F5 Archiver Ansible Playbook
Problem this snippet solves: Centralized scheduled archiving (backups) on F5 BIG-IP devices are a pain however, in the new world of Infrastructure as Code (IaC) and Super-NetOps tools like Ansible can provide the answer. I have a playbook I have been working on to allow me to backup off box quickly, UCS files are saves to a folder names tmp under the local project folder, this can be changed by editing the following line in the f5Archiver.yml file: dest: "tmp/{{ inventory_hostname }}-{{ date['stdout'] }}.ucs" The playbook can be run from a laptop on demand or via some scheduler (like cron ) or as part of a CI/CD pipelines. How to use this snippet: F5 Archiver Ansible Playbook Gitlab: StrataLabs: AnsibleF5Archiver Overview This Ansible playbook takes a list of F5 devices from a hosts file located within the inventory directory, creates a UCS archive and copies locally into the 'tmp' direcotry. Requirements This Ansible playbook requires the following: * ansible >= 2.5 * python module f5-sdk * F5 BIG-IP running TMOS >= 12 Usage Run using the ansible-playbook command using the inventory -i option to use the invertory directory instead of the default inventory host file. NOTE: F5 username and password are not set in the playbook and so need to be passed into the playbook as extra variables using the --extra-vars option, the variables are f5User for the username and f5Pwd for the password. The below examples use the default admin:admin . To check the playbook before using run the following commands ansible-playbook -i inventory --extra-vars "f5User=admin f5Pwd=admin" f5Archiver.yml --syntax-check ansible-playbook -i inventory --extra-vars "f5User=admin f5Pwd=admin" f5Archiver.yml --check Once happy run the following to execute the playbook ansible-playbook -i inventory --extra-vars "f5User=admin f5Pwd=admin" f5Archiver.yml Tested this on version: 12.1
Restore UCS from 10.1 to 11.2 fail
Hi everyone I've problem when I try to restore ucs v.10.1 to F5 v.11.2.1 and below is my issue This is result from tmsh load sys config Sep 2 16:43:43 bigip1 err mcpd[6396]: 01070920:3: Application error for confpp: Syntax OK The certificate does not match the key. To change them try 'tmsh modify sys httpd { ssl-certfile /etc/httpd/conf/ssl.crt/server.crt ssl-certkeyfile /etc/httpd/conf/ssl.key/server.key }' ************************************************************* Sep 2 16:43:43 bigip1.cot.com confpp[15748]: syntax check command FAILURE for unix_config_httpd returned: '2304' Problem is 1. big3d daemon is alway restarting 2. httpd daemon can't start so we can't access SSH or GUI (console still working) Did anyone experience this before? Thank you very muchUCS saving process failed.
Hey, Whenever i try to save archive my config, i get the following results: Saving active configuration... /bin/sh: -c: line 0: unexpected EOF while looking for matching `'' /bin/sh: -c: line 1: syntax error: unexpected end of file Fatal: executing: md5sum /config/monitors/' Operation aborted. /tmp/configsync.spec: Error creating package WARNING:There are error(s) during saving. Not everything was saved. Be very careful when using this saved file! Error creating package Error during config save. BIGpipe parsing error: 01020001:3: The requested operation failed. I've verified so i have disk free so its not that... anyone come across this before?
UCS install failing on RMA device
I've had a new unit delivered to replace a failed unit. I've got a UCS backup from the old unit, and when I attempt to install it with the procedure (tmsh load sys ucs your_ucs_file no-license) outlined in: https://support.f5.com/kb/en-us/solutions/public/12000/800/sol12880.html but the install fails with the below output (device name omitted for security): [root@:Active] config tmsh load sys ucs /var/local/ucs/-160703.ucs no-license Processing UCS file: /var/local/ucs/-160703.ucs Installing full UCS (11.2.1) data, excluding license file. Saving active configuration... The hostname is set to Extracting manifest: /var/local/ucs/-160703.ucs Product : BIG-IP Platform: Mercury Version : 11.2.1 Hostname: Installing --full-- configuration on host Installing configuration... Post-processing... WARNING: There were one or more errors detected during installation. Check the error messages and take the proper actions if needed. ERROR: UCS installation failed. Operation aborted. The configuration has been restored... [root@:Standby] config Any help or suggestions would be greatly appreciated on this! Many thanks AnthonyLoad UCS to not active volume which is in version lower than originating (need this for script)
In my case I have two boot locations with different images versions (like below): Volume Product Version Build Active Status HD1.1 BIG-IP 12.1.2 0.0.249 no complete HD1.2 BIG-IP 13.1.0 0.0.1868 yes complete I need to load UCS (predefined config version 12.1.2) to volume HD1.1. I need to load this UCS when I'm logged in on volume HD1.2 (which is active volume). I already checked "cpcfg" command but got error: "New version (12.1.2) is not >= originating version (13.1.0)" I already checked command "tmsh load sys ucs" but this command don't have option to load ucs to not active volume. I'm building a script so I need solution in this particular moment and situation. Any ideas?Comparing two UCS backup files
Is there anyway to compare two ucs files? A customer did an upgrade without follow thesoftware compatibility matrix, apparently everything worked ok untiluntil I detected a high cpu consume. F5 support team recommended us to do a rollback and then upgrade again followingthesoftware compatibility matrix rebuilding the configuration changes by hand. The problem is my customer doesn´t know how many changes have been made since the bad upgrade so I want to compare the current UCS and the UCS that I will get after doing the correct update process to find the configuration changes
Python BigREST ucs save and download
Problem this snippet solves: This uses BIGREST SDK API to save/download the ucs file. Adding it here since I couldn't find a similar one, How to use this snippet: Based on Python3 and BigREST (https://bigrest.readthedocs.io) Code : #Import needed libraries from bigrest.bigip import BIGIP import getpass #Replace the host name as needed host="xx.xx.xx.xx" user=input('Username') pw= getpass.getpass(prompt='Password:') #Declare the ucs filename, if needed ucsfile="test.ucs" #Connect to device device = BIGIP(host, user, pw) data = {} data["command"] = "save" data["name"] = ucsfile #You may get timeout exception below even if the file has been created task = device.task_start("/mgmt/tm/sys/ucs", data) device.task_wait(task) if device.task_completed(task): device.task_result(task) print("Backup has been completed.") else: raise Exception() #The below will download the file to the same folder as the script device.download("/mgmt/shared/file-transfer/ucs-downloads/", ucsfile) Tested this on version: 13.1Space in /var on physical device
I have been trying to run a BIGIP upgrade and keep getting stuck at the final part of the install where it checks for space in /var. This seems to be when the config has been put into a ucs and it wants to extract it. We have symlinked /var/local/ucs to a different location but it still fails as it seems to check just /var. We have removed everything possible but cannot get it to a point where there is enough space to work. What solutions is there for this problem on a physical device? As I understand it you can only resize /var on a VE. Thanks in advance