Upgrading the AIFF Container

This section provides the steps to upgrade the AIFF container.

Warning - Schedule a maintenance window. When you install a higher version of the AIFF Container, the current AIFF Container stops.

Traffic starts passing again only after the new AIFF Container starts running again.

  1. On the DPU, get the current version of the Check Point AIFF container:

    sudo crictl ps

    Refer to the column "IMAGE".

  2. Get the latest Check Point AIFF package for the DPU:

    1. From sk184795 > section "Downloads", download the latest AI Factory Firewall package for the BlueField-3 DPU to your computer.

    2. Copy this AIFF package from your computer to the DPU.

      Follow one of these options:

      See Configuration of Out-of-Band Management Network.

      1. Configure an IP address on the "oob_net0" interface of the DPU.

        Make sure a computer with an SSH client and SCP client can reach this IP address.

      2. With the SSH client, connect from your computer to the IP address you configured on the "oob_net0" interface.

        ssh <IP Address>

        The default credentials are:

        • Username - ubuntu

        • Password - ubuntu

      3. On the DPU, create some directory for the AIFF package.

        For example:

        mkdir -v /var/log/AIFF

      4. With an SCP client, connect from your computer to the IP address you configured on the "oob_net0" interface.

        The default credentials are:

        • Username - ubuntu

        • Password - ubuntu

      5. Copy the AIFF package from your computer to the DPU to the new directory "/var/log/AIFF".

      For more information, refer to the NVIDIA BlueField Platform Software Troubleshooting Guide.

      1. Connect with an SCP client to one of the Host Server interfaces.

      2. Copy the AIFF package from your computer to the Host Server to some directory.

      3. With a built-in SCP client, copy the AIFF package from the Host Server to the DPU to the new directory "/var/log/AIFF":

        scp -v /var/log/AIFF/<Name of package> ubuntu@192.168.100.2:/var/log/AIFF/

        The default credentials are:

        • Username - ubuntu

        • Password - ubuntu

  3. On the DPU, install the AIFF package:

    1. Install the AIFF container:

      /root/AIFF_installation/install.sh

    2. Wait for the installation script to finish.

      Note - This setup can take a few minutes, and it mostly runs in the background.

  4. On the DPU, remove old unused AIFF packages:

    sudo crictl rmi --prune

    This command only deletes images that are not currently being used by a running or exited container.