Update the base of the orchestrator Podman when offline

This page describes how to update the Cyberwatch orchestrator base deployed with Podman on a machine without internet access.

Before updating, consult the changelog of the Podman orchestrator: the actions to perform during the update are flagged with Migration.

Prerequisites

• A Linux machine with access to the internet

Procedure

1. Download the cyberwatch-podman and cosign packages:

   • For Debian-based distributions:

     # The exact (versioned) name of the cosign package is listed on https://dl.cyberwatch.com/apt/incoming/
     wget https://dl.cyberwatch.com/apt/incoming/cyberwatch-podman.deb
     wget https://dl.cyberwatch.com/apt/incoming/cosign_<version>_amd64.deb
     

   • For Red Hat based distributions:

     # The exact (versioned) name of the cosign package is listed on https://dl.cyberwatch.com/rpm/incoming/
     wget https://dl.cyberwatch.com/rpm/incoming/cyberwatch-podman.rpm
     wget https://dl.cyberwatch.com/rpm/incoming/cosign-<version>.x86_64.rpm
     

2. Transfer the packages to the offline machine

3. Install the packages. The cyberwatch-podman package requires cosign version 3 or later, so both packages must be installed together:

   • For Debian-based distributions:

     sudo dpkg -i cosign_*.deb cyberwatch-podman.deb
     

   • For Red Hat based distributions, the --replacepkgs option avoids an error if cosign is already up to date:

     sudo rpm -U --replacepkgs cosign-*.rpm cyberwatch-podman.rpm
     

4. Check the version of the orchestrator base:

   sudo cyberwatch version
   

5. To update the application at the same time as the orchestrator base, import the latest images archive

6. Restart Cyberwatch:

   sudo cyberwatch restart
   

For installations based on several Cyberwatch nodes, the update procedure must be applied on each node.