pan-os-python icon indicating copy to clipboard operation
pan-os-python copied to clipboard
verified publisher icon PaloAltoNetworks

upgrade.py failed: tries to update to an unwanted version

Open antoinekh opened this issue 3 years ago • 3 comments

Describe the bug

Firewall currently in 9.0.4. package in latest version:

Name: pan-os-python Version: 1.7.1

Upgrade failed with an unwanted version and direction. upgrade failed: Can't upgrade from 10.0.0 to 9.19.

Expected behavior

Upgrade to 9.1.0 then 9.1.9

Current behavior

root@digsflrpng: /app/digsflrpng/api/panorama # python3 upgrade.py -v -n 10.202.22.234 admin password 9.19
DEBUG:panos.base.PanDevice:Getting API Key from 10.202.22.234 for user admin
DEBUG:panos.updater.SoftwareUpdater:Device 016201024862 software updater: check for new versions
DEBUG:panos.updater.SoftwareUpdater:Found current version: 9.0.4
DEBUG:panos.updater.ContentUpdater:Found current version: 8405-6694
INFO:panos.updater.ContentUpdater:Device 016201024862 downloading content version: 8560-7365
DEBUG:panos.firewall.Firewall:Waiting for job to finish...
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
DEBUG:panos.base:Job 2528 status ACT
INFO:panos.updater.ContentUpdater:Device 016201024862 installing content version: latest
DEBUG:panos.firewall.Firewall:Waiting for job to finish...
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
DEBUG:panos.base:Job 2530 status ACT
INFO:panos.updater.SoftwareUpdater:Device 016201024862 will be upgraded to version: 9.1.0
INFO:panos.updater.ContentUpdater:Device 016201024862 downloading content version: 8560-7365
DEBUG:panos.firewall.Firewall:Waiting for job to finish...
DEBUG:panos.base:Job 2531 status ACT
DEBUG:panos.base:Job 2531 status ACT
DEBUG:panos.base:Job 2531 status ACT
DEBUG:panos.base:Job 2531 status ACT
DEBUG:panos.base:Job 2531 status ACT
DEBUG:panos.base:Job 2531 status ACT
INFO:panos.updater.ContentUpdater:Device 016201024862 installing content version: latest
DEBUG:panos.firewall.Firewall:Waiting for job to finish...
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
DEBUG:panos.base:Job 2532 status ACT
INFO:panos.updater.SoftwareUpdater:Device 016201024862 will be upgraded to version: 10.0.0
Traceback (most recent call last):
  File "upgrade.py", line 98, in <module>
    main()
  File "upgrade.py", line 92, in main
    device.software.upgrade_to_version(args.version, args.dryrun)
  File "/usr/local/lib/python3.6/site-packages/panos/updater.py", line 350, in upgrade_to_version
    result = self.upgrade_to_version(target_version, dryrun=dryrun)
  File "/usr/local/lib/python3.6/site-packages/panos/updater.py", line 350, in upgrade_to_version
    result = self.upgrade_to_version(target_version, dryrun=dryrun)
  File "/usr/local/lib/python3.6/site-packages/panos/updater.py", line 291, in upgrade_to_version
    % (self.pandevice.id, self.pandevice.version, target_version)
panos.errors.PanDeviceError: Device 016201024862 upgrade failed: Can't upgrade from 10.0.0 to 9.19.

antoinekh avatar Apr 21 '22 12:04 antoinekh

:tada: Thanks for opening your first issue here! Welcome to the community!

welcome-to-palo-alto-networks[bot] avatar Apr 21 '22 12:04 welcome-to-palo-alto-networks[bot]

+1

This seems like a relatively large issue, I'm seeing something very similar attempting to upgrade a 10.1.x to 10.2.2-h2. During this it appears as if it fails attempting to upgrade to version 11.0.0 and says no version available.

jubrad avatar Oct 07 '22 20:10 jubrad

Can you confirm the function you are using from the SDK to do these upgrades, folks? Is it upgrade_to_version? Thanks

Also, in the original post, 9.19 is not a valid version, I presume this was a typo for 9.1.9?

jamesholland-uk avatar Sep 08 '23 11:09 jamesholland-uk