topic Re: PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3 in General Topics

PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

MotokiIshii — Fri, 15 Mar 2024 04:07:10 GMT

Hi guys,

I was trying to upgrade PA440 on my lab but it was failed. (10.1.8 -> 10.2.7-h3)

The following message was output.

Operation Download

Status Completed

Result Failed

Details

Successfully downloaded

Preloading into software manager

Traceback (most recent call last):

File "/usr/local/bin/swminternal", line 18, in <module>

swmmain.main(sys.argv[1:])

File "/usr/share/pan-swm/swmmain.py", line 103, in main

UI.runCommand(H)

File "/usr/share/pan-swm/swmcli.py", line 278, in runCommand

cmd(self.extcmds)

File "/usr/share/pan-swm/swmcli.py", line 426, in do_load

swm.swmRepository(self).load(args, not self.options['nocrypt'])

File "/usr/lib64/python3.6/site-packages/swm/repo.py", line 413, in load

self.ensure_freespace_step1(data)

File "/usr/lib64/python3.6/site-packages/swm/repo.py", line 300, in ensure_freespace_step1

for img in self.redundant_bases():

File "/usr/lib64/python3.6/site-packages/swm/repo.py", line 190, in redundant_bases

images.sort(reverse=True)

File "/usr/lib64/python3.6/site-packages/swm/image.py", line 66, in __lt__

return self.release_info['date'] < obj.release_info['date']

TypeError: '<' not supported between instances of 'datetime.datetime' and 'str'

Failed to load into software manager. Please retry.

Post processing failed. Please retry.

And I tried installing 10.2.0 as a trial, and it worked,

so I tried upgrading from 10.2.0 to 10.2.7-h3, but the same message was output and it didn't work.

I downloaded the software from Paloalto using "Check now" and "Download".

I checked PA's clock, License, Configuration(only I setup MGMTIF), and BaseOS Download.

I gave up and tried to revert to the original version of 10.1.8,

but this time the following message was output and I was unable to revert.

(I used auto-config as the configuration to specify when downgrading the version.)

Failed to install 10.1.8 with the following errors.
SW version is 10.1.8
Nothing pending to cancel
Error: Traceback (most recent call last):
File "/opt/panrepo/sysroot0/validateold", line 109, in <module>
ok,err_list, pl_updates = validate_plugin.plugin_sw_migration_check(old_version, new_version)
ValueError: not enough values to unpack (expected 3, got 2)
Failed to install version 10.1.8 type panos

How can do I fix..?

Regards

Re: PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

BPry — Fri, 15 Mar 2024 20:50:53 GMT

@MotokiIshii,

Your install seems fundamentally messed up with what it's displaying. If you run 'debug swm status' check and see if your opposite sysroot is revertible and what the version indicated is. If I followed your post properly you should just be able to revert via the 'debug swm revert' command and end back at 10.1.8 on the other partition.

Re: PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

MotokiIshii — Mon, 18 Mar 2024 05:11:41 GMT

@BPry ,

Thank you for your reply.

The execution result of "debug swm status" is shown below.

Partition State Version
--------------------------------------------------------------------------------
sysroot0 RUNNING-ACTIVE 10.2.0
sysroot1 REVERTABLE 10.1.11-h5
maint READY 10.2.0

So, if I execute 'debug swm revert', I can go back at 10.1.11-h5?

As I remember, it also failed when I reverted to 10.1.11-h5.

Re: PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

MotokiIshii — Mon, 18 Mar 2024 05:58:39 GMT

And this PA cannot show "debug swm list".

SWM, something's wrong?

>debug swm list

Server error : failed to execute command

Re: PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

M.Taher — Mon, 18 Mar 2024 07:02:28 GMT

Hi,

We had a similar issue, but with our VM. We just upgraded to version 11.0, and it did upgrade successfully. Everything is now working fine.

Re: PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

MotokiIshii — Mon, 18 Mar 2024 09:49:06 GMT

Hi, @M.Taher

You mean you faced the message I posted and failed upgrade (or downgrade) on PA-VM?

Then, how did you upgrade successfully?

Re: PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

M.Taher — Mon, 18 Mar 2024 09:59:52 GMT

Hi @MotokiIshii ,

we upgraded from 10.2

Re: PA440 Upgrade/Downgrade from 10.1.8 to 10.2.7-h3

hamzah_pinadi — Sat, 07 Sep 2024 06:19:38 GMT

Hi Pry,

My end I encounter the same issue too when trying to move from 10.1.12 to 10.2.10-H3; same thing I installed 10.2.0 as a trial and it works, but when i try to move to 10.2.10-H3 I get the same error as OP.

Any idea if we're able to move forward or this is a guaranteed revert + TAC case?