cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Olga_Kuts
Silver

Hotfix export from cli

Is it possible to export hotfix package from cli? Hotfix is already installed.

8 Replies
Danny
Pearl

Re: Hotfix export from cli

It depends. You can search for it on your system in expert mode with the find command. If it wasn't deleted yet you can surely export it via scp.

0 Kudos

Re: Hotfix export from cli

I think Dannys answer is valid as well for legacy HFs as for CPUSE HFs. In sk92449 Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent we find that:

A package that was already downloaded / installed, can be exported from this Gaia machine for backup purposes, or to be transferred to another Gaia machine (for example, if another Gaia machine is disconnected from the Internet):

Note: Currently, this operation is available only in Gaia Portal.

Highlighted
Olga_Kuts
Silver

Re: Hotfix export from cli

It is sad, because we use VSX gateways... So, Gaia Portal is not available.

0 Kudos
Jerry
Platinum

Re: Hotfix export from cli

you can find your hotfixes by CLI in following directory on vs0 (core) VS

/var/log/CPda/repository/tmp/

search for them in  that directory or ...

/var/log/CPda/repository/

let us know if that helps Smiley Happy 

Jerry

Jerry
0 Kudos
Jerry
Platinum

Re: Hotfix export from cli

I've got them here in respective directory ie.

[Expert@vs0:0]# ls -l
total 36
drwx------  2 admin root 4096 Oct 25  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_CPINFO#T33
drwx------  2 admin root 4096 Aug 16 23:14 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JHF_121_SMACK_626#3
drwx------  2 admin root 4096 Jul 17 11:58 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#112
drwx------  2 admin root 4096 Aug  7 13:48 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#121
drwx------  2 admin root 4096 Aug 23  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#24
drwx------  2 admin root 4096 Sep 14  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#40
drwx------  2 admin root 4096 Oct  9  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#42
drwx------  2 admin root 4096 Jul 23 09:23 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF_SC#124
drwx------ 25 admin root 4096 Aug 16 23:13 tmp

Jerry
0 Kudos

Re: Hotfix export from cli

I like Dannys method most - for e.g. a list of R77.30 Jumbos, just issue:

[Expert] # find / -name "*FULL.tgz"


/var/log/CPda/repository/CheckPoint#CPUpdates#All#6.0#4#0#BUNDLE_R77_30_JUMBO_HF#322/Check_Point_R77_30_JUMBO_HF_1_Bundle_T322_FULL.tgz
/var/log/CPda/repository/CheckPoint#cvpn#All#6.0#4#0#HOTFIX_MABDA_J266_004/Check_Point_R77_30_jhf_T266_MABDA_sk113410_FULL.tgz
/var/log/CPda/repository/CheckPoint#fw1#All#6.0#4#0#HOTFIX_R7730_JHF_T266_792/fw1_wrapper_HOTFIX_R7730_JHF_T266_792_GA_FULL.tgz

Now point WinSCP to the /var/log/CPda/repository/ directory and transfer what you need Smiley Happy !

0 Kudos
Admin
Admin

Re: Hotfix export from cli

This isn't quite correct.

From my gateway:

[Expert@GW:0]# md5sum Check_Point_CPinfo_R80.x_T33_B182.tgz 
b9df390fa51d55e69ebf4b2107f8ce55  Check_Point_CPinfo_R80.x_T33_B182.tgz
[Expert@GW:0]# tar tvfz Check_Point_CPinfo_R80.x_T33_B182.tgz
drwxr-xr-x builder/fw        0 2017-09-30 23:16:34 CPinfo/
-rw-r--r-- builder/fw  4235747 2017-09-28 06:09:53 CPinfo/CPinfo-10-00.i386.rpm
-rw-r--r-- builder/fw      393 2017-09-30 23:16:30 CPinfo/cpinfo_signature
-rw-r--r-- builder/fw       52 2017-09-30 23:16:34 CPinfo/package.info
-rw-r--r-- builder/fw     1195 2017-06-15 07:26:38 bundle.xml
-rw-r--r-- builder/fw      117 2017-09-30 23:16:34 hf.config
drwxr-xr-x builder/fw        0 2017-06-15 07:26:38 scripts/
-rwxr-xr-x builder/fw     5174 2017-06-15 07:26:38 scripts/InstallCPinfo.sh
-rw-r--r-- builder/fw        8 2017-09-30 23:16:34 take_number.conf

I downloaded the same package from my WebUI:

mac:Downloads dwelch$ md5 Check_Point_CPinfo_R80.x_T33_B182.tar 
MD5 (Check_Point_CPinfo_R80.x_T33_B182.tar) = aa4aff09e4afab943fe1b815a3cd4162
mac:Downloads dwelch$ tar tvf Check_Point_CPinfo_R80.x_T33_B182.tar
-rw-rw-r--  0 admin  root      837 Aug 30 09:21 Check_Point_CPinfo_R80.x_T33_B182_METADATA.tgz
-rw-rw-r--  0 admin  root  4216701 Oct 29  2017 Check_Point_CPinfo_R80.x_T33_B182.tgz

Clearly these files are different.

Perhaps there is a way to reconstruct it based on what's on the gateway, but you're probably better off just downloading the offline version of the relevant package from UserCenter. 

0 Kudos

Re: Hotfix export from cli

Yes, i know the difference - the stored .tgz are the ones downloaded by CPUSE, we can call it the online version. If exported from WebGUI, it will be stored as *.tar, call it offline version. Importing it again works with both .tar and .tgz - so a copy with WinSCP does not hurt at all...