topic Re: no space to upgrade to R81.20 in General Topics

no space to upgrade to R81.20

Vega — Thu, 19 Oct 2023 14:15:07 GMT

Hello guys,

I tried to upgrade checkpoint to R81.20. But I Verify the update packages, It shows there is not enough disk space to upgrade.
I check the disk in terminal, how should I clean the disk to upgrade safety?

another question is

should I keep the security gateway and open server at the same version?
Is it ok if I only upgrade open server to R81.20? or there will be a problem to device?

thanks for your help 🙂

Re: no space to upgrade to R81.20

G_W_Albrecht — Thu, 19 Oct 2023 14:37:48 GMT

First: Check GAiA WebGUI of the GW for partition details ! Looks like logs are using much space, they should be on the SMS. You could also save the GAiA config and do a fresh install.

Another: No problem with R81.20 SMS for R81.10 GWs. But i would wait a little more time with changing to R81.20.

Re: no space to upgrade to R81.20

the_rock — Thu, 19 Oct 2023 14:49:37 GMT

You can try something like below:

find /var/log -size +500000000c

That will look for any files bigger than 500 MBs in /var/log and you can delete whats safe to remove

Andy

Re: no space to upgrade to R81.20

Vega — Thu, 19 Oct 2023 14:50:48 GMT

Thanks for your answer.
How can I export these log to SMS or another place with Gaia WebGUI? Or use CLI command?

Re: no space to upgrade to R81.20

the_rock — Thu, 19 Oct 2023 14:52:32 GMT

Just winscp into the appliance and then download the files.

Andy

Re: no space to upgrade to R81.20

PhoneBoy — Thu, 19 Oct 2023 21:06:54 GMT

https://support.checkpoint.com/results/sk/sk63361
You can use scp/sftp to copy the files somewhere else.

Re: no space to upgrade to R81.20

CheckPointerXL — Fri, 20 Oct 2023 14:13:37 GMT

tip for lazy people:

find /var/log -size +500M

🤣

Re: no space to upgrade to R81.20

the_rock — Fri, 20 Oct 2023 14:21:22 GMT

True that 😂

Re: no space to upgrade to R81.20

Vega — Tue, 24 Oct 2023 06:21:25 GMT

Thank you for your answers. I tried to use the command "find /var/log -size +500M" to find the relevant files, but there were too many, and I couldn't display all the results in CLI mode. I also tried to adjust the window size, but I still couldn't. As a result, I couldn't use WinSCP to find all the relevant files and export them or perform other operations.

How can I adjust the window size or move the CLI screen?

Also, are these files over 500M safe to export or Delete?
According to the official instructions provided by PhoneBoy, It seems I need to contact technical support. However, I am unable to do so at this time for some reason.
I am afraid of damaging the firewall. I would like to ask about it first. Thank you.

Re: no space to upgrade to R81.20

G_W_Albrecht — Tue, 24 Oct 2023 07:34:41 GMT

Use PuTTY and not a GAIA CLI window that can not be resizerd ! Please also follow the old CP advice: Do not delete folders/directories, only files that you surely know can be deleted. That would include installation files (.tgz), logs & co. Still this is dangerous territory and only makes real sense on the SMS. After export of GAiA settings, GWs can be freshly installed, FTW, settings imported and policy installed - no need to delete any files...

I still do not understand why you need to upgrade at all - R81.10 is a good version, so if you do not need some new feature so badly that you are ready to put much work in it, just stay...

Re: no space to upgrade to R81.20

CheckPointerXL — Tue, 24 Oct 2023 09:24:37 GMT

Findd /var/log -size +500M | xargs ls -lhars

To sort by size the output

Re: no space to upgrade to R81.20

Vega — Tue, 24 Oct 2023 13:10:45 GMT

My client has installed SmartConsole, so he can also see the update information. However, I need to plan in advance how to proceed if he wants to update to meet his needs.
This firewall was previously set up by other IT staff who worked with my client, but I have never had any experience with any Checkpoint products in the past.
Thank you for your advice. I am also trying to find more suggestions to convince my client that staying on R81.10 is less likely to cause problems.

Re: no space to upgrade to R81.20

the_rock — Tue, 24 Oct 2023 13:22:25 GMT

I would not say all of them are safe to delete, but please generate backup at least (and snapshot if possible), so you can revert if anything was to happen with the database.

Andy

Re: no space to upgrade to R81.20

Bob_Zimmerman — Tue, 24 Oct 2023 15:26:07 GMT

Snapshots only cover data in lv_current, not in lv_log (mounted as /var/log).

On the plus side, it's safe to delete almost anything in /var/log. Worst case, something like logging breaks until you reboot. This is why it isn't saved in snapshots.

Re: no space to upgrade to R81.20

G_W_Albrecht — Wed, 25 Oct 2023 11:56:25 GMT

I have received the statement that it is suggested to stay on R81.10 until open bugs in R81.20 are resolved in a new Jumbo from a CheckPoint engineer on phone.