Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Olga_Kuts
Advisor

Hotfix export from cli

Is it possible to export hotfix package from cli? Hotfix is already installed.

8 Replies
Danny
Champion Champion
Champion

It depends. You can search for it on your system in expert mode with the find command. If it wasn't deleted yet you can surely export it via scp.

0 Kudos
G_W_Albrecht
Legend
Legend

I think Dannys answer is valid as well for legacy HFs as for CPUSE HFs. In sk92449 Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent we find that:

A package that was already downloaded / installed, can be exported from this Gaia machine for backup purposes, or to be transferred to another Gaia machine (for example, if another Gaia machine is disconnected from the Internet):

Note: Currently, this operation is available only in Gaia Portal.

CCSE CCTE CCSM SMB Specialist
Olga_Kuts
Advisor

It is sad, because we use VSX gateways... So, Gaia Portal is not available.

0 Kudos
Jerry
Mentor
Mentor

you can find your hotfixes by CLI in following directory on vs0 (core) VS

/var/log/CPda/repository/tmp/

search for them in  that directory or ...

/var/log/CPda/repository/

let us know if that helps Smiley Happy 

Jerry

Jerry
0 Kudos
Jerry
Mentor
Mentor

I've got them here in respective directory ie.

[Expert@vs0:0]# ls -l
total 36
drwx------  2 admin root 4096 Oct 25  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_CPINFO#T33
drwx------  2 admin root 4096 Aug 16 23:14 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JHF_121_SMACK_626#3
drwx------  2 admin root 4096 Jul 17 11:58 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#112
drwx------  2 admin root 4096 Aug  7 13:48 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#121
drwx------  2 admin root 4096 Aug 23  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#24
drwx------  2 admin root 4096 Sep 14  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#40
drwx------  2 admin root 4096 Oct  9  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#42
drwx------  2 admin root 4096 Jul 23 09:23 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF_SC#124
drwx------ 25 admin root 4096 Aug 16 23:13 tmp

Jerry
0 Kudos
G_W_Albrecht
Legend
Legend

I like Dannys method most - for e.g. a list of R77.30 Jumbos, just issue:

[Expert] # find / -name "*FULL.tgz"


/var/log/CPda/repository/CheckPoint#CPUpdates#All#6.0#4#0#BUNDLE_R77_30_JUMBO_HF#322/Check_Point_R77_30_JUMBO_HF_1_Bundle_T322_FULL.tgz
/var/log/CPda/repository/CheckPoint#cvpn#All#6.0#4#0#HOTFIX_MABDA_J266_004/Check_Point_R77_30_jhf_T266_MABDA_sk113410_FULL.tgz
/var/log/CPda/repository/CheckPoint#fw1#All#6.0#4#0#HOTFIX_R7730_JHF_T266_792/fw1_wrapper_HOTFIX_R7730_JHF_T266_792_GA_FULL.tgz

Now point WinSCP to the /var/log/CPda/repository/ directory and transfer what you need Smiley Happy !

CCSE CCTE CCSM SMB Specialist
0 Kudos
PhoneBoy
Admin
Admin

This isn't quite correct.

From my gateway:

[Expert@GW:0]# md5sum Check_Point_CPinfo_R80.x_T33_B182.tgz 
b9df390fa51d55e69ebf4b2107f8ce55  Check_Point_CPinfo_R80.x_T33_B182.tgz
[Expert@GW:0]# tar tvfz Check_Point_CPinfo_R80.x_T33_B182.tgz
drwxr-xr-x builder/fw        0 2017-09-30 23:16:34 CPinfo/
-rw-r--r-- builder/fw  4235747 2017-09-28 06:09:53 CPinfo/CPinfo-10-00.i386.rpm
-rw-r--r-- builder/fw      393 2017-09-30 23:16:30 CPinfo/cpinfo_signature
-rw-r--r-- builder/fw       52 2017-09-30 23:16:34 CPinfo/package.info
-rw-r--r-- builder/fw     1195 2017-06-15 07:26:38 bundle.xml
-rw-r--r-- builder/fw      117 2017-09-30 23:16:34 hf.config
drwxr-xr-x builder/fw        0 2017-06-15 07:26:38 scripts/
-rwxr-xr-x builder/fw     5174 2017-06-15 07:26:38 scripts/InstallCPinfo.sh
-rw-r--r-- builder/fw        8 2017-09-30 23:16:34 take_number.conf

I downloaded the same package from my WebUI:

mac:Downloads dwelch$ md5 Check_Point_CPinfo_R80.x_T33_B182.tar 
MD5 (Check_Point_CPinfo_R80.x_T33_B182.tar) = aa4aff09e4afab943fe1b815a3cd4162
mac:Downloads dwelch$ tar tvf Check_Point_CPinfo_R80.x_T33_B182.tar
-rw-rw-r--  0 admin  root      837 Aug 30 09:21 Check_Point_CPinfo_R80.x_T33_B182_METADATA.tgz
-rw-rw-r--  0 admin  root  4216701 Oct 29  2017 Check_Point_CPinfo_R80.x_T33_B182.tgz

Clearly these files are different.

Perhaps there is a way to reconstruct it based on what's on the gateway, but you're probably better off just downloading the offline version of the relevant package from UserCenter. 

0 Kudos
G_W_Albrecht
Legend
Legend

Yes, i know the difference - the stored .tgz are the ones downloaded by CPUSE, we can call it the online version. If exported from WebGUI, it will be stored as *.tar, call it offline version. Importing it again works with both .tar and .tgz - so a copy with WinSCP does not hurt at all...

CCSE CCTE CCSM SMB Specialist

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events