topic Re: show system disk-space in General Topics

show system disk-space

jdprovine — Tue, 04 Sep 2018 19:04:19 GMT

Is this information still correct for 7.1.16 , I am trying to plan my upgrdae from 7.1.16 to some version of 8 and trying to make sure I have enough space on the disk to do it

/dev/md6 - PAN-OS Image repository.(Device/Software)

/dev/md2 - Service related logs.

/dev/md8 - - Allocated for PAN logs.

/dev/md5 - Pan-OS configuration.

Re: show system disk-space

reaper — Tue, 04 Sep 2018 20:49:29 GMT

hi @jdprovine

This is true for the operating system so this file structure will likely remain identical for ever and ever and ever 😉

only way this would ever change this, is if we do something dramatic like release a new platform and then only that plaform will have a different structure

Re: show system disk-space

jdprovine — Wed, 05 Sep 2018 12:46:11 GMT

Hey @reaper

The reason I ask is because I had support login and free some disk-space and some time ago either your or bpry sent me that information describing what the different sections of the drive related too. So I am trying to make enough space so that I can comfortably upgrade to some version of 8. So I asked him if the section he cleaned up had anything to do with the upgrade of the OS and based on the information I was given it shouldn't, Which was mainly this /dev/md2, which I was told is the service related logs. I thought what matter for disk space concerning the OS upgrade was this /dev/md5 (Pan-OS configuration) and this /dev/md6 (PAN-OS Image repository) So I thought I would double check. I am not always certain that the TAC techs can understand me

Re: show system disk-space

BPry — Wed, 05 Sep 2018 13:37:09 GMT

@jdprovine,

dev/md2 can be important depending on what upgrade you are doing and whether or not you have to do a log conversion; which on this particular update everything will be updated due to PAN-OS 8 using a new format.

Re: show system disk-space

jdprovine — Wed, 05 Sep 2018 13:43:53 GMT

@BPry @reaper

This is what my diskspace is today

Filesystem Size Used Avail Use% Mounted on
/dev/md2 3.8G 2.9G 762M 80% /
/dev/md5 7.6G 3.6G 3.6G 50% /opt/pancfg
/dev/md6 3.8G 2.8G 830M 78% /opt/panrepo
tmpfs 2.0G 116M 1.9G 6% /dev/shm
cgroup_root 2.0G 0 2.0G 0% /cgroup
/dev/md8 198G 116G 72G 62% /opt/panlogs

This /dev/md2 has already gone from 78% to 80%

I have not yet discided what level of 8 to go to or when to upgrade, I am just doing the prep work

Re: show system disk-space

reaper — Wed, 05 Sep 2018 14:33:39 GMT

I highly recommend 8.0.10

80% on / is actually very good

Re: show system disk-space

reaper — Wed, 05 Sep 2018 15:01:05 GMT

@jdprovine wrote:

Hey @reaper

The reason I ask is because I had support login and free some disk-space and some time ago either your or bpry sent me that information describing what the different sections of the drive related too. So I am trying to make enough space so that I can comfortably upgrade to some version of 8. So I asked him if the section he cleaned up had anything to do with the upgrade of the OS and based on the information I was given it shouldn't, Which was mainly this /dev/md2, which I was told is the service related logs. I thought what matter for disk space concerning the OS upgrade was this /dev/md5 (Pan-OS configuration) and this /dev/md6 (PAN-OS Image repository) So I thought I would double check. I am not always certain that the TAC techs can understand me

-your /md2 is where the operating system lives, all the OS related files are kept there

the OS also stores it's most personal log files in that partition, which is why it tends to grow larger over time (get more full)

It's important that at least a little bit of space is left for your Operating System to do things: if md2 is 100% full an upgrade will fail because the OS does not have any more wiggle room to do anything

-when you go and install a new version, you may see that your system is going to mount md3 (this is the second 'sysvol'). Once the install is complete, and the system is rebooted, you will only see md3 and md2 will have been set dormant

Re: show system disk-space

jdprovine — Wed, 05 Sep 2018 18:56:05 GMT

@reaper

how come it went fomr 78 to 80% in less than 12 hours

Re: show system disk-space

jdprovine — Wed, 05 Sep 2018 18:57:08 GMT

@reaper

So is this information wrong?

/dev/md6 - PAN-OS Image repository.(Device/Software)

/dev/md2 - Service related logs.

/dev/md8 - - Allocated for PAN logs.

/dev/md5 - Pan-OS configuration.

Re: show system disk-space

reaper — Thu, 06 Sep 2018 12:16:39 GMT

@jdprovine wrote:

@reaper

how come it went fomr 78 to 80% in less than 12 hours

It's a small disk (1.9gigabytes), nothing to worry about.

@jdprovine wrote:

@reaper

So is this information wrong?

/dev/md6 - PAN-OS Image repository.(Device/Software)

/dev/md2 - Service related logs.

/dev/md8 - - Allocated for PAN logs.

/dev/md5 - Pan-OS configuration.

md2 is OperatingSystem and it's logs ('daemon' logs)

md5 is config, reports and content updates

md6 is the 'image repository' where software packages are kept before they get installed, or until deleted

md8 is the firewall LogDatabase

Re: show system disk-space

jdprovine — Thu, 06 Sep 2018 12:26:00 GMT

@reaper

So my information was wrong for md2

Re: show system disk-space

reaper — Thu, 06 Sep 2018 13:53:07 GMT

not wrong, incomplete 😉

Re: show system disk-space

jdprovine — Fri, 07 Sep 2018 12:45:39 GMT

@reaper

md2 is back up to 83% and will probably be back to 88% in a week, so any ideas why and if this can be slowed down?

Re: show system disk-space

BPry — Fri, 07 Sep 2018 12:49:49 GMT

They will continue to increase steadily throughout operation of the device. There really isn’t a way to slow the growth of dameon logs on the device. For the most part they’ll manage themselves unless you’ve enabled certain debug options.

Re: show system disk-space

jdprovine — Fri, 07 Sep 2018 12:55:31 GMT

@BPry @reaper

So how to I make sure I have enough diskspace to upgrade to a version of 8 in the future?

Re: show system disk-space

BPry — Fri, 07 Sep 2018 16:17:15 GMT

@jdprovine,

This is something that would best be done just prior to actually doing the upgrade. If you follow the approved method the firewall can actually do all of the storage calculations for you for the most part. The only time that this wasn't really true is when you were simply downloading the base image and then installing the latest maintenance release; and this was just because it was hard to calculate how much diskspace it took to explode both images and build a working install image from the bits from both.

Re: show system disk-space

jdprovine — Fri, 07 Sep 2018 16:24:00 GMT

@BPry

Make sense that you would especially want to do it right before an upgrade. I don't understand this comment

"If you follow the approved method the firewall can actually do all of the storage calculations for you for the most part. "

Re: show system disk-space

BPry — Fri, 07 Sep 2018 16:30:59 GMT

@jdprovine,

Just like other systems the firewall will do a storage requirement check when you go to install a new software image. If you have enough storage space it will continue with the install; if you do not it throws an error and the install will stop with a warning message along the lines that you don't have enough disk space.

This was difficult for the firewall to calculate when you were doing the old 'download base image, install maintenance image' method as it needed to explode both images to disk and make a working install image with bits and pieces from both. Essentially the firewall would sometimes get the calculations wrong and would run out of diskspace, because it really had no idea what would actually be needed. Following the new method of installing the base image, then installing the maintenance image makes it so that the firewall has a far easier time ensuring it has the space to continue.

Re: show system disk-space

jdprovine — Fri, 07 Sep 2018 16:35:05 GMT

@BPry

In all the upgrades I have done over the years I don't remember ever seeing that, so you are saying when you go to install it will check as part of the install and only throw the error if it cannot continue. So I have probably not seen the error cause I have always had the room to do it.