22.3 Updating Containers on Distributed Servers

The containers must be updated in the following order:

22.3.1 Updating OpenText Identity Manager Engine Container

Create a credentials.properties file under the shared directory /data with the following content.
```
ID_VAULT_ADMIN_LDAP="<ID_VAULT_ADMIN_LDAP>"
ID_VAULT_PASSWORD="<ID_VAULT_PASSWORD>"
```
where, ID_VAULT_ADMIN_LDAP must be in comma format.

For example,

ID_VAULT_ADMIN_LDAP="cn=admin,ou=sa,o=system"

ID_VAULT_PASSWORD="novell"
Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.

Run the following command to load the image:

docker load --input IDM_410_identityengine.tar.gz

Update the container using the following command if you are deploying the OpenText Identity Manager Engine using the overlay network:

docker run --restart unless-stopped -d --ip=192.168.0.12 --network=idmoverlaynetwork --hostname=identityengine.example.com --name=engine-container -v /etc/hosts:/etc/hosts -v /data:/config -p 8028:8028 -p 524:524 -p 389:389 -p 8030:8030 -p 636:636 -e SILENT_INSTALL_FILE=/config/credentials.properties --stop-timeout 100 identityengine:idm-4.10.0-533

Update the container using the following command if you are deploying the OpenText Identity Manager Engine using the host network:

docker run --restart unless-stopped -d --network=host --name=engine-container -v /etc/hosts:/etc/hosts -v /data:/config -e SILENT_INSTALL_FILE=/config/credentials.properties --stop-timeout 100 identityengine:idm-4.10.0-533

22.3.2 Updating Remote Loader Container

(Conditional) To handle any driver RPM updates or third-party files, perform the steps mentioned in Handling RPM Updates and Third Party Files.
(Conditional) To start Remote Loader instances automatically with the container, perform the steps mentioned in Starting Remote Loader Instances Automatically With Remote Loader Container Deployment.
Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.

Run the following command to load the image:

docker load --input IDM_410_remoteloader.tar.gz

Deploy the container by running the following command:

docker run --restart unless-stopped -d --ip=192.168.0.2 --network=idmoverlaynetwork --hostname=remoteloader.example.com -p 8090:8090 --name=rl-container -v /etc/hosts:/etc/hosts -v /data:/config --stop-timeout 100 remoteloader:idm-4.10.0-533

The driver files can be found at the /opt/novell/eDirectory/lib/dirxml/classes/ directory of the container.

(Conditional) If the Remote Loader instances are not running, start the Remote Loader instances.

22.3.3 Updating Fanout Agent Container

Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.

Run the following command to load the image:

docker load --input IDM_410_fanoutagent.tar.gz

Update the container using the following command:

docker run --restart unless-stopped -d --ip=192.168.0.3 --network=idmoverlaynetwork --hostname=fanoutagent.example.com --name=foa-container -v /etc/hosts:/etc/hosts -v /data:/config --stop-timeout 100 fanoutagent:idm-4.10.0-533

Start Fanout Agent.

22.3.4 Updating OSP Container

Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.
Run the following command to load the image:
```
docker load --input IDM_410_osp.tar.gz
```
Update the container using the following command:
```
docker run --restart unless-stopped -d --ip=192.168.0.5 --network=idmoverlaynetwork --hostname=osp.example.com -p 8543:8543 --name=osp-container -v /etc/hosts:/etc/hosts -v /data:/config -e MASTER_KEYSTORE_PWD=<keystore-pwd> --stop-timeout 100 osp:idm-4.10.0-533
```
For example:

docker run --restart unless-stopped -d --ip=192.168.0.5 --network=idmoverlaynetwork --hostname=osp.example.com -p 8543:8543 --name=osp-container -v /etc/hosts:/etc/hosts -v /data:/config -e MASTER_KEYSTORE_PWD=changeit --stop-timeout 100 osp:idm-4.10.0-533
Run the following command to log in to the container:
```
docker exec -it <container> <command>
```
For example,

docker exec -it osp-container bash

22.3.5 Updating PostgreSQL Container

NOTE:Before you update the PostgreSQL container, ensure that you stop the dependent containers such as Identity Applications and/or Identity Reporting.

On the Docker host, navigate to any location. For example:

cd /tmp
Run the following command to take a back up of the existing PostgreSQL container data.
```
docker exec postgresql-container pg_dumpall -U postgres > dump.sql
```
Stop the PostgreSQL container.
```
docker stop <container name>
```
For example,

docker stop postgresql-container
Delete the PostgreSQL container.

docker rm <container name>
Delete the existing PostgreSQL data directory.

rm -rf /data/postgres
(Conditional) Delete the PostgreSQL Docker image.

docker rmi <image ID>
Create a sub-directory under the shared directory /data, for example, postgres.

mkdir postgres
Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.
Run the following command to load the image:
```
docker load --input IDM_410_postgres.tar.gz
```
Update the container using the following command:
```
docker run --restart unless-stopped -d --ip=192.168.0.6 --network=idmoverlaynetwork --hostname=postgresql.example.com --name=postgresql-container -p 5432:5432 -e POSTGRES_PASSWORD=<password> -v /data/postgres:/var/lib/postgresql/data -v /etc/hosts:/etc/hosts -v /data:/config --stop-timeout 100 postgres:14.14
```
For example,

docker run --restart unless-stopped -d --ip=192.168.0.6 --network=idmoverlaynetwork --hostname=postgresql.example.com --name=postgresql-container -p 5432:5432 -e POSTGRES_PASSWORD=novell -v /data/postgres:/var/lib/postgresql/data -v /etc/hosts:/etc/hosts -v /data:/config --stop-timeout 100 postgres:14.14
Copy the data file you backed up on the Docker host (Step 2) to the new PostgreSQL data directory.

cp /tmp/dump.sql /data/postgres
Run the following command to log in to the container:
```
docker exec -it <container> <command>
```
For example,

docker exec -it postgresql-container bash
Navigate to the /var/lib/postgresql/data/ directory.
Restore the data backed up in Step 2 to the new PostgreSQL container.

psql -U postgres < dump.sql >
Run the following command to exit the container.

exit
Navigate to postgres folder cd /data/postgres/
Edit the pg_hba.conf file.
Comment the line "host all all all scram-sha-256"
Add "host all all 0.0.0.0/0 trust" to the file.
Restart the postgres container.
```
docker restart postgresql-container
```

22.3.6 Updating Identity Applications Container

Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.

Run the following command to load the image:

docker load --input IDM_410_identityapplication.tar.gz

Update the container using the following command:
```
docker run --restart unless-stopped -d --ip=192.168.0.7 --network=idmoverlaynetwork --hostname=identityapps.example.com -p 18543:18543 --name=idapps-container -v /etc/hosts:/etc/hosts -v /data:/config -e MASTER_KEYSTORE_PWD=<keystore-pwd> --stop-timeout 100 identityapplication:idm-4.10.0-533
```
For example:

docker run --restart unless-stopped -d --ip=192.168.0.7 --network=idmoverlaynetwork --hostname=identityapps.example.com -p 18543:18543 --name=idapps-container -v /etc/hosts:/etc/hosts -v /data:/config -e MASTER_KEYSTORE_PWD=changeit --stop-timeout 100 identityapplication:idm-4.10.0-533

22.3.7 Updating Form Renderer Container

Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.

Run the following command to load the image:

docker load --input IDM_410_formrenderer.tar.gz

Update the container using the following command:

docker run --restart unless-stopped -d --ip=192.168.0.8 --network=idmoverlaynetwork --hostname=formrenderer.example.com -p 8600:8600 --name=fr-container -v /etc/hosts:/etc/hosts -v /data:/config --stop-timeout 100 formrenderer:idm-4.10.0-533

22.3.8 Updating ActiveMQ Container

Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.
Run the following command to load the image:
```
docker load --input IDM_410_activemq.tar.gz
```

Update the container using the following command:

docker run --restart unless-stopped -d --ip=192.168.0.9 --network=idmoverlaynetwork --hostname=activemq.example.com -p 61616:61616 --name=amq-container -v /etc/hosts:/etc/hosts -v /data:/config --stop-timeout 100 activemq:idm-4.10.0-533

22.3.9 Updating Identity Reporting Container

Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.

Run the following command to load the image:

docker load --input IDM_410_identityreporting.tar.gz

Update the container using the following command:
```
docker run --restart unless-stopped -d --ip=192.168.0.10 --network=idmoverlaynetwork --hostname=identityreporting.example.com -p 28543:28543 --name=rpt-container -v /etc/hosts:/etc/hosts -v /data:/config -e MASTER_KEYSTORE_PWD=<keystore-pwd> --stop-timeout 100 identityreporting:idm-4.10.0-533
```
For example:

docker run --restart unless-stopped -d --ip=192.168.0.10 --network=idmoverlaynetwork --hostname=identityreporting.example.com -p 28543:28543 --name=rpt-container -v /etc/hosts:/etc/hosts -v /data:/config -e MASTER_KEYSTORE_PWD=changeit --stop-timeout 100 identityreporting:idm-4.10.0-533

22.3.10 Updating SSPR Container

Navigate to the location where you have extracted the Identity_Manager_4.10.0_Containers.tar.gz file.
Navigate to the docker-images directory.
Run the following command to load the image:
```
docker load --input IDM_410_sspr.tar.gz
```

Update the container using the following command:

docker run --restart unless-stopped -d --ip=192.168.0.11 --network=idmoverlaynetwork --hostname=sspr.example.com --name=sspr-container -v /etc/hosts:/etc/hosts -v /data/sspr:/config -p 8443:8443 --stop-timeout 100 sspr/sspr-webapp:4.8.0.1-533

22.3.11 Updating OpenText Identity Console Container

For more information, see Upgrading OpenText Identity Console As Docker Container.