Downgrade Pan OS

[jdprovine]

Does the debug svm revert still work on the 8 os? 

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClcYCAS

[BPry]

@jdprovine,

It's debug swm revert; technically this is really just activating the other partition on the system, so while its most commonly used to downgrade PAN-OS it isn't specific to downgrading the software. However, to answer your question this still works perfectly fine and likely isn't a command that will change. 

[kiwi]

@jdprovine,

Yup it's still there in PAN-OS 8.1.x as BPry already mentioned :

admin@PA-lab> show system info

...

sw-version: 8.1.2

...

admin@PA-lab> debug swm revert               [revert back to last successfully installed software]

Cheers !

-Kiwi.

[jdprovine]

@kiwi @BPry

Okay cause when I tried it on my test PA with 8 on it, it gives me an invalid syntax error

[reaper]

To add to @BPry and @kiwi

you will want to check what revertable option is available to you (> debug swm status😞 you can revert to the last version that was 'installed' on the secondary partition

if you followed a linear upgrade path and did not install the next version yet, you will be able to revert to the previous version

if you already installed the _next_ version in line, you will not technicvally be able to 'revert' as the revert action would actually move you forward

ie. before installing 8.1.5:

admin@PA-200> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          RUNNING-ACTIVE    8.1.2
sysroot1          REVERTABLE        8.1.1
maint             EMPTY             None

after installing but before rebooting:

admin@PA-200> debug swm status

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          RUNNING-ACTIVE    8.1.2
sysroot1          PENDING-REVERT    8.1.5
maint             EMPTY             None

[jdprovine]

@reaper @kiwi @BPry

go figure now its working LOL

debug svm status

Partition State Version
--------------------------------------------------------------------------------
sysroot0 RUNNING-ACTIVE 8.1.5
sysroot1 REVERTABLE 8.1.4
maint EMPTY None

jprovine@PA220-test-mgt> debug swm revert

Reverting from 8.1.5 (sysroot0) to 8.1.4 (sysroot1)

[jdprovine]

@reaper @kiwi @BPry -

 oops its a typo svm instead of swm

jprovine@PA220-test-mgt> debug svm status

Invalid syntax.
jprovine@PA220-test-mgt> debug svm status

[reaper]

Did you let auto commit complete?
It may take a moment for swm to become available

[jdprovine]

@reaper

It was a typo on my part  I entered svm instead of swm LOL 😉