IBM Support

Error: system is already running XXXX when execute STAP installer

Troubleshooting


Problem

The database server kernel was recently updated and we tried to upgrade STAP using the latest installer as our client does not use GIM. On executing, the following error messages was returned: [root@centos7a tmp]# ./guard-stap-9.0.0_r90265_v90_4-rhel-7-linux-x86_64.sh Verifying archive integrity... All good. Uncompressing guard-stap............................................................................. TARGET_TAG=9.0.0_r90265_v90_1 TARGET_PROCESSOR=x86_64 BUILD_BUILD=90265 Script appears compatible with this system. Installer is 9.0.0_r90265_v90_1-linux-rhel-7-x86_64 Detected previous STAP installation Do you want to update the previous STAP installation? [y/N] y Guardium STAP updater version 1.50 August 6, 2013 Error: system is already running 90265 Error updating STAP Even executed "guard-stap-update", it still gives the same error implying KTAP is loaded. [root@centos7a guard_stap]# ./guard-stap-update /tmp/guard-stap-9.0.0_r90265_v90_4-rhel-7-linux-x86_64.sh /usr/local/ Guardium STAP updater version 1.50 August 6, 2013 Error: system is already running 90265 [root@centos7a ~]# lsmod |grep ktap ktap_90265            704542  3

Cause


STAP installer discovered KTAP running but loaded KTAP does not match the one in current KTAP directory.

Environment

v9.5

Diagnosing The Problem

You can't manually remove KTAP this way

<STAP directory>/KTAP/guard_ktap_loader stop
<STAP directory>/KTAP/guard_ktap_loader uninstall
Reboot the server


as v9.5 does not have uninstall option

#/usr/local/guardium/guard_stap/ktap/current/guard_ktap_loader {start|stop|status|update|retry|shutdown|version}

also v9.5 does not have guard_ktap_cleanup <ktap device> which is only found in v10.
 

Resolving The Problem

To resolve:

1. Download latest KTAP packages from Fix Central for the desired platform and STAP version.

For instance this package is latest for their platform
"fix pack: Guardium_KTAP_9.0_rhel-7-linux-x86-64_r90265_2018-02-08"

The KTAP package should have the following components:

a. modules-9.0.0_r90265_v90_1.tgz

b. Newest STAP installer for fresh install

c. GIM Bundle-STAP for fresh install or update (for GIM update should work even for same version so it will update only newly supported kernel set)

d. ktaposmatch.csv (list of supported kernels)



WHEN KERNEL IS ALREADY UPDATED:

If they already upgraded their kernel and newer KTAP is not loaded, they need to do following:

a. Copy downloaded modules-9.0.0_r90265_v90_1.tgz to current KTAP directory

For instance "/usr/local/guard_stap/ktap/current/" by overwriting their existing one with modules-9.0.0_r90265_v90_1.tgz.

b. Execute "/usr/local/guard_stap/ktap/current/guard_ktap_loader retry" command

c. Restart STAP.



WHEN KERNEL IS NOT UPDATED YET:

If they are just preparing for kernel upgrade (not upgraded yet)

a. Copy downloaded modules-9.0.0_r90265_v90_1.tgz file to current KTAP directory, for instance "/usr/local/guard_stap/ktap/current/" by overwriting their existing modules-9.0.0_r90265_v90_1.tgz.

b. then nothing else need to be done. Next time they reboot with updated kernel, newer set of supported kernels will be used.

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium S-TAP","Platform":[{"code":"PF016","label":"Linux"}],"Version":"9.5","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg22014211