Palo Alto CLI Notes

 Partition


admin@PA-111> show system disk-space
Filesystem      Size  Used Avail Use% Mounted on
/dev/root        12G  4.5G  6.8G  40% /                           > root, where OS is installed
none            2.7G   88K  2.7G   1% /dev
/dev/sda5        16G  4.0G   12G  27% /opt/pancfg         > where dynamic update file are kept
/dev/sda6       7.9G  2.1G  5.4G  28% /opt/panrepo       > downloaded PAN-OS image
tmpfs           2.5G  2.3G  286M  89% /dev/shm
cgroup_root     2.7G     0  2.7G   0% /cgroup
/dev/sda8        11G  111M   11G   2% /opt/panlogs       > where log database is stored
tmpfs            12M     0   12M   0% /opt/pancfg/mgmt/lcaas/ssl/private
admin@PA-111>

/ root partition is actually one of two sysroot partitions. One is mounted at a time, upgrade actually installs new PAN-OS onto the inactive partition.


admin@PA-111> debug swm status                            > software manager

Partition         State             Version
--------------------------------------------------------------------------------
sysroot0          RUNNING-ACTIVE    11.1.4
sysroot1          EMPTY             None
maint             READY             11.1.4

Once new OS has been installed, the GRUB bootloader is configured to load the other sysroot partition at the next boot.

Smooth rollback
1. > debug swm revert 
2. > request restart system

Comments