Troubleshooting Tip: How to resolve the issue of the pip configuration value being maintained as Default during migration to version 7.3.0 in an Air-Gap environment

ycho · ‎11-29-2023

Description

This article describes how to resolve the issue of the pip configuration value being maintained as Default during migration to version 7.3.0 in an Air-Gap environment.

Scope

Air-Gap Environment.

Solution

To upgrade from version 7.2.1 to 7.3.0, migration is required because the OS will be changed from CentOS to Rockylinux.

However, in an Internet-faced environment, there is no problem communicating with pypi.org, but in an Air-Gap environment, FortiSOAR updates through an offline repo, so it is inevitable that communication with pypi.org will fail.

The current operation in FortiSOAR only has the initial value of extra-index-URL in the settings of /opt/cyops-workflow/.env/pip.conf and /opt/cyops-integrations/.env/pip.conf.

Then, since FortiSOAR does not have an index-url, it will attempt to communicate with pypi.org by default during the migration process, trying up to 5 times. If communication fails, it will then attempt to communicate with extra-index-url.

This behavior causes delays and the following logs are observed.

If the extra-index-url has been changed to index-url before and after the migration process, there should be no problem.

Therefore, if migration work is required after upgrading the version, it is recommended to import the DB BACKUP file on the target FortiSOAR and then check once again whether the pip.conf setting is specified with index-url.