How to update senhasegura offline

If your vault isn’t connected to the internet, follow the steps in this guide to update your application offline.

Requirements

• Firewall Rules: Ensure your firewall settings allow communication with the senhasegura repositories. Detailed firewall rules can be found in the documentation.
• Server Time: Verify that the server's time is correctly set.
• (Situational) Arbitrator: If your environment includes an Arbitrator, remove it from the cluster.
• Snapshot: Take a system snapshot before proceeding with the update.
• Updating Sequentially: For versions that are at least two releases old, update sequentially as instructed in this article.
• New senhasegura Repository: Learn how to set up the new senhasegura repository.

Take a snapshot

Snapshots should be taken only when senhasegura instances are offline. This ensures the ability to revert to a previous version if necessary.

1. You can shut down a senhasegura instance using the following command:

   sudo orbit shutdown
   

2. Once the instance is completely shut down, take a snapshot in the hypervisor.
3. Reboot your senhasegura instance and update the application.

How to update senhasegura offline

To update senhasegura offline using a Linux machine, follow these steps and refer to the examples provided below:

1. In another machine with access to the internet, use the link https://storage.googleapis.com/senhasegura-packages-sp/packages/bookworm-stable-se-update.sh to download the update package to a separate device:

   wget https://storage.googleapis.com/senhasegura-packages-sp/packages/bookworm-stable-se-update.sh
   

2. Create a folder for the update files inside the /var/update directory. Use the following command:

   sudo install -d /var/update -g mt4adm -o mt4adm
   

3. Upload the file downloaded in step 1 to senhasegura's server (via scp, for example):

   scp -P 59022 <update_file_name>  mt4adm@<IP>:/var/update
   

4. Add a "#" symbol to comment every line in resolv.conf to prevent it from trying to connect to the internet during the update:

   sudo vim /etc/resolv.conf
   

5. Give the user permission to run the update file:

   sudo chmod +x <update_file_name>
   

6. Execute the file, in our example, we named the update file bookworm-stable-se-update.sh, so our command is:

   sudo chmod +x bookworm-stable-se-update.sh
   

7. Run the package using the following command:

   sudo bash <update_file_name>
   

8. Type Y to agree with the EULA terms.

9. After running the update file, return to resolv.conf and remove the '#' symbol from all previously modified lines.

10. Run the following command to reboot the device:

    sudo orbit shutdown --reboot
    

11. After the reboot is complete, run the following command and type Y to confirm:

    sudo orbit application init
    

12. A message in the terminal will indicate that the update was successful. To check the current version, run the following command:

    sudo orbit version
    

Do you still have questions? Reach out to the senhasegura Community.