topic Re: Hotfix export from cli in General Topics

Hotfix export from cli

Olga_Kuts — Thu, 30 Aug 2018 07:46:46 GMT

Is it possible to export hotfix package from cli? Hotfix is already installed.

Re: Hotfix export from cli

Danny — Thu, 30 Aug 2018 08:28:08 GMT

It depends. You can search for it on your system in expert mode with the find command. If it wasn't deleted yet you can surely export it via scp.

Re: Hotfix export from cli

G_W_Albrecht — Thu, 30 Aug 2018 10:33:47 GMT

I think Dannys answer is valid as well for legacy HFs as for CPUSE HFs. In sk92449 Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent we find that:

A package that was already downloaded / installed, can be exported from this Gaia machine for backup purposes, or to be transferred to another Gaia machine (for example, if another Gaia machine is disconnected from the Internet):

Note: Currently, this operation is available only in Gaia Portal.

Re: Hotfix export from cli

Olga_Kuts — Thu, 30 Aug 2018 10:41:14 GMT

It is sad, because we use VSX gateways... So, Gaia Portal is not available.

Re: Hotfix export from cli

Jerry — Thu, 30 Aug 2018 12:03:05 GMT

you can find your hotfixes by CLI in following directory on vs0 (core) VS

/var/log/CPda/repository/tmp/

search for them in that directory or ...

/var/log/CPda/repository/

let us know if that helps

Jerry

Re: Hotfix export from cli

Jerry — Thu, 30 Aug 2018 12:04:26 GMT

I've got them here in respective directory ie.

[Expert@vs0:0]# ls -l
total 36
drwx------ 2 admin root 4096 Oct 25 2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_CPINFO#T33
drwx------ 2 admin root 4096 Aug 16 23:14 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JHF_121_SMACK_626#3
drwx------ 2 admin root 4096 Jul 17 11:58 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#112
drwx------ 2 admin root 4096 Aug 7 13:48 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#121
drwx------ 2 admin root 4096 Aug 23 2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#24
drwx------ 2 admin root 4096 Sep 14 2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#40
drwx------ 2 admin root 4096 Oct 9 2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#42
drwx------ 2 admin root 4096 Jul 23 09:23 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF_SC#124
drwx------ 25 admin root 4096 Aug 16 23:13 tmp

Re: Hotfix export from cli

G_W_Albrecht — Thu, 30 Aug 2018 13:40:26 GMT

I like Dannys method most - for e.g. a list of R77.30 Jumbos, just issue:

[Expert] # find / -name "*FULL.tgz"

/var/log/CPda/repository/CheckPoint#CPUpdates#All#6.0#4#0#BUNDLE_R77_30_JUMBO_HF#322/Check_Point_R77_30_JUMBO_HF_1_Bundle_T322_FULL.tgz
/var/log/CPda/repository/CheckPoint#cvpn#All#6.0#4#0#HOTFIX_MABDA_J266_004/Check_Point_R77_30_jhf_T266_MABDA_sk113410_FULL.tgz
/var/log/CPda/repository/CheckPoint#fw1#All#6.0#4#0#HOTFIX_R7730_JHF_T266_792/fw1_wrapper_HOTFIX_R7730_JHF_T266_792_GA_FULL.tgz

Now point WinSCP to the /var/log/CPda/repository/ directory and transfer what you need !

Re: Hotfix export from cli

PhoneBoy — Thu, 30 Aug 2018 16:39:02 GMT

This isn't quite correct.

From my gateway:

[Expert@GW:0]# md5sum Check_Point_CPinfo_R80.x_T33_B182.tgz 
b9df390fa51d55e69ebf4b2107f8ce55  Check_Point_CPinfo_R80.x_T33_B182.tgz
[Expert@GW:0]# tar tvfz Check_Point_CPinfo_R80.x_T33_B182.tgz 
drwxr-xr-x builder/fw        0 2017-09-30 23:16:34 CPinfo/
-rw-r--r-- builder/fw  4235747 2017-09-28 06:09:53 CPinfo/CPinfo-10-00.i386.rpm
-rw-r--r-- builder/fw      393 2017-09-30 23:16:30 CPinfo/cpinfo_signature
-rw-r--r-- builder/fw       52 2017-09-30 23:16:34 CPinfo/package.info
-rw-r--r-- builder/fw     1195 2017-06-15 07:26:38 bundle.xml
-rw-r--r-- builder/fw      117 2017-09-30 23:16:34 hf.config
drwxr-xr-x builder/fw        0 2017-06-15 07:26:38 scripts/
-rwxr-xr-x builder/fw     5174 2017-06-15 07:26:38 scripts/InstallCPinfo.sh
-rw-r--r-- builder/fw        8 2017-09-30 23:16:34 take_number.conf

I downloaded the same package from my WebUI:

mac:Downloads dwelch$ md5 Check_Point_CPinfo_R80.x_T33_B182.tar 
MD5 (Check_Point_CPinfo_R80.x_T33_B182.tar) = aa4aff09e4afab943fe1b815a3cd4162
mac:Downloads dwelch$ tar tvf Check_Point_CPinfo_R80.x_T33_B182.tar 
-rw-rw-r--  0 admin  root      837 Aug 30 09:21 Check_Point_CPinfo_R80.x_T33_B182_METADATA.tgz
-rw-rw-r--  0 admin  root  4216701 Oct 29  2017 Check_Point_CPinfo_R80.x_T33_B182.tgz

Clearly these files are different.

Perhaps there is a way to reconstruct it based on what's on the gateway, but you're probably better off just downloading the offline version of the relevant package from UserCenter.

Re: Hotfix export from cli

G_W_Albrecht — Fri, 31 Aug 2018 07:20:10 GMT

Yes, i know the difference - the stored .tgz are the ones downloaded by CPUSE, we can call it the online version. If exported from WebGUI, it will be stored as *.tar, call it offline version. Importing it again works with both .tar and .tgz - so a copy with WinSCP does not hurt at all...