Technical Tip: FortiSIEM failure in PRE RPM upgrade stage
Description
This article provides a method to resolve error Failure in the PRE RPM upgrade stage when FortiSIEM fails to upgrade.
Scope
FortiSIEM.
Solution
FortiSIEM upgrade requires access to os-pkgs-cdn.fortisiem.fortinet.com and os-pkgs-r8.fortisiem.fortinet.com to download keys and packages. However, users in closed environments may fail to upgrade and experience the error below:
[11:44:13] UPGRADE | Failure in PRE RPM upgrade stage, aborting upgrade, old services restarted ...| localhost | FAILED | 16ms
{
- msg: Failure in PRE RPM upgrade stage. Review upgrade logs by accessing '/opt/upgrade/logs' directory. Reboot the machine, wait for all services to be up, and then restart the upgrade process.
- changed: False
}
In this case, users can use the workaround below to download the required packages with the command below:
#yum remove platform-python-devel python3-devel
#yum install -y platform-python-devel python3-devel
#yum install -y python3.12
#/usr/bin/python3.12 -m ensurepip --upgrade
#/usr/bin/python3.12 -m pip install jinja2
#/usr/bin/python3.12 -m pip install packaging
Note:
Users may experience the error below if FortiSIEM has limited access to the internet due to proxy or firewall policy:
[Errno 4] IOError: <urlopen error (101, 'Network is unreachable')>
Error: Cannot retrieve repository metadata (repomd.xml) for repository: epel. Please verify its path and try again
In that case, make sure the firewall policy and proxy allow access to the URL below:
#https://files.pythonhosted.org
After downloading all the Python packages, users can proceed with the upgrade again.
Related document: