Hotfix export from cli

[Olga_Kuts]

Is it possible to export hotfix package from cli? Hotfix is already installed.

[Danny]

It depends. You can search for it on your system in expert mode with the find command. If it wasn't deleted yet you can surely export it via scp.

[G_W_Albrecht]

I think Dannys answer is valid as well for legacy HFs as for CPUSE HFs. In sk92449 Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent we find that:

A package that was already downloaded / installed, can be exported from this Gaia machine for backup purposes, or to be transferred to another Gaia machine (for example, if another Gaia machine is disconnected from the Internet):

Note: Currently, this operation is available only in Gaia Portal.

[Olga_Kuts]

It is sad, because we use VSX gateways... So, Gaia Portal is not available.

[Jerry]

you can find your hotfixes by CLI in following directory on vs0 (core) VS

/var/log/CPda/repository/tmp/

search for them in  that directory or ...

/var/log/CPda/repository/

let us know if that helps  

Jerry

[Jerry]

I've got them here in respective directory ie.

[Expert@vs0:0]# ls -l
total 36
drwx------  2 admin root 4096 Oct 25  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_CPINFO#T33
drwx------  2 admin root 4096 Aug 16 23:14 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JHF_121_SMACK_626#3
drwx------  2 admin root 4096 Jul 17 11:58 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#112
drwx------  2 admin root 4096 Aug  7 13:48 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#121
drwx------  2 admin root 4096 Aug 23  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#24
drwx------  2 admin root 4096 Sep 14  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#40
drwx------  2 admin root 4096 Oct  9  2017 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF#42
drwx------  2 admin root 4096 Jul 23 09:23 CheckPoint#CPUpdates#All#6.0#4#8#BUNDLE_R80_10_JUMBO_HF_SC#124
drwx------ 25 admin root 4096 Aug 16 23:13 tmp

[G_W_Albrecht]

I like Dannys method most - for e.g. a list of R77.30 Jumbos, just issue:

[Expert] # find / -name "*FULL.tgz"

/var/log/CPda/repository/CheckPoint#CPUpdates#All#6.0#4#0#BUNDLE_R77_30_JUMBO_HF#322/Check_Point_R77_30_JUMBO_HF_1_Bundle_T322_FULL.tgz
/var/log/CPda/repository/CheckPoint#cvpn#All#6.0#4#0#HOTFIX_MABDA_J266_004/Check_Point_R77_30_jhf_T266_MABDA_sk113410_FULL.tgz
/var/log/CPda/repository/CheckPoint#fw1#All#6.0#4#0#HOTFIX_R7730_JHF_T266_792/fw1_wrapper_HOTFIX_R7730_JHF_T266_792_GA_FULL.tgz

Now point WinSCP to the /var/log/CPda/repository/ directory and transfer what you need  !

[PhoneBoy]

This isn't quite correct.

From my gateway:

[Expert@GW:0]# md5sum Check_Point_CPinfo_R80.x_T33_B182.tgz 
b9df390fa51d55e69ebf4b2107f8ce55  Check_Point_CPinfo_R80.x_T33_B182.tgz
[Expert@GW:0]# tar tvfz Check_Point_CPinfo_R80.x_T33_B182.tgz 
drwxr-xr-x builder/fw        0 2017-09-30 23:16:34 CPinfo/
-rw-r--r-- builder/fw  4235747 2017-09-28 06:09:53 CPinfo/CPinfo-10-00.i386.rpm
-rw-r--r-- builder/fw      393 2017-09-30 23:16:30 CPinfo/cpinfo_signature
-rw-r--r-- builder/fw       52 2017-09-30 23:16:34 CPinfo/package.info
-rw-r--r-- builder/fw     1195 2017-06-15 07:26:38 bundle.xml
-rw-r--r-- builder/fw      117 2017-09-30 23:16:34 hf.config
drwxr-xr-x builder/fw        0 2017-06-15 07:26:38 scripts/
-rwxr-xr-x builder/fw     5174 2017-06-15 07:26:38 scripts/InstallCPinfo.sh
-rw-r--r-- builder/fw        8 2017-09-30 23:16:34 take_number.conf

I downloaded the same package from my WebUI:

mac:Downloads dwelch$ md5 Check_Point_CPinfo_R80.x_T33_B182.tar 
MD5 (Check_Point_CPinfo_R80.x_T33_B182.tar) = aa4aff09e4afab943fe1b815a3cd4162
mac:Downloads dwelch$ tar tvf Check_Point_CPinfo_R80.x_T33_B182.tar 
-rw-rw-r--  0 admin  root      837 Aug 30 09:21 Check_Point_CPinfo_R80.x_T33_B182_METADATA.tgz
-rw-rw-r--  0 admin  root  4216701 Oct 29  2017 Check_Point_CPinfo_R80.x_T33_B182.tgz

Clearly these files are different.

Perhaps there is a way to reconstruct it based on what's on the gateway, but you're probably better off just downloading the offline version of the relevant package from UserCenter. 

[G_W_Albrecht]

Yes, i know the difference - the stored .tgz are the ones downloaded by CPUSE, we can call it the online version. If exported from WebGUI, it will be stored as *.tar, call it offline version. Importing it again works with both .tar and .tgz - so a copy with WinSCP does not hurt at all...