Readme file for IBM Watson® Machine Learning Accelerator Interim Fix 542231  

 

Readme file for: IBM Watson® Machine Learning Accelerator
Product/Component Release: 1.2.1
Fix ID: dli-1.2.3-build542231-wmla

Publication date: April 17, 2020

 

Interim fix 542231 resolves the vulnerabilities in OpenSSL (CVE-2011-1473) found in the IBM Spectrum Conductor Deep Learning Impact 1.2.3 component in IBM Watson Machine Learning Accelerator 1.2.1. You must install interim fix 526695 before installing this fix.  

 

Contents

1.     Download location 

2.     Products or components affected

3.   Installation prerequisites

4.     Installation and configuration

5.     Uninstallation

6.     List of files

7.     Product notifications 

8.     Copyright and trademark information

1.   Download location

Download interim fix 542231 (dli-1.2.3-build542231-wmla) from IBM Fix Central at  http://www.ibm.com/eserver/support/fixes/.

 

2.   Products or components affected

Component Name, Platform, Fix ID:

dlinsights-optimizer, dlinsights-monitor

Linux x86_64, Linux ppc64le

dli-1.2.3-build542231-wmla 

 

3.   Installation prerequisites

1.      Before proceeding with the installation of this fix, you must apply interim fix 526695 (dli-1.2.3-build526695-wmla). Obtain this interim fix from IBM Fix Central at  http://www.ibm.com/eserver/support/fixes/.

 

4.   Installation and configuration

4.1 Before installation

Before installing the interim fix, complete the following steps to prepare your environment. 

1.      Ensure that you have installed interim fix 526695. Log on to the master host as the cluster administrator (CLUSTERADMIN) and source the environment according to your shell environment: 

For sh, ksh or bash:

$ . $EGO_TOP/profile.platform

$ export CLUSTERADMIN=$CLUSTERADMIN

$ export DLI_CONDA_HOME=$DLI_CONDA_HOME

where EGO_TOP is IBM Spectrum Conductor Deep Learning Impact installation path, and CLUSTERADMIN, DLI_CONDA_HOME must be the same as the IBM Spectrum Conductor Deep Learning Impact installation setting.

 

For csh or tcsh:

$ source $EGO_TOP/cshrc.platform

$ setenv CLUSTERADMIN $CLUSTERADMIN

$ setenv DLI_CONDA_HOME $DLI_CONDA_HOME

where EGO_TOP is IBM Spectrum Conductor Deep Learning Impact installation path, and CLUSTERADMIN, DLI_CONDA_HOME must be the same as the IBM Spectrum Conductor Deep Learning Impact installation setting.

 

2.      Create a backup directory and back up the following files and directories:

$EGO_TOP/dli/1.2.3/dlinsights/optimizer/manage.py

$EGO_TOP/dli/1.2.3/dlinsights/monitor/manage.py

 

4.2 Installation steps 

Apply the interim fix and complete the follow steps.

 

1.      Run the following command to log in: 

$ egosh user logon -u user_name -x password

where user_name and password are your login credentials. For example:

$ egosh user logon -u Admin -x Admin

2.      Run the following command to stop services: 

$ egosh service stop dlinsights-monitor dlinsights-optimizer 

3.      On each management host, download the fix packages to a directory. For example, packages can be downloaded to the /dlifixes directory.

 

4.      On each management host, run the egoinstallfixes command to install cluster jars.

 

For Linux x86_64:

a.      Log in as a root user.

$ su root

 

b.      As a root user, run the following commands:

$ chmod o+r /dlifixes/dlicore-1.2.3.0_x86_64_build542231.tar.gz

 

c.      Log in as a cluster administrator.

$ su $CLUSTERADMIN

 

d.      As a cluster administrator, run the following commands. 

$ egoinstallfixes /dlifixes/dlicore-1.2.3.0_x86_64_build542231.tar.gz

 

For Linux ppc64le:

a.      Log in as a root user.

$ su root

 

b.      As a root user, run the following commands:

$ chmod o+r /dlifixes/dlicore-1.2.3.0_ppc64le_build542231.tar.gz

 

c.      Log in as a cluster administrator.

$ su $CLUSTERADMIN

 

d.      As a cluster administrator, run the following commands: 

$ egoinstallfixes /dlifixes/dlicore-1.2.3.0_ppc64le_build542231.tar.gz

NOTE: Running the “egoinstallfixes” command automatically backs up the current binary files to a fix backup directory for recovery purposes. Do not delete this backup directory; you will need it if you want to recover the original files. For more information on using this command, see the egoinstallfixes command reference.

 

5.       On each management host, verify the installation by running the pversions command.

$ pversions -b 542231

 

6.      Manually update configuration in IBM Spectrum Conductor Deep Learning Impact. 

a.      As the root user, reinstall dlinsights to use Python 3.7 on all management and compute hosts in the cluster:

 

$ . ${DLI_CONDA_HOME}/etc/profile.d/conda.sh

$ conda remove --name dlinsights --all --yes

$ conda create --name dlinsights --yes pip python=3.7

$ conda activate dlinsights

$ conda install --yes numpy==1.18.1

$ conda install --yes pyopenssl==19.1.0

$ conda install --yes flask==1.1.1 Flask-Cors==3.0.8 scipy==1.4.1 SQLAlchemy==1.3.15 requests==2.21 alembic==1.0.5

$ pip install --no-cache-dir elasticsearch==5.2.0 Flask-Script==2.0.5 Flask-HTTPAuth==3.3.0 mongoengine==0.15.0 

$ conda deactivate

 

b.       Start the following services:

$ egosh service start dlinsights-monitor dlinsights-optimizer

 

5.   Uninstallation

If required, follow the instructions in this section to uninstall this interim fix on hosts in your cluster.

1.      Log in to the management host as a cluster administrator and source the environment.

$ su $CLUSTERADMIN

 

For sh, ksh or bash:

$ . $EGO_TOP/profile.platform

$ export DLI_CONDA_HOME=$DLI_CONDA_HOME

 

For csh or tcsh:

$ source $EGO_TOP/cshrc.platform

$ setenv DLI_CONDA_HOME $DLI_CONDA_HOME

 

where EGO_TOP is IBM Spectrum Conductor Deep Learning Impact installation path, and CLUSTERADMIN, DLI_CONDA_HOME must be the same as the IBM Spectrum Conductor Deep Learning Impact installation setting.

 

2.      On the management host, stop the following services:

$ egosh service stop dlinsights-monitor dlinsights-optimizer 

3.      Log on to each management host in the cluster and roll back this interim fix:

$ egoinstallfixes -r 542231

 

4.      On the management host, restore files and directories that you backed up.

 

5.      As the root user, remove and reinstall dlinsights to use Python 3.6 on all management and compute hosts in the cluster:

$ . ${DLI_CONDA_HOME}/etc/profile.d/conda.sh

$ conda remove --name dlinsights --all --yes

$ conda create --name dlinsights --yes pip python=3.6

$ conda activate dlinsights

$ conda install --yes numpy==1.12.1

$ conda install --yes pyopenssl==18.0.0

$ conda install --yes flask==1.0.2 Flask-Cors==3.0.3 scipy==1.0.1 SQLAlchemy==1.1.13 requests==2.21 alembic==1.0.5

$ pip install --no-cache-dir elasticsearch==5.2.0 Flask-Script==2.0.5 Flask-HTTPAuth==3.2.2 mongoengine==0.11.0 

$ conda deactivate

 

 

6.      On the management host, run the following commands to restart services:

$ egosh service stop dlinsights-monitor dlinsights-optimizer

$ egosh service start dlinsights-monitor dlinsights-optimizer 

 

6.   List of files 

Updated files:

$EGO_TOP/dli/1.2.3/dlinsights/optimizer/manage.py

$EGO_TOP/dli/1.2.3/dlinsights/monitor/manage.py

 

7.   Product notifications

To receive information about product solution and patch updates automatically, subscribe to product notifications on the My Notifications page http://www.ibm.com/support/mynotifications/ on the IBM Support website (http://support.ibm.com). You can edit your subscription settings to choose the types of information you want to get notification about, for example, security bulletins, fixes, troubleshooting, and product enhancements or documentation changes. 

8.   Copyright and trademark information 

© Copyright IBM Corporation 2020

U.S. Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

IBM®, the IBM logo and ibm.com® are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml