Views:

The Deep Security Agent will execute the RPM command when performing a software upgrade.

However, it has been identified that with RPM package rpm-4.14.3-13.el8.x86_64 and later, the Deep Security Agent will not be able to process the software upgrade properly. Initiating the upgrade will cause the Deep Security Agent service to be stopped and would result to a Offline status in the manager console.

Version of the RPM package

rpm-4.14.3-13.el8.x86_64 and later

Symptoms

The agent will become offline with the status pending at "Upgrading Software (Install Program Sent)

Upgrading Software

Click the image to enlarge.

The error message will be found under "/var/opt/ds_agent/install.log"

[root@localhost ds_agent]# cat install.log 
Stopping old versions...
error: %prein(ds_agent-12.0.0-1845.el8.x86_64) scriptlet failed, signal 15
error: ds_agent-12.0.0-1845.el8.x86_64: install failed
error: ds_agent-12.0.0-1026.el8.x86_64: erase skipped

Eventually, the agent will be stopped due to the upgrade failed.

Workaround

To resolve this issue, please do the upgrade manually via the following steps:

  1. Check if the rpm file has been downloaded under the folder “/var/opt/ds_agent/downloads” already.
  2. If not, then please download and unzip the target Agent package to find the rpm file.
  3. Run “sudo rpm -U <new agent installer rpm>”
  4. Verify the status of the agent from the manager Console.

The Deep Security Agent will become online again on Deep Security Manager console.