Changes

Jump to: navigation, search

Update

272 bytes added, 14:29, 29 March 2018
no edit summary
[[Image:Vsr-update.png |thumb|right|300px|Supervising the update from a VMware console]]
[[Image:Vsr-webupdate.png |thumb|right|300px|The internet connection settings for the recovery firmware are auto-filled from the configuration on the web admin's update page]]
 
Software update is an important part of maintaining high security in your network. Updates are released on regular basis with no strict schedule to allow fast updates when possible threats arise. Updates are complete system images that are downloaded by the "recovery firmware" directly to the (normally read-only) system disk (CF, USB, etc) from our update servers (account for an estimate download size of 100MB). The advantage of "complete system image" updates (that overwrites the entire system disk) is that every appliance is known to be exactly identical.
* Be prepared to access the video/[[serial console]] in case of failure
== Standard (cached) update OpenBSD updates ==If your To update the OpenBSD system disk (CompactFlash, USB stick or virtual disk) is at least 1 GB, or youuse [https://man.openbsd.org/syspatch syspatch]: # Login as '''root'''ve attached a (by enabling [[architecture#File_system|storageroot access]] (USB or virtual) disk, it's possible to pre-download the system image before booting into # If the recovery OS. This root partition is the recommended update methodless than 1 GB, especially for setups that use eg. [[PPPoEgrow the system partition]] or other connection methods which are not available in # If the recovery OS. /tmp partition is less than 400 MB, run <tt>mkdir -p /tmp2 && export TMPDIR=/tmp2</tt> # Run#* <tt>/usr/libexec/reorder_kernel && syspatch</tt>#* <tt>reboot</tt>
== Streaming update SR package updates ==If you're unable to use There are two types of software update methods for the normal SR (securityrouter.org) distribution; cached) update method, you can perform a ''and streaming'' . There are three ways of initialising an update. The system will reboot to the "recovery firmware" partition, erase the system partition (leaving the configuration partition intact), downloading and writing the image to the system partition while verifying its SHA256 checksum, and finally rebooting back to the newly created system partition when done, resuming normal operations.
== Updating ==There are three ways of initialising an update.* From the web administration; 's System > Software updatepage
* On boot, by pressing "f" (generally any key) when prompted, and then in the recovery OS console type "update" and follow the instructions
* From the [[CLI]] using the syntax:
|-
|}
 
=== Standard (cached) update ===
If your system disk (CompactFlash, USB stick or virtual disk) is at least 1 GB, or you've attached a [[architecture#File_system|storage]] (USB or virtual) disk, it's possible to pre-download the system image before booting into the recovery OS. This is the recommended update method, especially for setups that use eg. [[PPPoE]] or other connection methods which are not available in the recovery OS.
 
=== Streaming update ===
If you're unable to use the normal (cached) update method, you can perform a ''streaming'' update. The system will reboot to the "recovery firmware" partition, erase the system partition (leaving the configuration partition intact), downloading and writing the image to the system partition while verifying its SHA256 checksum, and finally rebooting back to the newly created system partition when done, resuming normal operations.

Navigation menu