CheckPoint删除老的升级包和遗留文件-创新互联

CP升级后，不管是通过web UI，还是命令行升级的，其下载的补丁包是不会自动删除的，为了避免硬盘空间不足，所以需要手工删除这些不用的补丁包。

使用check point 提供的专用脚本即可。

Solution

A new script was developed in order to remove all old packages and files from the upgraded machine (R70 GA and above).

Important Notes:

The script can be used only on SecurePlatform OS and on Gaia OS running Check Point R70 and higher versions.

On Linux OS and on Solaris OS, the users should use the official "Uninstall" procedure documented in the relevant R7x Installation and Upgrade Guide (R70, R70.20, R70.30, R71, R75, R75.20, R75.40, R75.40VS, R76, R77 Gaia, R77 Non-Gaia).

On Windows OS, there is no automated way to remove old files from the previous installations. Users can only uninstall old SmartConsole packages. Manual deletion (or uninstalling) of previous versions' folders should not be performed.

For Provider-1 / Multi-Domain Management Server, refer to sk65330 - Removing old installations on Provider-1 / Multi-Domain Management Server.

Follow these steps to remove all old packages and files:

Download the TAR file with the shell script - RemoveOldVersion.tar.

Transfer the RemoveOldVersion.tar file to the relevant machine (for example, /var/log/ directory).

Connect to the command line on the machine.

Log in to Expert mode.

Extract the shell script:

[Expert@HostName]# cd /var/log/
[Expert@HostName]# tar xvf RemoveOldVersion.tar

Assign the execute permissions to the script:

[Expert@HostName]# chmod u+x /var/log/RemoveOldVersion.sh

Execute the script:

[Expert@HostName]# ./RemoveOldVersion.sh

The script performs the following operations:

/opt/

/var/opt/

/var/OPT/

/opt/CPshrd-*

/var/log/CPsuite-*

CPrt (Eventia products)

CPinfo (CPinfo utility)

CPuepm (Endpoint Security Server)

CPda (Deployment Agent)

CPSmartLog (SmartLog)

CPmds (Multi-Domain Security Management Server)

Creates a detailed log file:
/var/log/RemoveOldVersion.elg

Uninstalls all old RPM packages, except these:

Deletes all directories and files that were installed by old RPM packages (except those mentioned above):

Restores '/sysimg' location (if created directory/symlink) after installation.

Restores links for old FW-1 log folders that exist in '/var/log'.

Once the script completes its job, the user will get the prompt back.

To verify that the script has finished successfully, run the following commands:

[Expert@HostName]# rpm -qa | grep CP
[Expert@HostName]# ls -l /opt/CP*
[Expert@HostName]# ls -l /var/opt/CP*
[Expert@HostName]# ls -l /var/log/CPsuite-*

Notes:

• The outputs should show only the latest version (to which the system was upgraded).

• These directories are not deleted:

1.  CPrt (Eventia products)

2. CPinfo (CPinfo utility)

3. CPuepm (Endpoint Security Server)

4. CPda (CPUSE Deployment Agent)

5. CPSmartLog (SmartLog)

6. CPmds (Multi-Domain Security Management Server)

脚本见附件：

另外有需要云服务器可以了解下创新互联scvps.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。