Old OS version & disk space

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Old OS version & disk space

L4 Transporter

In the past I was going to free up space on my PA disk by removing old OS's. Most of the time there isn't much more than the one before .  The partition I have the most interest is this one

 

/dev/md6              3.8G  3.2G  449M  88% /opt/panrepo

 

Where the configuration resides, I would assume as some point it could run out of space if I continue to upgrade. Any suggestions would be appreciate I am looking for a long term maintenance routine. I just finiished upgrading the OS to 7.1.11 today

8 REPLIES 8

Cyber Elite
Cyber Elite

Hi @jdprovine

 

the configuration is actually stored in /opt/pancfg

/opt/panrepo contains all the content and software packages you download, so deleting old maintenance releases frees up this partition

 

since you're on 7.1.11, the only images you need to have on your system are 7.1.0 as the base image, 7.1.11 as it is installed on the active partition, and the 7.1.X of the previously installed maintenance version as it is still currently installed on your inactive system root (as can be gleaned via 'debug swm status')

 

reaper@myNGFW> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          REVERTABLE        8.0.2
sysroot1          RUNNING-ACTIVE    8.0.4
maint             READY             8.0.4

all other images can be deleted

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

I will check it out with the debug, it seems like the answer from TAC changes every time I ask them  so I am not always sure what the right thing is to do. The location where the config is at is a partition on the disk, so its 88% of that partition not the whole disk correct

@reaper

 

 

I ran the debug and got this

 


Partition State Version
--------------------------------------------------------------------------------
sysroot0 REVERTABLE 7.1.10
sysroot1 RUNNING-ACTIVE 7.1.11
maint READY 7.1.11

hi @jdprovine ok so you are good to delete everything except 7.1.0, 7.1.10 and 7.1.11

 

reaper@myNGFW> show system disk-space 

Filesystem            Size  Used Avail Use% Mounted on
/dev/sda3             3.8G  2.6G  1.1G  72% /              < this is where PAN-OS is installed
/dev/sda5             7.6G  3.9G  3.3G  55% /opt/pancfg    < this is where the configuration files etc are stored and content updates
/dev/sda6             3.8G  2.8G  874M  77% /opt/panrepo   < this is the repository forPAN-OS files
tmpfs                 1.9G  116M  1.8G   7% /dev/shm       < cache
/dev/sda8              90G   32G   54G  37% /opt/panlogs   < here is the logDB

If you delete older PAN-OS install files you'll only free up space in /opt/panrepo

 

Of you need to (as a rule of thumb, only delete things if you need the space) clear space on the root partition, you can follow this article: How and When to Clear Disk Space on the Palo Alto Networks Device

 

If you need space on /opt/pancfg freed up, you can delete some older saved config files or delete previously installed content packages (these have their own cleanup so there should normally not be a need to manually delete these)

the logDB also has it's own cleaning mechanisms

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

@reaper

 

here is my show system disk-space


Filesystem Size Used Avail Use% Mounted on
/dev/md3 3.8G 2.7G 934M 75% /
/dev/md5 7.6G 3.3G 4.0G 46% /opt/pancfg
/dev/md6 3.8G 3.2G 449M 88% /opt/panrepo
tmpfs 2.0G 116M 1.9G 6% /dev/shm
cgroup_root 2.0G 0 2.0G 0% /cgroup
/dev/md8 198G 120G 68G 64% /opt/panlogs

 

 

Well that doesn't give me alot to delete only 7.0.12 and only about 392mb

Not sure we have many only save configs but I will check

 

@reaper

 

show system files

 

/var/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Sep 29 03:15 crashinfo

/var/cores/crashinfo:
total 0

/opt/var.cp/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Sep 29 03:18 crashinfo

/opt/var.cp/cores/crashinfo:
total 0

/opt/var.dp1/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Sep 29 03:19 crashinfo

/opt/var.dp1/cores/crashinfo:
total 0

/opt/var.dp0/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Sep 29 03:19 crashinfo

/opt/var.dp0/cores/crashinfo:
total 0

Hi @jdprovine

 

Let's take a step back: why do you need to clear up space?

 

If there's no urgent need, it's not really necessary to delete anything

The system should run normally and clean up after itself for most day to day things it does (it clears out old logs to make room for new logs, and it deletes old content in favor of new content)

 

The only exception to this are PAN-OS packages and core files. PAN-OS you can simply keep track of while you upgrade, core files should not appear unless something goes wrong at which time you'll probably have a chat with TAC about them

 

So from a 'keeping things clean' perspective, you only need to (and need is a big word here, since you'd only need to if there's no more room left to download the latest version) manually remove old PAN-OS packages

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

@reaper

 

Well before I did the upgrade last week I did have TAC come in and clean up old logs and the numbers did not really change alot. But if I am concerned about filling up this partition /opt/pancfg because of upgrading the OS it doesn't seem like I need too. Really the partitions that seem to have the most used space are 

 

/opt/panrepo

/ (root)

/opt/panlogs

 

  • 3071 Views
  • 8 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!