PANOS 9.0 root partition fill in PA 3000 models

[Venkatesan_radhakrishnan]

Hi Community,

We are able to upgrade to PANOS 9.0 from any maintenance version of 8.1. 

Once we install Base version 9.0.0 and maintenance version 9.0.X root partition is getting filled upto 93 to 95%.

Let say firewall is running in 9.0.6, If we want to upgrade to 9.0.8 we are unable to proceed because the root partition is full and software manager is not able to download the PANOS maintenance image file.

Palo alto recommends not to delete the base version 9.0.0 while upgrading to any maintenance version so how could we proceed if we want to upgrade to maintenance version. 

Regards

Venky

[ShaiW]

Hi

The short answer is that you'll have to free up some space in the root (/) partition.

There are separate partitions for logs, cfg, repo, etc but the root partition holds all the temporary stuff like software version package being downloaded and extracted, packet captures and dataplane-debug files, tech support files, etc, so if it is full you'll not be able upgrade.

FYI, the downloaded OS version are stored in /opt/panrepo - not the root partition. Use this command 'show system disk-space' and also take a look at this:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClimCAC

Hope this helps,

Shai

[Venkatesan_radhakrishnan]

Even I free up I can able to free up only 100MB which is like 2 to 3% so resulting root space is 89% and available root space is around 300MB, most the maintenance version are having 400 plus MB file which is not getting installed in root as the partition is already about to fill and it not having sufficient space to install firmware.

I have tried this article already it is not helping anyway.

Regards

[ShaiW]

Hi

There are some lesser known files in there (/) that could take up some space, for example if a debug flow-basic was taken and not cleared. Also the Daily reports (Monitor->Reports) sit there and accumulate over time.

Also, if you can open a ticket to support they can log in with root access and clear up some root access files.

Shai

[JMahannah]

When support logs in with Root Access, does the network stop passing traffic through the Firewall?  Asking because I need to know whether to schedule a maintenance window or if I can do this during production.