topic Re: Upgrade Mgmt R80.10 to R80.20 in Firewall and Security Management

Upgrade Mgmt R80.10 to R80.20

Thomas_Bauer — Thu, 08 Nov 2018 10:02:58 GMT

We would like to Upgrade Mgmt-Server via CPUSE R80.10 Take42 to R80.20. Download from R80.20 Fresh Install and Upgrade for Security Management" was fine.

After we " Initiating Verifier" we get error message:

There is not enough disk space for installation - Not enough un-partitioned space : Available: 0.00 GB Required: 32.00 GB Free at least 32.00 GB of un-partitioned disk space in order to complete the operation

Our VM Mgmt Server:

[Expert@zznt01mgmt:0]#

LVM overview

============

Size(GB) Used(GB) Configurable Description

lv_current 32 18 yes Check Point OS and products

lv_log 977 615 yes Logs volume

upgrade 0 N/A no

swap 15 N/A no Swap volume size

free 0 N/A no Unused space

------- ----

total 1024 N/A no Total size

[Expert@zznt01mgmt:0]# df -h

Filesystem Size Used Avail Use% Mounted on

/dev/mapper/vg_splat-lv_current

31G 18G 12G 60% /

/dev/sda1 289M 24M 251M 9% /boot

tmpfs 4.9G 4.0K 4.9G 1% /dev/shm

/dev/mapper/vg_splat-lv_log

948G 615G 284G 69% /var/log

Can anybody help in matter this issue ?

Re: Upgrade Mgmt R80.10 to R80.20

G_W_Albrecht — Thu, 08 Nov 2018 12:25:57 GMT

sk95566 Managing partition sizes via LVM manager on Gaia OS

sk94671 How to add hardware resources, such as log storage, to a VMware Virtual Machine running Gaia OS

sk105065 How to add a new hard drive to Open Servers running Gaia OS (adding disk space)

Re: Upgrade Mgmt R80.10 to R80.20

Thomas_Bauer — Fri, 09 Nov 2018 06:53:50 GMT

We solve it via LVM Manager to shrink the LOG volume (-50GB). We don't need more disk-space in summary. After then the verifier was fine and we did a successfully upgrade to R80.20.

Re: Upgrade Mgmt R80.10 to R80.20

Tomer_Sole — Thu, 15 Nov 2018 17:30:06 GMT

Hi, small tip:

While Check Point always recommends to upgrade in-place with CPUSE, because it's simpler and easier to do, upgrading Security Management Servers from pre-R80.20 to R80.20 and above is recommended with Advanced Upgrade, for the benefit of replacing the file system to the new XFS, which gives performance improvements.

Re: Upgrade Mgmt R80.10 to R80.20

HristoGrigorov — Fri, 16 Nov 2018 19:16:38 GMT

Any measurements on how much performance is improved? Relatively speaking of course.

Also, is it possible to switch R80.20 to XFS later on (after it is upgraded)?

Re: Upgrade Mgmt R80.10 to R80.20

Johan_Rudberg — Thu, 24 Jan 2019 15:31:52 GMT

When iam about to verify the R80.20 Uppgrade this error is shown.any ideas?

Re: Upgrade Mgmt R80.10 to R80.20

G_W_Albrecht — Thu, 24 Jan 2019 15:58:21 GMT

As you mention neither Version nor deployment the error shown is inexplicable 😉

Re: Upgrade Mgmt R80.10 to R80.20

Norbert_Bohusch — Thu, 24 Jan 2019 15:58:54 GMT

Have you checked the relevant SK from the error message?

Re: Upgrade Mgmt R80.10 to R80.20

Johan_Rudberg — Fri, 25 Jan 2019 09:58:53 GMT

Yes this sk is for upgrading R80.20.M1 to R80.20 GA Iam trying to upgrade from R80.10 to R80.20

Re: Upgrade Mgmt R80.10 to R80.20

PhoneBoy — Sat, 26 Jan 2019 08:21:28 GMT

Looks like a warning message, not a blocking message.

What happens when you try to upgrade?

Re: Upgrade Mgmt R80.10 to R80.20

Johan_Rudberg — Mon, 28 Jan 2019 08:26:59 GMT

Upgrade option is disabled, only Clean Install is available....

Re: Upgrade Mgmt R80.10 to R80.20

Johan_Rudberg — Mon, 28 Jan 2019 10:20:07 GMT

The package details are:

Gaia

File Name: Check_Point_R80.20_T101_Fresh_Install_and_Upgrade_Security_Management.tgz

Image Size: 2861.4 MB

Package Type: Major Version

Release Date: 20-Dec-2018

Downloaded On: 22-Jan-2019 16:19:41

Status:

The package downloaded successfully

Important Messages:
• While the package is installing, the cpstop and cpstart commands are run
• After the package is installed, the machine reboots
• Upgrade to this version is prohibited. Use clean install.

Description:

R80.20, part of the Check Point Infinity architecture, delivers the most innovative and effective security that keeps our customers protected against large scale, fifth generation cyber threats. For more information, see R80.20 Home Page.

Re: Upgrade Mgmt R80.10 to R80.20

Timothy_Hall — Mon, 28 Jan 2019 12:55:14 GMT

Please obtain the lvm_manager tool via sk95566: Managing partition sizes via LVM manager on Gaia OS. What does it report for these partitions:

upgrade 77 N/A no Reserved for version upgrade

free -77 N/A no Unused space

The "upgrade" raw area of the disk is used for in-place version upgrades and storage of snapshots, my guess is you don't have enough of it. Or it is possible that the upgrade needs to create a completely new partition from unallocated/free space and there isn't any. Either way lvm_manager will allow you to poke around and possibly reallocate partitions to give the upgrade process what it wants. Very important though: always make sure you have a known-good backup prior to tampering with disk partitioning!

CheckMates Break Out Sessions Speaker

CPX 2019 Las Vegas & Vienna - Tuesday@13:30

Re: Upgrade Mgmt R80.10 to R80.20

PhoneBoy — Mon, 28 Jan 2019 14:11:11 GMT

I ran into this recently as well.

What you have to do is the following:

Delete the R80.20 Package from CPUSE
Ensure the package from this SK is installed: How to manually obtain the latest Upgrade Tools package for upgrade from/to Management Feature Release
Re-add the R80.20 Package

The "upgrade" option should show.

Re: Upgrade Mgmt R80.10 to R80.20

Johan_Rudberg — Mon, 28 Jan 2019 15:35:03 GMT

I think this would resolve it too, have red the SK there and I´ve seen that the upgrade tools are old in the log files from the DA.

Re: Upgrade Mgmt R80.10 to R80.20

Gislaine_Campos — Thu, 21 Feb 2019 20:26:37 GMT

Hello, I upgrade management and log servers r80.10 to r80.20 witch CPUSE. And I upgrade de active member r80.10 to r80.20 with CPUSE. After reboot, I lost the communication with him (ping, ssh, https). And ClusterXL is :

Active PNOTES: fsync

Last member state change event:

Event Code CLUS-115303

State change : INIT -> ready

Reason for state change : Member with older software release has been detected

What is the best way to upgrade with cpuse when you have a cluster?

If I upgrade the other firewall, will the cluster start working again?

Re: Upgrade Mgmt R80.10 to R80.20

Norbert_Bohusch — Thu, 21 Feb 2019 20:30:11 GMT

Take a look at "Connectivity Upgrade" in Install and Upgrade Guide.

Re: Upgrade Mgmt R80.10 to R80.20

Gislaine_Campos — Fri, 22 Feb 2019 17:23:37 GMT

ok, Thanks.

Another question: After the upgrade, I can not icmp, ssh and https on the firewall in standby. How to get around this?

Re: Upgrade Mgmt R80.10 to R80.20

RKinsp — Thu, 04 Nov 2021 04:15:31 GMT

Good evening, sorry to bring up an old post, but how did you manager to shrink the log volume? We are on R81 (hardware appliance) and lvm manager only allows increasing the volume sizes. Thanks!

Re: Upgrade Mgmt R80.10 to R80.20

PhoneBoy — Thu, 04 Nov 2021 04:42:02 GMT

The default filesystem now is XFS, which does not allow shrinking file systems, only growing them.
The only way to shrink a partition now is a format/reinstall from USB.