Suomi.fi Data Exchange Layer production environment (FI) has been updated to X-Road 7.5.1 version 15.1.2025

Suomi.fi Data Exchange Layer production environment (FI) has been updated to X-Road 7.5.1 version 15.1.2025. X-Road 7.5.1 versio supports RHEL9 and Ubuntu 24.04LTS operating systems.

The packages of the new X-Road version have been released to the repository, and security servers can be upgraded to the new version. Note! Xroad Ubuntu users information system ports 80 and 443 will be switched to 8080 or 8443 depending on connection type after the update. More information can be found from xroad release notes. The same applies for xroad container version users, ports 8080 and 8443 must be used by information system in new x-road 7.5.1 container.

Full Release Notes for the new version can be found at
https://nordic-institute.atlassian.net/wiki/spaces/XRDKB/pages/541491202/X-Road+v7.5.0+Release+Notes Opens in a new window.
and
https://nordic-institute.atlassian.net/wiki/spaces/XRDKB/pages/665419777/X-Road+v7.5.1+Release+NotesOpens in a new window.

Upgrade instructions for RHEL 7/8 (from version 7.4.x to 7.5.1 update):

yum update

Upgrade instructions for RHEL 7/8 (from version 7.3.x to 7.5.1 update):

1. Postgresql upgrade (from version 9 or 12->16) for X-Road 7.3.x

#Before postgresql upgrade take backup or snapshot from security server! Then stop xroad services
sudo systemctl stop "xroad-*"

# Stop existing postgreSQL
sudo systemctl stop postgresql

# Install the repository RPM:
sudo yum install -y https://download.postgresql.org/pub/repos/yum/reporpms/EL-7-x86_64/pgdg-redhat-repo-latest.noarch.rpm
sudo yum upgrade -y

# Workaround for Postgres 9.2 unix_socket_directory property deprecation
sudo mv /usr/bin/pg_ctl{,-orig}
sudo echo '#!/bin/bash' > /usr/bin/pg_ctl
sudo echo '"$0"-orig "${@/unix_socket_directory/unix_socket_directories}"' >> \
/usr/bin/pg_ctl
sudo chmod 755 /usr/bin/pg_ctl

# Install packages
sudo yum -y install postgresql16 postgresql16-server postgresql16-contrib

# Init db
sudo su - postgres
/usr/pgsql-16/bin/initdb -D /var/lib/pgsql/16/data/
# Aja kannan päivitys (tarkista, että kannan päivitys menee ongelmitta läpi!)
/usr/pgsql-16/bin/pg_upgrade --old-datadir /var/lib/pgsql/data/ --new-datadir /var/lib/pgsql/16/data/ --old-bindir /usr/bin/ --new-bindir /usr/pgsql-16/bin/
exit

# Disable old services
sudo systemctl disable postgresql

# Enable new services
sudo systemctl enable postgresql-16
sudo systemctl start postgresql-16

# Remove old postgres instance
sudo yum remove postgresql

#to restore symlinks to postgres commands, reinstall postgres16 after uninstalling old version. This cannot be done sooner as pg_upgrade relies on old executables
sudo yum reinstall postgresql16

# Remove Postgres 9.2 workaround
sudo mv -f /usr/bin/pg_ctl{-orig,}

2. Installing Java 17 Temurin JDK

Check the current java version:
java -version

#If security server have old Java version 11 it needs to be updated to Java 17 Temurin JDK version. First add the Adoptium repository to your system (this example uses Vim text editor but you are free to use text editor that you prefer)
vim /etc/yum.repos.d/adoptium.repo
#Add adoptium repository content:
[Adoptium]
name=Adoptium
baseurl=https://packages.adoptium.net/artifactory/rpm/rhel/7/x86_64
enabled=1
gpgcheck=1
gpgkey=https://packages.adoptium.net/artifactory/api/gpg/key/public

#Install Java 17 (Eclipse Temurin JDK):
yum install temurin-17-jdk

#After Java 17 Temurin JDK installation verify current Java version and switch earlier Java version to version 17 with commands:
sudo alternatives --config java

#Verify that security server is using Java 17 Temurin JDK version
java -version

3. Update security server X-Road to version 7.5.1

#Upgrade xroad to version 7.4.1 with yum
yum update
# After that start xroad software
systemctl start --all "xroad-*"

Short upgrade instructions for Ubuntu:
Ubuntu 20.04 LTS / Ubuntu 22.04 LTS:

1. Ubuntu xroad 7.5.1 update

- curl http://www.nic.funet.fi/pub/csc/x-road/client/ubuntu-prod-current/niis.public.asc| sudo apt-key add -
- apt update
- apt full-upgrade

2. Xroad software listens information system only on ports 8080 and 8443 after the update.

Xroad graphical web user interface might not respond after the update but the isuee can be fixed by commenting local.ini configuration file lines starting with "client". After that xroad-proxy.service must restarted:

/etc/xroad/conf.d/local.ini
[proxy]
allow-get-wsdl-request = true
#client-http-port = 80
#client-https-port = 443

#xroad-proxy.service must be restarted so that configuration changes are taken into account
systemctl restart xroad-proxy.service

Note! You can only update to the version 7.5.1 from the software version 7.3.x or 7.4.x.