"Error: 5, Failed to create physical volume on device /dev/sda2" during upgrade from ATP 3.0.5 to 3.1.0

Products

• Advanced Threat Protection Platform

Issue/Introduction

During upgrade from ATP 3.0.5 to 3.1.0, the ATP UI does not seem to raise in a reasonable amount of time.

Environment

ATP management server or ATP AllInOne

Cause

During the operation to migrate elasticsearch database from version 1.x to version 6.x, the target partition for backing up the elasticsearch database was busy, resulting in ATP failure to complete data backup for migration of elasticsearch. This failure in turn halted the upgrade from 3.0.5 to 3.1.0 as a whole.

Resolution

 

1. To confirm this issue, at the admin CLI, type:
   cat /var/log/symantec/sgs-td/update.log | grep -A 7 -B 7 "backing up ES 1.x data folders"
    
2. If the following text appears in the output, then re-install with the most recent version of ATP appliance software
   [Timestamp] backing up ES 1.x data folders
Starting backup umount: /var/backup: target is busy.
                       (In some cases useful info about processes that use
                                                  the device is found by lsof(8) or fuser(1))
Error: 5, Failed to create physical volume on device /dev/sda2
Error: 5, Failed to add backup partition to LVM
Failed to backup with code 5