2-domestic-signed.tgz reboot

[Feb  2 15:06:23]: Retrieving software images. This process can take several minutes. Please be patient..

[Feb  2 15:07:19]: Retrieving version and model information from /var/tmp/jinstall-ex-4200-15.1R7-S2-domestic-signed.tgz

[Feb  2 15:08:15]: Checking pending install on fpc1

[Feb  2 15:08:15]: Checking pending install on fpc0
[Feb  2 15:08:15]: Pushing bundle to fpc1

[Feb  2 15:10:00]: Validating on fpc1

[Feb  2 15:10:19]: Validating on fpc0
[Feb  2 15:10:19]: Done with validate on all virtual chassis members

fpc1:
Verify the signature of the new package
verify-sig: cannot validate certs.pem
certificate is not yet valid: /C=US/ST=CA/L=Sunnyvale/O=Juniper Networks/OU=Juniper CA/CN=PackageProductionRSA_2018/emailAddress=ca@juniper.net

ERROR: Package signature validation failed.  Aborting install.
error: Failed to remove bundle from fpc1

set dateコマンドにより、一度機器の時刻を設定するか、
no-validateオプションを用いたバージョンアップを実施する事で対処可能。

>set date 201810041654  
> request system software add <パッケージ名> no-validate

既にバージョン変更用のインストールパッケージ適用が実施されている

> request system software nonstop-upgrade /var/tmp/jinstall-ex-4200-15.1R7-S2-domestic-signed.tgz
Chassis ISSU Check Done
[Oct  4 18:32:22]:ISSU: Validating Image
[Oct  4 18:32:24]:ISSU: Preparing Backup RE
[Oct  4 18:32:25]: Installing image on other FPC's along with the backup

[Oct  4 18:32:25]: Checking pending install on fpc1
There is already a reboot pending for software rollback.
    Use the 'request system reboot' command to complete the operation,
    or the 'request system software rollback' command to abort rollback.
error: [Oct  4 18:32:25]: Backup RE upgrade failed
error: ISSU Aborted! Backup RE maybe in inconsistent state, Please restore backup RE
Chassis ISSU Aborted
[Oct  4 18:32:25]:ISSU: IDLE
>request system software rollback 

コマンドにより、適用されているインストールパッケージを削除頂いた後、バージョンアップを実施