topic Re: R80.20-kernel version and File System in Firewall and Security Management

R80.20-kernel version and File System

Vishnu_Kumar — Fri, 08 Mar 2019 08:24:12 GMT

Hi All,

As in R80.20, kernel version is and file system has been upgraded.

But as per below output, it is still showing older version of kernel and file system.

================= XXXXXXXX================

CP_R80_20> show veion all
CLINFR0329 Invalid command:'show veion all'.
CP_R80_20> show version all
Product version Check Point Gaia R80.20
OS build 101
OS kernel version 2.6.18-92cpx86_64
OS edition 64-bit

CP_R80_20>
CP_R80_20> expert
Enter expert password:

Warning! All configurations should be done through clish
You are in expert mode now.

[Expert@CP_R80_20:0]# uname -a
Linux CP_R80_20 2.6.18-92cpx86_64 #1 SMP Tue Sep 4 13:46:30 IDT 2018 x86_64 x86_64 x86_64 GNU/Linux
[Expert@CP_R80_20:0]#
[Expert@CP_R80_20:0]#
[Expert@CP_R80_20:0]# parted -l

Model: VBOX HARDDISK (ide)
Disk /dev/hda: 137GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos

Number Start End Size Type File system Flags
1 32.3kB 313MB 313MB primary ext3 boot
2 313MB 8900MB 8587MB primary linux-swap
3 8900MB 137GB 129GB primary lvm

Error: Unable to open /dev/md0 - unrecognised disk label.

Re: R80.20-kernel version and File System

G_W_Albrecht — Fri, 08 Mar 2019 09:09:44 GMT

Did you perform a complete fresh install ?

Re: R80.20-kernel version and File System

Vishnu_Kumar — Fri, 08 Mar 2019 09:29:56 GMT

Hi Albrecht,

Yes, i did the fresh installation after downloading the ISO image from checkpoint portal.

Re: R80.20-kernel version and File System

G_W_Albrecht — Fri, 08 Mar 2019 09:39:48 GMT

And this is a management server ? sk122485: Upgraded Linux kernel (3.10) - applies to Security Management Server only

New file system (xfs)
- More than 2TB support per a single storage device
- Enlarged systems storage (up to 48TB)

Re: R80.20-kernel version and File System

Vishnu_Kumar — Fri, 08 Mar 2019 09:44:06 GMT

No, actually It is Standalone device.

Re: R80.20-kernel version and File System

G_W_Albrecht — Fri, 08 Mar 2019 09:54:39 GMT

I would suggest to do a distributed deployment - Stand Alone is not a usefull configuration in production...

Re: R80.20-kernel version and File System

Vishnu_Kumar — Fri, 08 Mar 2019 10:02:42 GMT

Hi Albrecht,

Actually I was testing in LAB before going to production.

But please let me know if Upgraded kernel and file system features are not available in Standalone or Gateway-only deployment.

Re: R80.20-kernel version and File System

G_W_Albrecht — Fri, 08 Mar 2019 11:52:14 GMT

So it is written in sk122485: Upgraded Linux kernel (3.10) - applies to Security Management Server only

If the new kernel can not be used for GW installation, it also will not work as Stand Alone - only on pure management...

Re: R80.20-kernel version and File System

PhoneBoy — Sat, 09 Mar 2019 15:41:48 GMT

Just to clarify, there are two R80.20 downloads:

The Security Gateway / Standalone version still uses the older kernel.

The Security Management (only) version uses the newer Linux kernel.

Re: R80.20-kernel version and File System

Vishnu_Kumar — Mon, 11 Mar 2019 03:37:36 GMT

Hi Dameon and Albrecht,

Thanks very much, i got the point.

But, is there any specific reason that these features are not available on gateway.

Re: R80.20-kernel version and File System

PhoneBoy — Mon, 11 Mar 2019 09:19:47 GMT

Security Management is mostly a userland affair, thus is less sensitive to Linux kernel changes.

Security Gateway is tightly integrated with the Linux kernel currently.

Changing the Linux kernel requires many changes, not all of which were completed at the time of R80.20 GA.

We do plan an R80.x version based on the newer Linux kernel relatively soon.

Re: R80.20-kernel version and File System

TheRealDiZ — Wed, 31 Jul 2019 13:21:12 GMT

Hi @PhoneBoy and all of you guys @Vishnu_Kumar @G_W_Albrecht ,

Do you know if it is possible to use the new linux Kernel 3.1 with R80.20 on VMware ESXi?

Usually I have installed in the past Security Management server with guest OS "Other Linux - 64bit".

I have tried to put "Other Linux 3.X - 64bit" but it seems is not suitable for Gaia.

Do you have any advise on this one?

D!Z

Re: R80.20-kernel version and File System

PhoneBoy — Fri, 02 Aug 2019 14:24:34 GMT

I run my R80.20 Management Server in ESXi just fine using RHEL7 as the Guest OS type.

Re: R80.20-kernel version and File System

TheRealDiZ — Sun, 04 Aug 2019 08:48:26 GMT

Hi @PhoneBoy and @Vishnu_Kumar

I used other linux 64 bit as guest os and works fine as well.

I see that Gaia is actually using Linux kernel 3.10.

Do you know if Check Point has any recommendations on this aspect?

Is there any SK that explicitly states which guest OS is required and which is the best suitable for Gaia?

Thanks in advance 🙂

RealD!Z

Re: R80.20-kernel version and File System

PhoneBoy — Sun, 04 Aug 2019 17:42:20 GMT

Unfortunately, I have not seen any official documentation stating which one to use.
That said, Gaia OS is based on RHEL (2.6.18 kernel = RHEL 5.x, 3.10 kernel = RHEL 7.x).
It therefore makes sense to use the RHEL settings in VMware.

Re: R80.20-kernel version and File System

TheRealDiZ — Mon, 05 Aug 2019 08:46:41 GMT

Hi @PhoneBoy ,

Thank you so much for your explanation, always on point!