System Disk Size Increase on Google Cloud Platform

Table of Contents

Create a Custom VM-Series Firewall Image for Google Cloud Platform

Prepare to Set Up VM-Series Firewalls on Google Public Cloud

System Disk Size Increase on Google Cloud Platform

Migrate the VM-Series deployed from an image with a 60GB system disk to a new 60GB or 80GB system disk (with new disk partitioning) on Google Cloud Platform.

Where Can I Use This?	What Do I Need?
VM-Series 10.2.17	PAN-OS 11.1 or later 60 GB or 80GB disk (If you use /opt/panlogs for local logging, create an 80GB disk so that the partition has enough space.) Ensure the new disk includes the identical guest-os-features as the primary drive. gcloud access in Cloud Shell, or on a machine where gcloud is authenticated Permission to stop VM instances and attach and detach disks in Compute Engine

VM-Series software firewalls deployed from older base images such as 10.2.x keep the original, smaller /dev/root partitions, even after you upgrade PAN-OS to 11.1.x or 11.2.x. Cloning the system disk to a 60GB or 80GB disk increases the root partition across both sysroots from 6.9G to 12G.

The firewall has to reboot twice during this procedure, so plan a maintenance window. Your software version and configuration don't change.

Check the current disk layout and software version.

admin> show system disk-space
admin> show system info | match sw

Stop the firewall.
1. In the Google Cloud console, select Compute EngineVM instances.
2. Select the firewall instance.
3. Click Stop.
Create a new blank disk of the same type as the original disk.
```
gcloud compute disks create <new_disk_name> \
  --size=60GB \
  --zone=<zone> \
  --type=pd-ssd \
  --guest-os-features=GVNIC,MULTI_IP_SUBNET
```
If you use /opt/panlogs for local logging, create an 80GB disk so that the partition has enough space.
Ensure the new disk includes the identical guest-os-features as the primary drive.
Attach the new disk to the firewall.
1. Click Edit.
2. Under Additional disks, click Attach existing disk.
3. For Disk, choose the new disk.
4. Click Save.
Click Start/Resume.
Connect to the firewall through the serial console, or log in to the CLI using SSH.

List the available target disks.

admin> request system clone-system-disk target ?

Clone the system disk to the new disk and enter Y when prompted.
```
admin> request system clone-system-disk target sdb
```
Monitor the console. The cloning procedure requires approximately 20 to 30 minutes. Verify the drive transfer is fully finished prior to proceeding.
Stop the firewall.
Detach both disks.
1. Click Edit.
2. Under Additional disks, detach the new disk.
3. Under Boot disk, click Detach boot disk to detach the old disk.
4. Click Save.
Set the new disk as the boot disk.
1. Click Edit.
2. Under Boot disk, click Configure boot disk.
3. On the Existing disks tab, choose the new disk.
4. Click Select, and then click Save.
Click Start/Resume.
Verify that the new partitions are in use and that the software version is unchanged.
```
admin> show system disk-space
admin> show system info | match sw
```
(Optional) Delete the old boot disk to avoid storage charges.