Skip to main content

Illumio Core 25.2.10 Install, Configure, Upgrade

Alternative: Install the PCE Tarball

You can use these alternative steps instead of the normal installation procedure described in Install the PCE and UI.

Note

The preferred installation mechanism is the RPM distribution, which is easier than the tarball installation.

Process for Installing PCE Tarball

If you are installing the PCE tarball distribution, perform the following tasks on each node in your deployment:

  1. Create the PCE user account.

  2. Resolve OS dependencies.

  3. Create the directory structure for the PCE. The PCE tarball supports a configurable directory structure. This feature allows you to choose the directory structure that best meets your needs.

    The following table lists the directories used by the PCE. You need to create these directories and update the listed PCE Runtime Environment File with the proper values.

    Directory

    Use

    Permissions

    Example

    install_root

    PCE binaries and scripts

    Read/Execute

    /opt/illumio-pce

    persistent_data_root

    A writable location where the PCE writes its persistent data

    Must be owned by the user who runs the PCE.

    Read/Write

    /var/lib/illumio-pce/data

    runtime_data_root

    A writable location where the PCE writes runtime data

    Must be owned by the user that runs the PCE.

    Read/Write

    /var/lib/illumio-pce/runtime

    ephemeral_data_root

    A writable location where the PCE writes temporary files

    Read/Write

    /var/lib/illumio-pce/tmp

    log_dir

    Directory where the PCE writes text file logs

    You must configure logrotate (or similar) to ensure log files do not grow too large.

    Read/Write

    /var/log/illumio-pce

    The default location of the PCE Runtime Environment File is /etc/illumio-pce/runtime_env.yml, but for the exact location on your systems, check the value of the log_dir parameter.

  4. Copy the PCE tarball to the install_root directory and untar it.

  5. Create an init script to run install_root/illumio-pce-ctlstart at boot.

Upgrade PCE Tarball Installation

The $ILLUMIO_RUNTIME_ENV shell environment variable defines the location of the runtime_env.yml file.

The following variables used in this section refer to entries in the runtime_env.yml file for each node in the cluster:

  • install_root

  • persistent_data_root

  • <log_dir>

On all nodes in the cluster, perform the following steps:

  1. Move the old PCE version to a backup directory:

    mv install_rootinstall_root_previous_release

    For example:

    mv /opt/illumio-pce /opt/illumio-pce-previous-release

  2. Install the new PCE TGZ version:

    $ mkdir install_root
$ cd install_root
$ tar -xzf illumio_pce_tar_gz
Change Tarball to RPM Installation

Perform these steps to install a first-time RPM to replace the previous tarball installation.

  1. On all nodes, as the previous PCE runtime user, stop the PCE:

    illumio-pce-ctl stop set-runlevel 1

  2. Move all files under the pce_installation_root directory to a backup directory:

    mv pce_installation_root previousinstall-root

  3. Change the previous PCE runtime user and group to ilo-pce:ilo-pce:

    # usermod --login ilo-pce previous-user
# groupmod --new-name ilo-pce previous-group

  4. Install the PCE via the RPM:

    rpm –ivh --nopre illumio-pce-16.6-0.x86_64

    Note

    The --nopre option prevents the RPM from creating these two empty directories: /var/lib/illumio-pce and /var/log/illumio-pce.

  5. Move the existing runtime_env.yml file to /etc/illumio-pce.

  6. Update the ILLUMIO_RUNTIME_ENV environment variable to /etc/illumio-pce/runtime_env.yml or delete this environment variable. The PCE looks for the runtime environment file in this location.

  7. If necessary, change the install_root parameter in the runtime_env.yml file to /opt/illumio-pce.

  8. On all nodes, as the new PCE runtime user, start the PCE:

    sudo -u ilo-pce illumio-pce-ctl start

  9. On the data0 node, as the new PCE runtime user, migrate the database:

    sudo -u ilo-pce illumio-pce-db-management migrate

  10. As the new PCE runtime user, bring the PCE to runlevel 5:

    sudo -u ilo-pce illumio-pce-ctl set-runlevel 5