topic Re: CPUSE repository cleanup in Firewall and Security Management

CPUSE repository cleanup

S_E_ — Fri, 27 Mar 2020 08:21:54 GMT

just recognized that /var/log/CPda/repository is somehow not cleaned up. This is independent of management or gateway. Clish command 'show installer packages all' shows only 2 packages

Is it safe to delete this directories and keep only the latest ones?

Why is there a difference between clish and bash commands?

Regards

ls -lrt /var/log/CPda/repository
CheckPoint#CPUpdates#All#6.0#4#0#BUNDLE_R77_30_JUMBO_HF#216
CheckPoint#CPUpdates#All#6.0#4#0#BUNDLE_R77_30_JUMBO_HF#302
CheckPoint#CPUpdates#All#6.0#5#0#BUNDLE_R80_30_JUMBO_HF_MAIN#155
CheckPoint#CPUpdates#All#6.0#5#0#BUNDLE_R80_30_JUMBO_HF_MAIN#50
CheckPoint#Major#All#6.0#5#0#R80.30_GW_T200

gateway> show installer packages all
** ************************************************************************* **
** Hotfixes **
** ************************************************************************* **
Display name Status
R80.30 Gaia 2.6.18 Jumbo Hotfix Accumulator
Security Gateway and Standalone General Av Installed
R80.30 Gaia 2.6.18 Jumbo Hotfix Accumulator
Security Gateway and Standalone (Take 50) Installed as part of
** ************************************************************************* **
** Majors **
** ************************************************************************* **
Display name Status
R80.30 Fresh Install and Upgrade for Security
Gateway and Standalone Installed

gateway#cpinfo -y all | grep HF
This is Check Point CPinfo Build 914000202 for GAIA
HOTFIX_R80_30_JUMBO_HF_MAIN Take: 155

Re: CPUSE repository cleanup

Maarten_Sjouw — Fri, 27 Mar 2020 08:26:44 GMT

you can safely delete older installed packages with
installer delete <Tab>
to see which packages are available for deletion, it is best to leave the last installed jumbo.

Re: CPUSE repository cleanup

G_W_Albrecht — Fri, 27 Mar 2020 08:35:51 GMT

You should be able to delete all files you will never need to uninstall - so i would keep all R80.30 Jumbo Takes... Interestingly, the CPUSE Backup folder is /opt/CPda/backup; this CPda repository folder has links to all in /var/log/CPda/repository.

Re: CPUSE repository cleanup

S_E_ — Fri, 27 Mar 2020 08:55:09 GMT

hi
that is exactly the issue
installer delete <tab> shows only 2 hotfixes
in bash, I can see 4 of them.
Regards

Re: CPUSE repository cleanup

S_E_ — Fri, 27 Mar 2020 08:57:05 GMT

hi,
ok thanks

Just for reference:
ls -lrt /opt/CPda/backup
CheckPoint#CPUpdates#All#6.0#5#0#BUNDLE_R80_30_JUMBO_HF_MAIN#50
CheckPoint#CPUpdates#All#6.0#5#0#BUNDLE_R80_30_JUMBO_HF_MAIN#155

Re: CPUSE repository cleanup

G_W_Albrecht — Fri, 27 Mar 2020 09:44:57 GMT

Right. If in very dear need of more space, you may also delete 77.30 backups from /opt/CPda/backup.

Re: CPUSE repository cleanup

G_W_Albrecht — Fri, 27 Mar 2020 09:48:39 GMT

installer delete <tab> shows only 2 hotfixes
in bash, I can see 4 of them.

---> in 77.30 CPUSE, installer delete <tab> would have shown just these two Jumbos 8)

But now in R80.30, CPUSE does not remember older HFs anymore - and is no longer capable of deleting them.

Re: CPUSE repository cleanup

SdanteMate — Sat, 09 Dec 2023 11:33:19 GMT

Hi @G_W_Albrecht , is it ok to manually delete the files from /var/log/CPda/repository/tmp?

Re: CPUSE repository cleanup

Chris_Atkinson — Sat, 09 Dec 2023 12:06:01 GMT

All downloaded software updates are located in the $DADIR/repository/tmp/ directory, which actually contains symbolic links to the /var/log/CPda/repository/tmp/ directory, where the downloaded software updates are physically stored.

Re: CPUSE repository cleanup

SdanteMate — Sat, 09 Dec 2023 12:14:36 GMT

Hi @Chris_Atkinson , thanks for replying. Are these updates currently linked to the system, or are there files that I can delete now?