Upgrade from 17.7.12 to 18.1.5

Started by mestafin, March 23, 2018, 08:12:44 AM

Previous topic - Next topic
Hi,

Currently we have 2 x OPNsense units running version 17.7.12 in a HA cluster on two hardware units from Decisio  (model OPNsense Quad Core Gen3 SSD Rack, SKU: OPN19004R)

Do we need to first upgrade to 17.1.12_1 before we attempt to upgrade to 18.1.5?

Is it better to do a clean install of 18.1.5 and restore the configuration backup?

If there are issues, how do we revert back to 17.1.12?

Regards

"_1" only unlocks the upgrade, no other changes. You'll effectively stay on 17.7.12.

Upgrade the backup, swing traffic over, see how that goes. If you are not satisfied with 18.1.5 swing traffic back and use a 17.7 image to "config import + install" to retain all your settings on the to-be-reverted host.

(The config import + install is necessary because OS downgrades are generally not supported / encouraged.)

If 18.1.5 works ok, update the other node and swing traffic back to the original master.


Cheers,
Franco

Thanks, will schedule the upgrade for the weekend maintenance window

Expect this work to be done some time late tomorrow due to time constraints, in any case before Monday.

Quote from: franco on March 24, 2018, 01:39:43 PM
Expect this work to be done some time late tomorrow due to time constraints, in any case before Monday.

Not sure what this means?

We successfully updated to 8.1.5 over the weekend.

We do mis the old "normal" log file view with the simple ability to create a rule from the log file.
Is this still possible and that we just missed it?

It means from time to time we move the update path directly to the latest version, it is 17.7.12 -> 18.1, but later you will skip to the latest 18.1.x. That hasn't been done precisely yet unfortunately, you landed on 18.1.1, then updated to 18.1.5 but that works too in general.

Normal and dynamic view replaced with live view, filtering works as is, but we want to add more columns for the log filtering and when we have a firewall API create rules for the firewall again. It's an ongoing effort.


Cheers,
Franco