IBM Support

Fix readme file for 5.0.0.2-IBM-IMA-IFIT40687

Fix Readme


Abstract

Fix readme file for the 5.0.0.2-IBM-IMA-IFIT40687 interim fix build.

Content

Interim fix: 5.0.0.2-IBM-IMA-IFIT40687
Date: 20 April 2022
Build: 20220404-1644
IBM WIoTP MessageGateway 5.0.0.2 Cumulative interim fix

(Note: all MessageGateway 5.x interim fixes and fix packs are cumulative.

Fix Details

Component md5sum File
Server 0d02abb89579e7449802582379b176c8 5.0.0.2-IBM-IMA-IFIT40687-Server.tz
WebUI a7d21312699a666c8ba8e710fd6c4e64 5.0.0.2-IBM-IMA-IFIT40687-WebUI.tz
Bridge dc78facee32d5feb3448a0bc1a9067dc 5.0.0.2-IBM-IMA-IFIT40687-Bridge.tz
Server for SLES 12 af6a6b5e489ddc1e7668a90d886b5cfa 5.0.0.2-IBM-IMA-IFIT40687-Server-SLES.tz
WebUI for SLES 12 a1e0a7186215bbc92f3eefa79610bae4 5.0.0.2-IBM-IMA-IFIT40687-WebUI-SLES.tz
Bridge for SLES 12 6db85072e7e84bfd9dbfdfcebba87e19 5.0.0.2-IBM-IMA-IFIT40687-Bridge-SLES.tz

APARs fixed in this build

APAR Description
IT40687 Update to Liberty for CVE-2021-23450, CVE-2021-39031, CVE-2022-22310, CVE-2021-39038, CVE-2018-25031, CVE-2021-46708
Update OpenSSL for CVE-2021-4160, CVE-2022-0778
Update Java for CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21294, CVE-2022-21293, CVE-2022-21291, CVE-2022-21248

Fix Instructions:

Before you install:

We strongly recommend performing a backup of the product software.

Backup and restore instructions

Preparing to install the fix

Prepare the IBM WIoTP MessageGateway .tz files for installation.  The preparation steps for installing MessageGateway as an update or for the first time are the same.  For more information, see Preparing the IBM WIoTP MessageGateway .tz packages for installation.

These instructions will focus on providing instructions for updating MessageGateway.  See the following instructions for installing MessageGateway for the first time.

Installing IBM WIoTP MessageGateway

Installing the fix

RPM: In an environment where MessageGateway is installed with rpm

Updating the MessageGateway Server package if Server is installed

cd imaserver
sudo  yum -y --nogpgcheck update IBMWIoTPMessageGatewayServer*.rpm
systemctl start IBMWIoTPMessageGatewayServer

Updating the MessageGateway Server package if the WebUI is installed

cd imawebui
sudo yum -y --nogpgcheck update IBMWIoTPMessageGatewayWebUI*.rpm
systemctl start IBMWIoTPMessageGatewayWebUI

NOTE: these packages can also be installed using: rpm -Uvh IBMWIoTPMessageGateway*.rpm. However, you must never update using:

yum install IBMWIoTPMessageGatewayServer*.rpm

or uninstall and reinstall with rpm or yum (to preserve your existing data), since this will remove all of your data and config under /var/messagesight.

Docker: Installing the fix in an environment where MessageGateway is running in docker

Build the IBM WIoTP MessageGateway Docker image.

Build the IBM WIoTP MessageGateway server image by issuing the following command:

cd imaserver
mv *.rpm imaserver.rpm
docker build --force-rm=true -t <server_image_name>:<fix_version>.<build> .

Example,

docker build --force-rm=true -t imaserver:5.0.0.2.20210825-1651 .

Build the IBM WIoTP MessageGateway Web UI image by issuing the following command

cd imawebui
mv *.rpm imawebui.rpm
docker build --force-rm=true -t <webui_image_name>:<fix_version>.<build> .

Example,

docker build --force-rm=true -t imawebui:5.0.0.2.20210825-1651 .

Stop the existing containers

Stop the server container by issuing the following command:

docker stop <server_container_name>

where <server_container_name> is the name of the container in which the IBM WIoTP MessageGateway server is running. For example,

docker stop imaserver

Stop the Web UI container by issuing the following command:

docker stop <webui_container_name>

where <webui_container_name> is the name of the container in which the IBM WIoTP MessageGateway Web UI is running. For example,

docker stop imawebui

Remove the containers

Remove the server container by issuing the following command:

docker rm <server_container_name>

where <server_container_name> is the name of the container in which the IBM WIoTP MessageGateway server was running. For example,

docker rm imaserver

Remove the Web UI container by issuing the following command:

docker rm <webui_container_name>

where <webui_container_name> is the name of the container in which the IBM WIoTP MessageGateway Web UI was running. For example,

docker rm imawebui

Remove the old MessageGateway images (optional)

This step is only required if you are not tagging MessageGateway docker images with version specific tags.  For example, if you build a MessageGateway docker image like this:

docker build --force-rm=true -t imaserver:5.0 .

for every version of MessageGateway, then you need to remove the previous image by issuing the following command(s), before building the update image:

docker rmi -f $(docker ps | grep imaserver | awk '{print $3}')

Remove the IBM WIoTP MessageGateway Web UI image by issuing the following command:

docker rmi -f $(docker ps | grep imawebui | awk '{print $3}')

If, however, you tag each MessageGateway image with a build specific version, eg:

docker build --force-rm=true -t imaserver:<fix_version>.<build> .

then this step is not required.

Start the new containers

Use the same Docker run command that you had used for previous incarnations of the MessageGateway containers.

Here's the general syntax for how to start the IBM WIoTP MessageGateway server container:

docker run --cap-add SYS_ADMIN --net=host -P -it --name=<server_container_name> -env-file=IBMWIoTPMessageGatewayServer-docker.env -m <memory> -v <local_data_directory>:/var/messagesight -v <local_temp_directory>:/var/tmp -d <server_image_name>:<fix_version>.<build>

Concrete example,

docker run --cap-add SYS_ADMIN --net=host -P -it --name=imaserver -env-file=IBMWIoTPMessageGatewayServer-docker.env -m 64G -v /data/messagesight:/var/messagesight -v /mnt/tmp:/var/tmp -d imaserver:5.0.0.2.20210825-1651

To start the IBM WIoTP MessageGateway Web UI container:

docker run --cap-add SYS_ADMIN --net=host -P -it --name=<webui_container_name> --env-file=IBMWIoTPMessageGatewayServer-docker.env -m <memory> -v <local_data_directory>:/var/messagesight -v <local_temp_directory>:/var/tmp -d <webui_image_name>:<fix_version>.<build>

Concrete example:

docker run --cap-add SYS_ADMIN --net=host -P -it --name=imawebui --env-file=IBMWIoTPMessageGatewayServer-docker.env -m 2G -v /data/messagesight:/var/messagesight -v /mnt/tmp:/var/tmp -d imawebui:5.0.0.2.20210825-1651

Verifying the installation

If this is your initial install of the product see Configuring the licensed usage for IBM WIoTP MessageGateway and accepting the license by using REST Administration APIs for accepting the product license.

If this is an update, then you can verify the status of the server see Viewing the status of an IBM WIoTP MessageGateway server and services by using REST Administration APIs.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSF79B","label":"IBM Watson IoT Platform - Message Gateway"},"Component":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"5.0.0.2","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
21 April 2022

UID

ibm16573719