topic Re: Failure with UPGRADE process in Firewall and Security Management

Failure with UPGRADE process

Matlu — Sat, 30 Sep 2023 00:09:02 GMT

Hello,

I am currently trying to upgrade Gaia OS from R80.30 to R81, using Blink Image.

But it does not allow me to download the Blink package, due to lack of space.

Is there a way to "provide" more space to the /var/log path, in order to be able to successfully run the UPGRADE?

I have a GW Cluster on OPEN SERVER.

Is it possible to provide more space to the /var/log/ path? from the path /dev/mapper/vg_splat-lv_current (I see that it is the path that has more free space).

What would be the procedure?

Thanks for your opinions.

Re: Failure with UPGRADE process

the_rock — Sat, 30 Sep 2023 02:11:06 GMT

Hey bro,

It clearly states you need at least 10 GB, which makes sense, but thats sort of bare minimum.

Try run this command -> find /var/log -size +500000000c

That would show you files bigger than 500 MBs in /var/log and you can delete whats not needed

Also, refer to below post for good commands for space issue

Andy

https://community.checkpoint.com/t5/Security-Gateways/Disk-Space-issues-on-Gateway/m-p/161537#M28601

Re: Failure with UPGRADE process

Matlu — Sat, 30 Sep 2023 02:39:47 GMT

Buddy,

I must assume that GAIA OS, asks me for at least 10GB in /var/log/, as part of the Upgrade process, right?

This does not mean that if I upgrade the GW, when I check the "df - h" again, I will be surprised to find that /var/log is completely out of space, right?

It's a bit silly, but it's better to ask, than to go "blind"

Cheers.

Re: Failure with UPGRADE process

the_rock — Sat, 30 Sep 2023 03:06:46 GMT

No need to assume anything, thats exactly what it says lol

Re: Failure with UPGRADE process

the_rock — Sat, 30 Sep 2023 20:18:10 GMT

Hey bro,

Were you able to free up some space in /var/log for the upgrade?

Andy

Re: Failure with UPGRADE process

Chris_Atkinson — Sun, 01 Oct 2023 13:55:38 GMT

Open server, VM or other hardware?

Refer: sk95566

Re: Failure with UPGRADE process

genisis__ — Sun, 01 Oct 2023 13:18:25 GMT

Not sure how complicated your configuration is, but why not just do a clean build if it's just a gateway, keep in mind there was also a kernel change, and I can tell you for a VSX setup I had it cause real issues which lead down the path of a clean build.
I would also suggest going to R81.10 with latest JHFA rather than R81.

R81.20 on the fence with at the moment, but this is also a better option than R81.

Re: Failure with UPGRADE process

the_rock — Sun, 01 Oct 2023 16:11:27 GMT

I think sk @Chris_Atkinson gave is also definitely a good option.

Andy

Re: Failure with UPGRADE process

Bob_Zimmerman — Sun, 01 Oct 2023 17:40:34 GMT

What does the command 'mount' return?

What does the command 'pvs' return?

For example:

[Expert@DallasSA]# mount /dev/mapper/vg_splat-lv_current on / type xfs (rw,inode32) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) /dev/sda1 on /boot type ext3 (rw) tmpfs on /dev/shm type tmpfs (rw) /dev/mapper/vg_splat-lv_log on /var/log type xfs (rw,inode32) none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw) cgroup on /sys/fs/cgroup type tmpfs (rw,uid=0,gid=0,mode=0755) [Expert@DallasSA]# pvs PV VG Fmt Attr PSize PFree /dev/sda3 vg_splat lvm2 a-- 356.69g 241.19g

Re: Failure with UPGRADE process

the_rock — Sun, 01 Oct 2023 17:55:52 GMT

Never knew of pvs command, thanks for that!

Andy

Re: Failure with UPGRADE process

Bob_Zimmerman — Sun, 01 Oct 2023 18:41:22 GMT

It's one of the LVM2 commands. They mostly start with lv for commands which deal with logical volumes, pv for commands which deal with physical volumes, and vg for commands which deal with volume groups.

Strictly, I guess vgs would be the most correct command to use to see how much available space there is, but Gaia only has the one volume group and only the one physical volume by default, so they return equivalent data.

NOTE: there are a bunch of commands in this family which change things. They will let you mess up your system spectacularly. Be really careful with any of these commands. Try them in a lab before you try them on a firewall or management which you care about. A bunch of the commands just show information like lvs, lvdisplay, pvs, pvdisplay, vgs, and vgdisplay. Those should be fine to run.

I still wish we could use ZFS instead of XFS and LVM2. Oh well.

Re: Failure with UPGRADE process

the_rock — Sun, 01 Oct 2023 19:38:17 GMT

Good to know, thank you!

Andy