4.9.1. General Upgrade Instructions¶
SIMP uses the Puppet modules’ parameters as the system “API” (in terms of compatibility) and attempts to limit any API breaking changes to a minimum during a major release.
API breaking changes will have at least one minor release with deprecation warnings unless the change was to fix an actual bug in functionality.
A SIMP release version (e.g., “6.4.0-0”) can be separated into three major numbers, in the format X.Y.Z:
Xis the MAJOR release number, and indicates severe API-breaking changes.
Yis the MINOR release number, and indicates the addition of features or minor API-breaking changes either due to functionality bugs or after at least one MINOR release announcing the deprecation.
- All API-breaking changes are kept to an absolute minimum and well documented in the release CHANGELOG.
Zis the PATCH release number, and indicates full backwards-compatibility changes, such as bug fixes and improvements.
This section describes both the general, recommended upgrade procedures for
- Incremental Upgrades
- Breaking Changes
Z SIMP changes, you should feel comfortable dropping the
changes directly into your test systems. The promotion cycle from test to
production should be short and painless if you reference the version
Beginning with SIMP 6.4.0, SIMP-packaged Puppet module RPMs
no longer install updates directly into the
environment directory. You must upgrade your Puppet modules using the
mechanism appropriate for your environment deployment
Review any Version-Specific Upgrade Instructions prior to executing an Incremental Upgrade. There may be specific instructions regarding the upgrade process that you should follow.
The following instructions are specific to the Local deployment
scenario. They assume the Puppet
environment you are updating is named
test, and that you execute these
Update the YUM Repositories
Update the repositories using a SIMP ISO:
If you have the latest SIMP ISO available to you and have installed the
simp-utilspackage, update the YUM repositories by unpacking the ISO using
unpack_dvdfrom that package:
Copy the new SIMP ISO file to the SIMP master
From the SIMP master (as
# Unpack the new SIMP ISO's RPMs into yum repositories unpack_dvd </path/to/ISO>
For RPM-based installation, follow your site’s procedures to update your repositories.
Install the RPMs
# Make sure yum picks up the new RPMs yum clean all; yum makecache # Apply updates to the local master yum update -y
For SIMP 6.4 and later, this will also update the system-local, SIMP-managed Puppet module Git repositories.
If you are upgrading from a version before SIMP 6.4 you can skip to the last step, Apply the changes by running puppet.
** The following steps only apply for upgrades from version 6.4 or later
Generate the new
Puppetfile.simp, a Puppetfile containing the latest versions of only SIMP-packaged Puppet modules:
cd /etc/puppetlabs/code/environments/test simp puppetfile generate > Puppetfile.simp
Verify the environment’s
Any module not listed in the
Puppetfilewill be deleted from the target environment’s
modulesdirectory, when you use r10k to deploy the modules.
Make sure the
Puppetfileyou will be deploying from includes the following:
A line that includes the
Puppetfile.simpwhich should look like:
A line for each of your own modules.
See How To Generate a SIMP Puppetfile for more information on how to generate and clean up the Puppetfile if needed.
Deploy the modules from the local Git repositories into the environment
r10kto deploy the modules, making sure the
groupare set correctly so that the
puppetserverhas access to the files.
# Set the umask and Run r10k as the puppet group to make sure the modules # to make sure the permissions and ownership are correct on the modules ( umask 0027 && sg puppet -c '/usr/share/simp/bin/r10k puppetfile install \ --puppetfile /etc/puppetlabs/code/environments/test/Puppetfile \ --moduledir /etc/puppetlabs/code/environments/test/modules' )
simp --helpfor more information on the
simputility and alternate options provided for each command.
** This ends the steps that are only for 6.4 or later. The next steps apply to all systems.
Apply the changes by running
puppet agent -t
If you manage your SIMP server using r10k or Code Manager and are not using the server-local, SIMP-managed Git module repositories, you will need to work with the upstream Git repositories as appropriate for your workflow. This is the same for all versions of SIMP.
For SIMP 6.4 and later, the instructions in HOWTO Set up a SIMP Environment in a Control Repository may be helpful.
X version number has changed then you should expect major
breaking changes to the way SIMP works. Please carefully read the Changelog and
the SIMP User Guide and do not deploy these changes directly on top
Y version number has changed then there may either be deprecation
notices or minor breaking changes to the way SIMP works. Please carefully
read the CHANGELOG and the User’s Guide and do not deploy these changes
directly on top of your production environment.
Upgrading SIMP does not require re-kicking your clients, even if some core services move to the new Puppet node. All software configurations can be updated in Puppet, as needed.
With the release of 6.4, SIMP RPM upgrades now have a “hands-off” approach to upgrades that allow users to easily preserve different combinations of module sets as required by their environment. That being said, the SIMP team does not test all combinations of modules and may have difficulty providing support for untested combinations.
The recommended method for upgrading major breaking changes (
X bump) is
to create a new Puppet Server and migrate your data and clients to it. This
process follows the path of least destruction; we will guide you through how to
back up the existing Puppet server, create a new server, and transfer your
Set up a new Puppet server that will house your new SIMP environment.
You must ensure that this node can be reached by any client that is to be migrated. The new system will not interfere with your existing Puppet system unless you specifically configure it to do so.
Do NOT destroy your old Puppet server until everything has been successfully migrated and is in production under the new server.
Consider vital services other than Puppet that are housed on your current Puppet server node (eg. DNS, DHCP, LDAP, custom kickstart, YUM, NFS, etc.). You may choose to keep many of these services running on your old Puppet server node. Anything not preserved must be migrated to a new system.
Prior to any modifications to your infrastructure, we highly recommend following HOWTO Back up the Puppet Master.
Follow the Client Management guide, and set up services as needed.
Remember, you can opt-out of any core services (DNS, DHCP, etc.) you want your
clients or old Puppet server to run! If you want the new Puppet server to run
services the existing Puppet server ran, you may be able to use the backup of
rsync directories from the old system.
Do not blindly drop
rsync (or other) materials from the old Puppet
server onto the new one. The required structures for these components may
When you Apply Certificates you may wish to transfer client certs to the new server. If you are using the FakeCA and still wish to preserve the certificates, follow the Installing Official Certificates guidance, and treat the existing Puppet server as your ‘proper CA’.
Follow the HOWTO Change Puppet Masters guide to begin integration of your new Puppet server into the existing environment.
You should always start migration with a small number of least critical clients!