Error: "RuntimeError: Group conntrackd found with ID 996, wanted 104" in postupdate.log when upgrading standalone VCF Orchestrator to 9.1

Products

• VCF Automation

Issue/Introduction

• The /var/log/vmware/prelude/upgrade-report-latest log ends with generic error:
  • Upgrade failed and left the system in non-working state. Check the error report below to correct the problem. Once addressed, you can continue the upgrade by running 'vracli upgrade exec --resume'
• The /var/log/bootstrap/postupdate.log shows the following error:
  • INFO:set_permissions_and_ownership:Creating group: metrics with id: 103
Traceback (most recent call last):
  File "/opt/scripts/set_permissions_and_ownership.py", line 474, in <module>
    ctx.apply()
  File "/opt/scripts/set_permissions_and_ownership.py", line 78, in apply
    self._create_group(group)
  File "/opt/scripts/set_permissions_and_ownership.py", line 99, in _create_group
    raise RuntimeError(f'Group {group.name} found with ID {ent.gr_gid}, wanted {group.id}')
  • RuntimeError: Group conntrackd found with ID 996, wanted 104
  • Script /etc/bootstrap/postupdate.d/03-20-create-service-users.sh failed, error status 1

Environment

VMware Cloud Foundation Operations Orchestrator 9.0.x, upgrading to version 9.1

Cause

• The upgrade fails during the post-upgrade service account setup phase due to a UID/GID conflict.
• Older versions of vRO created the conntrackd group with a different GID and UID. The current upgrade attempts to claim a fixed ID for this group.
• When it encounters the existing group with a mismatched ID, it treats it as an unrecoverable conflict and aborts the upgrade.
• This affects existing, long-running deployments. Fresh installations are not affected.

Resolution

Prior to initiating the standard upgrade process, the following actions must be taken:

1. Establish an SSH connection to the VA host currently running version 9.0.2.
2. Execute the following commands:
   
   • userdel conntrackd
   • groupdel conntrackd 
3. Once these commands have been successfully executed, you may proceed with the standard upgrade procedure to version 9.1.0.

These users will get re-created during the upgrade with their correct UID and GID for VCFA 9.1.