topic Re: cleanup gateway gateway repositories from sms? (using cdt?) in Firewall and Security Management

cleanup gateway gateway repositories from sms? (using cdt?)

Vincent_Bacher — Wed, 08 Aug 2018 13:30:59 GMT

Hi mates,

i am just installing jumbo hotfix and a private hofix bundle to a list of many gateways using cdt.
That means i am uninstalling the private bundle for the old hotfix take, installing new jumbo and installing new private take.
So far so good.
After successfully doing this job, the old jumbo and old private bundle remain in the gateway repositories.
I just can uninstall the packages using cdt but apparently not delete them.
I know there is a sk regarding cleanup of old installation directories but i do not find anything regarding cleanup of old repository packages.
Any idea how to centralized do that?

Best regards
Vincent

Re: cleanup gateway gateway repositories from sms? (using cdt?)

Eliran_Levi — Thu, 09 Aug 2018 10:11:19 GMT

Hi Vincent,

You can use the following clish command to delete a packge using CPUSE: clish -c 'installer delete <package_name> not-interactive'

You can incorporate the above command into CDT via "execute_command" or "execute_script" actions.

CDT will not check for any success/failure. However, you can add additional logic to the script (after sleep for a few minutes) to verify the file deletion.

Let me know if you need any help.

Re: cleanup gateway gateway repositories from sms? (using cdt?)

Vincent_Bacher — Thu, 09 Aug 2018 12:27:47 GMT

Hello Eliran,

thanks a lot.
Well, i'll play a bit around

Re: cleanup gateway gateway repositories from sms? (using cdt?)

Tsahi_Etziony — Thu, 09 Aug 2018 14:41:55 GMT

Vincent,

Please let us know if Eliran's suggested solution works for you. I think that this use case can be common enough for us to add this as a new action for the deployment plan.

We'll add this to one of the next versions.

Re: cleanup gateway gateway repositories from sms? (using cdt?)

Vincent_Bacher — Fri, 10 Aug 2018 09:35:40 GMT

Hi Tshahi,
it will work, i think so. I will have to write a script to check current installed release/hotfixes and check which older/unused packets still reside in the repository and then to delete them using cpuse.
Don't know how to realize that but it's not really urgent
Thanks
Vincent