topic Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image in Panorama Discussions

Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

staltari — Tue, 11 Oct 2022 08:17:01 GMT

Hi all,

last time I tryed to upgrade my Panorama, I had this error: "Label sysroot1 does not indicate a valid image".

The panorama is working, also I'm able to upload images and content to managed firewall, only I cant upgrade itself.

Is not related with upgrade image because is unable to reinstall also the currently installed image.

I already checked images in mantainance mode.

Any suggestion?

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

staltari — Mon, 07 Nov 2022 07:08:48 GMT

No way to fix that VM, trown away.

I had to create a new VM and copied the configuration on.

No problem to move license, you just set the same serial number and activate.

All PanOS 10.1 managed NGFWs were reconected automatically, PanOS 10.2 managed firewalls not. I had to push a new Auth-key to reconnect PanOS 10.2 firewalls.

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

Charlie_A — Wed, 13 Mar 2024 09:15:20 GMT

Hi .

Anyone resolved this issue?

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

W_Rafalski — Wed, 13 Mar 2024 19:36:20 GMT

Hi,

I had this problem today. I tried to upgrade virtual panorama with PanOS 11.0.3 -> 11.0.3-h5.
I think error have connection with try of uploading wrong image type in the past. I found such info in logs. However now, I have only proper images. I couldn’t reinstall 11.0 or any of it’s patches from Web as well as from CLI.

So … 🙂

I requested device to boot maintenance mode, chosen imges, had no image to revert, chosen advanced (MA1NT password). Then chosen other partition than were listed in error and bootstraped it with 11.0.0. After that reboot device useing newly installed PanOS.
That solved problem. I patched system with use of Web interface.

I hope it will help you.

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

W_Rafalski — Wed, 13 Mar 2024 19:55:59 GMT

Hi,

I had this problem today when I tried to upgrade virtual Panorama with PAN-OS 11.0.3 to 11.0.3-h5. I tried to reinstall 11.0.3, downgrade to 11.0.0 from Web and CLI, but nothing helped.

I think problem have connection with try of uploading wrong PAN-OS image in the past. I found such info in logs.

so I decided to:

1. reboot device to (my favorite 😉 ) maintenance mode;

2. choose images;

3. try revert to 11.0.0

but I had "no image to revert"

so:

1. I opened "advanced" in "image" (password MA1NT)

2. checked other partition than was listed in my error,

3. checked image 11.0.0 and bootstrapped this partition

4. rebooted device to newly installed 11.0.0

5. installed patch 11.0.3-h5 from web.

That solved the case 🙂 I hope it will help you too.

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

Charlie_A — Thu, 14 Mar 2024 01:20:05 GMT

Hi,

Thank you for your reply. My case is Panorama appliance M Series. Do you think all above steps can work in physical appliance also? Anyway let me see and try.

Appreciate for your answer.

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

W_Rafalski — Thu, 14 Mar 2024 07:28:34 GMT

I think in such situation shouldn't be differences between form factors (physical - virtual), so you should try do this. Remember to do configuration backup before operation and be sure you uploaded proper and clean base image.

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

SIT_Redes — Thu, 18 Apr 2024 10:21:52 GMT

Hi I have the same issue, but in this case, for "Label sysroot0". Panorama doesn't detect the version of the firmware in Label syroot0 and Label sysroot1, so in maintenance mode, we cannot upload any version. As I can see, the issue it's for uploading a PAN-220 image.

I test to install a 11.0.0 version and a 10.0.0 without sucess. Actually, we have a 10.2.6 version of Panorama.

What could we do?

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

W_Rafalski — Thu, 18 Apr 2024 10:33:14 GMT

If I understand it correctly, you can't bootstrap any of partition with clear, base image ? What is the resulat of such try ?

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

SIT_Redes — Thu, 18 Apr 2024 10:39:52 GMT

The one I attached in the screenshot. In maintenance mode we do not even have the option to select any type of version even though it is loaded.

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

SIT_Redes — Thu, 18 Apr 2024 17:37:34 GMT

To complement the information a little more, I attach some screenshots in maintenance mode. I was thinking that, in the first screenshots that I have attached, it looks like when installing an image from a different platform, I think it generates it in a path. Is there an option to enter Linux mode and delete that temporary file, or directly delete all the temporary files that the system can create?

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

W_Rafalski — Thu, 18 Apr 2024 12:21:31 GMT

I don't think so that anyone will allow you to reach unix layer of OS. In my opinion deleting all uploaded software will not resolve the issue as well. I will ask you once again, did you try to:

1. I opened "advanced" in "image" (password MA1NT)

2. checked other partition than was listed in my error,

3. checked image 11.0.0 and bootstrapped this partition

4. rebooted device to newly installed 11.0.0

"
????

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

SIT_Redes — Thu, 18 Apr 2024 17:41:23 GMT

Hello, good afternoon, I appreciate the help you are offering me. Yes, we have tried loading it from another partition without success. In both the sysroot0, sysroot1 and maint partitions, none of them load any type of version. They all tell us that there is no version. If I bootstrap, all it does is take me out of the SSH session opened by CLI and I have to log in again without any changes.

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

W_Rafalski — Fri, 19 Apr 2024 06:08:24 GMT

Unfortunatelly, once I've seen such hard case as well. I think that you should not wait any longer and open a case in TAC. Because it's hardware be prepared for RMA procedure. Good luck !

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

Charlie_A — Fri, 19 Apr 2024 06:16:34 GMT

The only resolution is just do factory reset to firewall. You should have config backup files. Then take maintenance window (downtime) and do the factory reset. Previously my colleague opened the case to TAC and factory reset is the solution to resolve this issue. Hope everyone ok.

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

SIT_Redes — Fri, 19 Apr 2024 08:11:33 GMT

Okay, thank you so much for the help, guys!

Re: Panorama fails to upgrade itself with error: Label sysroot1 does not indicate a valid image

msyeedrafiqi — Fri, 19 Apr 2024 08:11:41 GMT

Factory Reset is not going to help if you go into maintenance mode and check the status of the disk you will see it a empty. You can try the below document to bootstrap the version install it in the sysroot1 partition.
If the document does not help just take the backup and deploy a new VM.
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClLjCAK