09-29-2017 07:21 AM
In the past I was going to free up space on my PA disk by removing old OS's. Most of the time there isn't much more than the one before . The partition I have the most interest is this one
/dev/md6 3.8G 3.2G 449M 88% /opt/panrepo
Where the configuration resides, I would assume as some point it could run out of space if I continue to upgrade. Any suggestions would be appreciate I am looking for a long term maintenance routine. I just finiished upgrading the OS to 7.1.11 today
10-02-2017 02:09 AM
Hi @jdprovine
the configuration is actually stored in /opt/pancfg
/opt/panrepo contains all the content and software packages you download, so deleting old maintenance releases frees up this partition
since you're on 7.1.11, the only images you need to have on your system are 7.1.0 as the base image, 7.1.11 as it is installed on the active partition, and the 7.1.X of the previously installed maintenance version as it is still currently installed on your inactive system root (as can be gleaned via 'debug swm status')
reaper@myNGFW> debug swm status Partition State Version -------------------------------------------------------------------------------- sysroot0 REVERTABLE 8.0.2 sysroot1 RUNNING-ACTIVE 8.0.4 maint READY 8.0.4
all other images can be deleted
10-02-2017 05:49 AM
I will check it out with the debug, it seems like the answer from TAC changes every time I ask them so I am not always sure what the right thing is to do. The location where the config is at is a partition on the disk, so its 88% of that partition not the whole disk correct
10-02-2017 05:51 AM
I ran the debug and got this
Partition State Version
--------------------------------------------------------------------------------
sysroot0 REVERTABLE 7.1.10
sysroot1 RUNNING-ACTIVE 7.1.11
maint READY 7.1.11
10-02-2017 06:09 AM
hi @jdprovine ok so you are good to delete everything except 7.1.0, 7.1.10 and 7.1.11
reaper@myNGFW> show system disk-space Filesystem Size Used Avail Use% Mounted on /dev/sda3 3.8G 2.6G 1.1G 72% / < this is where PAN-OS is installed /dev/sda5 7.6G 3.9G 3.3G 55% /opt/pancfg < this is where the configuration files etc are stored and content updates /dev/sda6 3.8G 2.8G 874M 77% /opt/panrepo < this is the repository forPAN-OS files tmpfs 1.9G 116M 1.8G 7% /dev/shm < cache /dev/sda8 90G 32G 54G 37% /opt/panlogs < here is the logDB
If you delete older PAN-OS install files you'll only free up space in /opt/panrepo
Of you need to (as a rule of thumb, only delete things if you need the space) clear space on the root partition, you can follow this article: How and When to Clear Disk Space on the Palo Alto Networks Device
If you need space on /opt/pancfg freed up, you can delete some older saved config files or delete previously installed content packages (these have their own cleanup so there should normally not be a need to manually delete these)
the logDB also has it's own cleaning mechanisms
10-02-2017 06:14 AM
here is my show system disk-space
Filesystem Size Used Avail Use% Mounted on
/dev/md3 3.8G 2.7G 934M 75% /
/dev/md5 7.6G 3.3G 4.0G 46% /opt/pancfg
/dev/md6 3.8G 3.2G 449M 88% /opt/panrepo
tmpfs 2.0G 116M 1.9G 6% /dev/shm
cgroup_root 2.0G 0 2.0G 0% /cgroup
/dev/md8 198G 120G 68G 64% /opt/panlogs
Well that doesn't give me alot to delete only 7.0.12 and only about 392mb
Not sure we have many only save configs but I will check
10-02-2017 06:16 AM
show system files
/var/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Sep 29 03:15 crashinfo
/var/cores/crashinfo:
total 0
/opt/var.cp/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Sep 29 03:18 crashinfo
/opt/var.cp/cores/crashinfo:
total 0
/opt/var.dp1/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Sep 29 03:19 crashinfo
/opt/var.dp1/cores/crashinfo:
total 0
/opt/var.dp0/cores/:
total 4.0K
drwxrwxrwx 2 root root 4.0K Sep 29 03:19 crashinfo
/opt/var.dp0/cores/crashinfo:
total 0
10-02-2017 06:19 AM
Hi @jdprovine
Let's take a step back: why do you need to clear up space?
If there's no urgent need, it's not really necessary to delete anything
The system should run normally and clean up after itself for most day to day things it does (it clears out old logs to make room for new logs, and it deletes old content in favor of new content)
The only exception to this are PAN-OS packages and core files. PAN-OS you can simply keep track of while you upgrade, core files should not appear unless something goes wrong at which time you'll probably have a chat with TAC about them
So from a 'keeping things clean' perspective, you only need to (and need is a big word here, since you'd only need to if there's no more room left to download the latest version) manually remove old PAN-OS packages
10-02-2017 06:27 AM
Well before I did the upgrade last week I did have TAC come in and clean up old logs and the numbers did not really change alot. But if I am concerned about filling up this partition /opt/pancfg because of upgrading the OS it doesn't seem like I need too. Really the partitions that seem to have the most used space are
/opt/panrepo
/ (root)
/opt/panlogs
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
