Customize Installation using Golden ISO

Golden ISO (GISO) is a customized ISO that a user can build to suit the installation requirement. The user can customize the installable image to include the standard base image with the basic functional components, and add additional RPMs, SMUs and configuration files based on requirement.

The ease of installation and the time taken to seamlessly install or upgrade a system plays a vital role in a cloud-scale network. An installation process that is time-consuming and complex affects the resiliency and scale of the network. The GISO simplifies the installation process, automates the installation workflow, and manages the dependencies in RPMs and SMUs automatically.

GISO is built using a build script gisobuild.py available on the github location Github location.

When a system boots with GISO, additional SMUs and RPMs in GISO are installed automatically, and the router is pre-configured with the XR configuration in GISO. For more information about downloading and installing GISO, see Install Golden ISO.

The capabilities of GISO can be used in the following scenarios:

  • Initial deployment of the router

  • Software disaster recovery

  • System upgrade from one base version to another

  • System upgrade from same base version but with additional SMUs

  • Install update to identify and update dependant packages

Limitations

The following are the known problems and limitations with the customized ISO:

  • GISO image size more than 1.8 GB is not supported.

  • Building and booting GISO for asynchronous package (a package of different release than the ISO) is not supported.

  • Verifying the XR configuration is not supported in the GISO build script gisobuild.py.

  • Renaming a GISO build and then installing from the renamed GISO build is not supported.

  • Install operation over IPv6 is not supported.

Golden ISO Workflow

The following image shows the workflow for building and installing golden ISO.

Build Golden ISO

The customized ISO is built using Cisco Golden ISO (GISO) build script gisobuild.py available on the Github location.

The GISO build script supports automatic dependency management, and provides these functionalities:
  • Builds RPM database of all the packages present in package repository.

  • Scans the repositories and selects the relevant Cisco RPMs that matches the input iso.

  • Skips and removes third-party RPMs that are not SMUs of already existing third-party base package in mini-x.iso.

  • Displays an error and exits build process if there are multiple base RPMs of same release but different versions.

  • Performs compatibility check and dependency check for all the RPMs. For example, the child RPM ncs5500-mpls-te-rsvp is dependent on the parent RPM ncs5500-mpls . If only the child RPM is included, the Golden ISO build fails.

Build Golden ISO Using Script

To build GISO, provide the following input parameters to the script:
  • Base mini-x.iso (mandatory)

  • XR configuration file (optional)

  • one or more Cisco-specific SMUs for host, XR and System admin (mandatory)

  • one or more third-party SMUs for host, XR and System admin (mandatory)

  • Label for golden ISO (optional)

  • Optional RPMs


Note

To successfully add k9sec RPM to GISO, change the permission of the file to 644 using the chmod command.
chmod 644 [k9 sec rpm]

To build GISO, perform the following steps:

Before you begin

  • To upgrade from a release that did not support GISO to a release supporting GISO version, it is mandatory to first upgrade to mini ISO with GISO support. For NCS 5500 series routers, upgrade to release 6.2.2 or later.

  • The system where GISO is built must meet the following requirements:
    • System must have Python version 2.7 and later.

    • System must have free disk space of minimum 3 to 4 GB.

    • Verify that the Linux utilities mount, rm, cp, umount, zcat, chroot, mkisofs are present in the system. These utilities will be used by the script. Ensure privileges are available to execute all of these Linux commands.

    • Kernel version of the system must be later than 3.16 or later than the version of kernel of Cisco ISO.

    • Verify that a libyaml rpm supported by the Linux kernel is available to successfully import yaml in the tool.

    • User should have proper permission for security rpm(k9sec-rpm) in rpm repository, else security rpm would be ignored for Golden ISO creation.

  • The system from where the gisobuild.py script is executed must have root credentials.

Procedure


Step 1

Copy the script gisobuild.py from the Github location to an offline system or external server where the GISO will be built. Ensure that this system meets the pre-requisites described above in the Before You Begin section.

Step 2

Run the script gisobuild.py and provide parameters to build the golden ISO off the router.

Example:

[directory-path]$ gisobuild.py [-h] [-i <mini-x.iso>] [-r <rpm repository>] 
[-c <config-file>] [-l <giso label>] [-m] [-v]
Note 

The -i option is mandatory, and either or both -r or -c options must be provided.

The corresponding GISO and build logs are available under the specified out_directory path. The default directory is /output_gisobuild.

Note 

NCS5500 routers has two types of cards - x86_64 and arm. System Admin runs on both types of cards, whereas XR runs only on x86_64 card.

[directory-path]$ gisobuild.py -i ncs5500-mini-x.iso -r . 
-c config-file -l v1 

System requirements check [PASS]
Platform: ncs5500 Version: <version>
XR-Config file (/<directory>/config-file) will be encapsulated in GISO.
Scanning repository [/<directory>/ncs5500-giso]...
Building RPM Database...
Total 54 RPM(s) present in the repository path provided in CLI

Skipping following older version of host os rpm(s) from repository:
         ncs5500-sysadmin-hostos-<version>-r<version>.CSCho88888.admin.x86_64.rpm
         ncs5500-sysadmin-hostos-<version>-r<version>.CSCho88888.host.x86_64.rpm
Skipping following older version of spirit-boot rpm(s) from repository:
         ncs5500-spirit-boot-1.0.0.2-r<version>.CSCsb88888.x86_64.rpm
         ncs5500-spirit-boot-1.0.0.1-r<version>.CSCsb77777.x86_64.rpm

Following XR x86_64 rpm(s) will be used for building GISO:
         ncs5500-iosxr-infra-4.0.0.2-r<version>.CSCxr11111.x86_64.rpm
         ncs5500-m2m-1.0.0.0-r<version>.x86_64.rpm
         ncs5500-iosxr-infra-4.0.0.4-r<version>.CSCxr11111.x86_64.rpm
         ncs5500-iosxr-infra-4.0.0.3-r<version>.CSCxr44444.x86_64.rpm
         ncs5500-k9sec-3.1.0.0-r<version>.x86_64.rpm
         ncs5500-iosxr-fwding-4.0.0.2-r<version>.CSCxr22222.x86_64.rpm
         ncs5500-spirit-boot-1.0.0.3-r<version>.CSCsb77777.x86_64.rpm
         ncs5500-k9sec-3.1.0.1-r<version>.CSCxr33333.x86_64.rpm
         ncs5500-iosxr-fwding-4.0.0.1-r<version>.CSCxr22222.x86_64.rpm
         ncs5500-mgbl-3.0.0.0-r<version>.x86_64.rpm
         ncs5500-parser-2.0.0.0-r<version>.x86_64.rpm
         ncs5500-iosxr-mgbl-3.0.0.0-r<version>.x86_64.rpm
         ncs5500-k9sec-3.1.0.2-r<version>.CSCxr33333.x86_64.rpm
         ncs5500-iosxr-infra-4.0.0.1-r<version>.CSCxr44444.x86_64.rpm
         kernel-image-3.14.23-wr7.0.0.3-standard-3.14-r0.1.xr.x86_64.rpm
         openssh-scp-6.6p1-r0.0.xr.x86_64.rpm
         cisco-klm-mifpga-0.1.p1-r0.0.CSCtp11111.xr.x86_64.rpm
         kernel-image-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm
         cisco-klm-mifpga-0.1-r0.0.xr.x86_64.rpm
         kernel-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm
         kernel-modules-3.14-r0.1.xr.x86_64.rpm
         kernel-modules-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm

Skipping following rpms from repository since they are already present in base ISO:
         ncs5500-mgbl-3.0.0.0-r<version>.x86_64.rpm
         ncs5500-m2m-1.0.0.0-r<version>.x86_64.rpm
         ncs5500-parser-2.0.0.0-r<version>.x86_64.rpm

Following XR rpm(s) will be used for building GISO:
         kernel-modules-3.14-r0.1.xr.x86_64.rpm
         kernel-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm
         ncs5500-iosxr-fwding-4.0.0.2-r<version>.CSCxr22222.x86_64.rpm
         ncs5500-iosxr-infra-4.0.0.3-r<version>.CSCxr44444.x86_64.rpm
         ncs5500-iosxr-infra-4.0.0.2-r<version>.CSCxr11111.x86_64.rpm
         kernel-image-3.14.23-wr7.0.0.2-standard-3.14-r0.1.xr.x86_64.rpm
         cisco-klm-mifpga-0.1-r0.0.xr.x86_64.rpm
         cisco-klm-mifpga-0.1.p1-r0.0.CSCtp11111.xr.x86_64.rpm
         ncs5500-iosxr-infra-4.0.0.4-r<version>.CSCxr11111.x86_64.rpm
         ncs5500-iosxr-fwding-4.0.0.1-r<version>.CSCxr22222.x86_64.rpm
         openssh-scp-6.6p1-r0.0.xr.x86_64.rpm
         ncs5500-k9sec-3.1.0.2-r<version>.CSCxr33333.x86_64.rpm
         ncs5500-k9sec-3.1.0.0-r<version>.x86_64.rpm
         kernel-modules-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm
         ncs5500-k9sec-3.1.0.1-r<version>.CSCxr33333.x86_64.rpm
         openssh-scp-6.6p1.p1-r0.0.CSCtp11111.xr.x86_64.rpm
         ncs5500-spirit-boot-1.0.0.3-r<version>.CSCsb77777.x86_64.rpm
         ncs5500-iosxr-mgbl-3.0.0.0-r6<version>.x86_64.rpm
         kernel-image-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm
         ncs5500-iosxr-infra-4.0.0.1-r<version>.CSCxr44444.x86_64.rpm
         kernel-3.14.23-wr7.0.0.2-standard-3.14-r0.1.xr.x86_64.rpm

        ...RPM compatibility check [PASS]

Following CALVADOS x86_64 rpm(s) will be used for building GISO:
         ncs5500-sysadmin-shared-<version>-r<version>.CSCcv22222.x86_64.rpm
         ncs5500-sysadmin-hostos-<version>-r<version>.CSCho77777.admin.x86_64.rpm
         ncs5500-sysadmin-system-<version>-r<version>.CSCcv11111.x86_64.rpm
         ncs5500-sysadmin-shared-<version>-r62114I.CSCcv33333.x86_64.rpm
         ncs5500-sysadmin-system-<version>-r<version>.CSCcv44444.x86_64.rpm
         kernel-modules-3.14.p1-r0.1.CSCtp11111.admin.x86_64.rpm
         cisco-klm-mifpga-0.1-r0.0.admin.x86_64.rpm
         kernel-image-3.14.23-wr7.0.0.2-standard-3.14-r0.1.admin.x86_64.rpm
         kernel-modules-3.14-r0.1.admin.x86_64.rpm
         kernel-image-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.admin.x86_64.rpm
         kernel-3.14.23-wr7.0.0.2-standard-3.14-r0.1.admin.x86_64.rpm
         kernel-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.admin.x86_64.rpm
         cisco-klm-mifpga-0.1.p1-r0.0.CSCtp11111.admin.x86_64.rpm
         openssh-scp-6.6p1.p1-r0.0.CSCtp11111.admin.x86_64.rpm
         openssh-scp-6.6p1-r0.0.admin.x86_64.rpm
        ...RPM compatibility check [PASS]

Following HOST x86_64 rpm(s) will be used for building GISO:
         ncs5500-sysadmin-hostos-6.2.1.17-r62114I.CSCho77777.host.x86_64.rpm
         cisco-klm-mifpga-0.1.p1-r0.0.CSCtp11111.host.x86_64.rpm
         kernel-image-3.14.23-wr7.0.0.2-standard-3.14-r0.1.host.x86_64.rpm
         kernel-modules-3.14.p1-r0.1.CSCtp11111.host.x86_64.rpm
         kernel-modules-3.14-r0.1.host.x86_64.rpm
         openssh-scp-6.6p1.p1-r0.0.CSCtp11111.host.x86_64.rpm
         cisco-klm-mifpga-0.1-r0.0.host.x86_64.rpm
         kernel-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.host.x86_64.rpm
         kernel-3.14.23-wr7.0.0.2-standard-3.14-r0.1.host.x86_64.rpm
         openssh-scp-6.6p1-r0.0.host.x86_64.rpm
         kernel-image-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.host.x86_64.rpm
        ...RPM compatibility check [PASS]

Building Golden ISO...
Summary .....

XR rpms:
        kernel-modules-3.14-r0.1.xr.x86_64.rpm
        kernel-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm
        ncs5500-iosxr-fwding-4.0.0.2-r<version>.CSCxr22222.x86_64.rpm
        ncs5500-iosxr-infra-4.0.0.3-r<version>.CSCxr44444.x86_64.rpm
        ncs5500-iosxr-infra-4.0.0.2-r<version>.CSCxr11111.x86_64.rpm
        kernel-image-3.14.23-wr7.0.0.2-standard-3.14-r0.1.xr.x86_64.rpm
        cisco-klm-mifpga-0.1-r0.0.xr.x86_64.rpm
        cisco-klm-mifpga-0.1.p1-r0.0.CSCtp11111.xr.x86_64.rpm
        ncs5500-iosxr-infra-4.0.0.4-r<version>.CSCxr11111.x86_64.rpm
        ncs5500-iosxr-fwding-4.0.0.1-r<version>.CSCxr22222.x86_64.rpm
        openssh-scp-6.6p1-r0.0.xr.x86_64.rpm
        ncs5500-k9sec-3.1.0.2-r<version>.CSCxr33333.x86_64.rpm
        ncs5500-k9sec-3.1.0.0-r<version>.x86_64.rpm
        kernel-modules-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm
        ncs5500-k9sec-3.1.0.1-r<version>.CSCxr33333.x86_64.rpm
        openssh-scp-6.6p1.p1-r0.0.CSCtp11111.xr.x86_64.rpm
        ncs5500-spirit-boot-1.0.0.3-r<version>.CSCsb77777.x86_64.rpm
        ncs5500-iosxr-mgbl-3.0.0.0-r<version>.x86_64.rpm
        kernel-image-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.xr.x86_64.rpm
        ncs5500-iosxr-infra-4.0.0.1-r<version>.CSCxr44444.x86_64.rpm
        kernel-3.14.23-wr7.0.0.2-standard-3.14-r0.1.xr.x86_64.rpm

CALVADOS rpms:
        ncs5500-sysadmin-shared-<version>-r<version>.CSCcv22222.x86_64.rpm
        ncs5500-sysadmin-hostos-<version>-r<version>.CSCho77777.admin.x86_64.rpm
        ncs5500-sysadmin-system-<version>-r<version>.CSCcv11111.x86_64.rpm
        ncs5500-sysadmin-shared-<version>-r<version>.CSCcv33333.x86_64.rpm
        ncs5500-sysadmin-system-<version>-r<version>.CSCcv44444.x86_64.rpm
        kernel-modules-3.14.p1-r0.1.CSCtp11111.admin.x86_64.rpm
        cisco-klm-mifpga-0.1-r0.0.admin.x86_64.rpm
        kernel-image-3.14.23-wr7.0.0.2-standard-3.14-r0.1.admin.x86_64.rpm
        kernel-modules-3.14-r0.1.admin.x86_64.rpm
        kernel-image-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.admin.x86_64.rpm
        kernel-3.14.23-wr7.0.0.2-standard-3.14-r0.1.admin.x86_64.rpm
        kernel-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.admin.x86_64.rpm
        cisco-klm-mifpga-0.1.p1-r0.0.CSCtp11111.admin.x86_64.rpm
        openssh-scp-6.6p1.p1-r0.0.CSCtp11111.admin.x86_64.rpm
        openssh-scp-6.6p1-r0.0.admin.x86_64.rpm

HOST rpms:
        ncs5500-sysadmin-hostos-<version>-r<version>.CSCho77777.host.x86_64.rpm
        cisco-klm-mifpga-0.1.p1-r0.0.CSCtp11111.host.x86_64.rpm
        kernel-image-3.14.23-wr7.0.0.2-standard-3.14-r0.1.host.x86_64.rpm
        kernel-modules-3.14.p1-r0.1.CSCtp11111.host.x86_64.rpm
        kernel-modules-3.14-r0.1.host.x86_64.rpm
        openssh-scp-6.6p1.p1-r0.0.CSCtp11111.host.x86_64.rpm
        cisco-klm-mifpga-0.1-r0.0.host.x86_64.rpm
        kernel-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.host.x86_64.rpm
        kernel-3.14.23-wr7.0.0.2-standard-3.14-r0.1.host.x86_64.rpm
        openssh-scp-6.6p1-r0.0.host.x86_64.rpm
        kernel-image-3.14.23-wr7.0.0.2-standard-3.14.p1-r0.1.CSCtp11111.host.x86_64.rpm
XR Config file:
router.cfg

        ...Golden ISO creation SUCCESS.
Golden ISO Image Location: /<directory>/ncs5500-goldenk9-x.iso-<version>.v1
Detail logs: <directory>/Giso_build.log-2016-10-01:16:22:48.305211
where:
  • -i is the path to mini-x.iso

  • -r is the path to RPM repository

  • -c is the path to XR config file

  • -l is the golden ISO label

  • -h shows the help message

  • -v is the version of the build tool gisobuild.py

  • -m is to build the migration tar to migrate from IOS XR to IOS XR 64 bit

Note 
It is recommended to build GISOs with a label name.

The corresponding GISO and build logs are available under the specified directory in out_directory. If a directory is not specified, the files are placed in /output_gisobuild directory.



Note

The GISO script does not support verification of XR configuration.


What to do next

Install the GISO image on the router.

Install Golden ISO

Golden ISO (GISO) automatically performs the following actions:

  • Installs host and system admin RPMs.

  • Partitions repository and TFTP boot on RP.

  • Creates software profile in system admin and XR modes.

  • Installs XR RPMs. Use show install active command to see the list of RPMs.

  • Applies XR configuration. Use show running-config command in XR mode to verify.

Procedure


Step 1

Download GISO image to the router using one of the following options:

  • PXE boot: when the router is booted, the boot mode is identified. After detecting PXE as boot mode, all available ethernet interfaces are brought up, and DHClient is run on each interface. DHClient script parses HTTP or TFTP protocol, and GISO is downloaded to the box.
  • USB boot or Disk Boot: when the USB mode is detected during boot, and GISO is identified, the additional RPMs and XR configuration files are extracted and installed.
  • System Upgrade when the system is upgraded, GISO can be installed using install add , install activate , or using install replace commands.
    Important 

    To replace the current version and packages on the router with the version from GISO, note the change in command and format.

    • In versions prior to Cisco IOS XR Release 6.3.3, 6.4.x and 6.5.1, use the install update command:
      install update source <source path> <Golden-ISO-name> replace
    • In Cisco IOS XR Release 6.5.2 and later, use the install replace command.
      install replace <absolute-path-of-Golden-ISO>
    Note 

    To create a Bootable External USB Disk, do the following:

    • Ensure that the USB Boot Disk has a minimum storage of 8GB, and that you have root/admin or appropriate permission to create bootable disk on linux machine.

    1. Copy and execute usb-install script on the Linux machine to create a bootable external USB.

      Router#admin
      
      sysadmin-vm:0_RSP0# run chvrf 0 ssh rp0_admin
      [sysadmin-vm:0_RSP0:~]$ ssh my_host
      [host:~]$ cd /misc/disk1/
      [host:~]$ ./usb-install-712-or-latest.sh asr9k-goldenk9-x64-7.0.2-dr.isso /dev/sdc EFI
      
      Preparing USB stick for EFI
      parted gpt: Failed to create partition - continuing ...
      Create filesystem on /dev/sdc1
      Mounting source iso at //misc/disk1/cdtmp.CnuKnA
      Mounting destination /dev/sdc1 at //misc/disk1/usbdev.SSBb4R
      Copying image to USB stick
      Initrd path is //misc/disk1/cdtmp.CnuKnA/boot/initrd.img
      Getting boot
      3749342 blocks
      Copying boot
      Copying initrd.img
      Copying signature.initrd.img
      Copying certs
      Creating grub files
      Copying /misc/disk1/asr9k-goldenk9-x64-7.0.2-dr.iso in USB Stick
      USB stick set up for EFI boot!
    2. Reset the RSP/RP and plug in bootable USB to RSP/RP's front panel. The USB will get detected in ROMMON. Note that when the system is in ROMMON, and if you add a front panel external USB, the USB will not be detected until the RSP/RP is reset.

    The options to upgrade the system are as follows:

    • system upgrade from a non-GISO (image that does not support GISO) to GISO image: If a system is running a version1 with an image that does not support GISO, the system cannot be upgraded directly to version2 of an image that supports GISO. Instead, the version1 must be upgraded to version2 mini ISO, and then to version2 GISO.

    • system upgrade in a release from version1 GISO to version2 GISO: If both the GISO images have the same base version but different labels, install add and install activate commands does not support same version of two images. Instead, using install update command installs only the delta RPMs. System reload is based on restart type of the delta RPMs.

    • system upgrade across releases from version1 GISO to version2 GISO: Both the GISO images have different base versions. Use install add and install activate commands, or install replace command to perform the system upgrade. The router reloads after the upgrade with the version2 GISO image.

Step 2

Run the show install repository all command in System Admin mode to view the RPMs and base ISO for host, system admin and XR.

sysadmin-vm:0_RP0# show install repository all
Admin repository
---------------------
ncs5500-sysadmin-6.2.2
ncs5500-sysadmin-hostos-6.2.2-r622.CSCcv10001.admin.x86_64
ncs5500-sysadmin-hostos-6.2.2-r622.CSCcv10001.admin.arm
ncs5500-sysadmin-system-6.2.2-r622.CSCcv10005.x86_64
ncs5500-sysadmin-system-6.2.2-r622.CSCcv10005.arm
....
XR repository
------------------
ncs5500-iosxr-mgbl-3.0.0.0-r622.x86_64
ncs5500-xr-6.2.2
....
Host repository
---------------------
host-6.2.2
Step 3

Run the show install package <golden-iso> command to display the list of RPMs, and packages built in GISO.

Note 
To list RPMs in the GISO, the GISO must be present in the install repository.

Router#show install package ncs5500-goldenk9-x64-6.2.2

This may take a while ...
    ISO Name: ncs5500-goldenk9-x64-6.2.2
    ISO Type: bundle
    ISO Bundled: ncs5500-mini-x64-6.2.2
    Golden ISO Label: temp
    ISO Contents:
        ISO Name: ncs5500-xr-6.2.2
        ISO Type: xr
        rpms in xr ISO:
            iosxr-os-ncs5500-64-5.0.0.0-r622
            iosxr-ce-ncs5500-64-3.0.0.0-r622
            iosxr-infra-ncs5500-64-4.0.0.0-r622
            iosxr-fwding-ncs5500-64-4.0.0.0-r622
            iosxr-routing-ncs5500-64-3.1.0.0-r6122

        ISO Name: ncs5500-sysadmin-6.2.2
        ISO Type: sysadmin
        rpms in sysadmin ISO:
            ncs5500-sysadmin-topo-6.2.2-r622
            ncs5500-sysadmin-shared-6.2.2-r622
            ncs5500-sysadmin-system-6.2.2-r622
            ncs5500-sysadmin-hostos-6.2.2-r622.admin
        ...
            
        ISO Name: host-6.2.2
        ISO Type: host
        rpms in host ISO:
            ncs5500-sysadmin-hostos-6.2.2-r622.host

        Golden ISO Rpms:
            xr rpms in golden ISO:
                ncs5500-k9sec-x64-2.2.0.1-r622.CSCxr33333.x86_64.rpm
                openssh-scp-6.6p1.p1-r0.0.CSCtp12345.xr.x86_64.rpm
                openssh-scp-6.6p1-r0.0.xr.x86_64.rpm
                ncs5500-mpls-x64-2.1.0.0-r622.x86_64.rpm
                ncs5500-k9sec-x64-2.2.0.0-r622.x86_64.rpm

            sysadmin rpms in golden ISO:
                ncs5500-sysadmin-system-6.2.2-r622.CSCcv11111.x86_64.rpm
                ncs5500-sysadmin-system-6.2.2-r622.CSCcv11111.arm.rpm
                openssh-scp-6.6p1-r0.0.admin.x86_64.rpm
                openssh-scp-6.6p1-r0.0.admin.arm.rpm
                openssh-scp-6.6p1.p1-r0.0.CSCtp12345.admin.x86_64.rpm
                openssh-scp-6.6p1.p1-r0.0.CSCtp12345.admin.arm.rpm
                ncs5500-sysadmin-hostos-6.2.2-r622.CSCcv10001.admin.x86_64.rpm
                ncs5500-sysadmin-hostos-6.2.2-r622.CSCcv10001.admin.arm.rpm

            host rpms in golden ISO:
                openssh-scp-6.6p1-r0.0.host.x86_64.rpm
                openssh-scp-6.6p1-r0.0.host.arm.rpm
                openssh-scp-6.6p1.p1-r0.0.CSCtp12345.host.x86_64.rpm
                openssh-scp-6.6p1.p1-r0.0.CSCtp12345.host.arm.rpm

The ISO, SMUs and packages in GISO are installed on the router.