Check Point 刪除老的升級包和遺留文件

CP升級后，不管是通過web UI，還是命令行升級的，其下載的補丁包是不會自動刪除的，為了避免硬盤空間不足，所以需要手工刪除這些不用的補丁包。

使用check point 提供的專用腳本即可。

Solution

A new script was developed in order to remove all old packages and files from the upgraded machine (R70 GA and above).

Important Notes:

The script can be used only on SecurePlatform OS and on Gaia OS running Check Point R70 and higher versions.

On Linux OS and on Solaris OS, the users should use the official "Uninstall" procedure documented in the relevant R7x Installation and Upgrade Guide (R70, R70.20, R70.30, R71, R75, R75.20, R75.40, R75.40VS, R76, R77 Gaia, R77 Non-Gaia).

On Windows OS, there is no automated way to remove old files from the previous installations. Users can only uninstall old SmartConsole packages. Manual deletion (or uninstalling) of previous versions' folders should not be performed.

For Provider-1 / Multi-Domain Management Server, refer to sk65330 - Removing old installations on Provider-1 / Multi-Domain Management Server.

Follow these steps to remove all old packages and files:

Download the TAR file with the shell script - RemoveOldVersion.tar.

Transfer the RemoveOldVersion.tar file to the relevant machine (for example, /var/log/ directory).

Connect to the command line on the machine.

Log in to Expert mode.

Extract the shell script:

[Expert@HostName]# cd /var/log/
[Expert@HostName]# tar xvf RemoveOldVersion.tar

Assign the execute permissions to the script:

[Expert@HostName]# chmod u+x /var/log/RemoveOldVersion.sh

Execute the script:

[Expert@HostName]# ./RemoveOldVersion.sh

The script performs the following operations:

/opt/<package>

/var/opt/<package>

/var/OPT/<package>

/opt/CPshrd-*

/var/log/CPsuite-*

CPrt (Eventia products)

CPinfo (CPinfo utility)

CPuepm (Endpoint Security Server)

CPda (Deployment Agent)

CPSmartLog (SmartLog)

CPmds (Multi-Domain Security Management Server)

Creates a detailed log file:
/var/log/RemoveOldVersion.elg

Uninstalls all old RPM packages, except these:

Deletes all directories and files that were installed by old RPM packages (except those mentioned above):

Restores '/sysimg' location (if created directory/symlink) after installation.

Restores links for old FW-1 log folders that exist in '/var/log'.

Once the script completes its job, the user will get the prompt back.

To verify that the script has finished successfully, run the following commands:

[Expert@HostName]# rpm -qa | grep CP
[Expert@HostName]# ls -l /opt/CP*
[Expert@HostName]# ls -l /var/opt/CP*
[Expert@HostName]# ls -l /var/log/CPsuite-*

Notes:

• The outputs should show only the latest version (to which the system was upgraded).
  
  

• These directories are not deleted:

  
  

1.  CPrt (Eventia products)

2. CPinfo (CPinfo utility)

3. CPuepm (Endpoint Security Server)

4. CPda (CPUSE Deployment Agent)

5. CPSmartLog (SmartLog)

6. CPmds (Multi-Domain Security Management Server)

腳本見附件：