Upload the VM-Series Image to OCI

Complete the following procedure to upload a VM-Series for KVM qcow2 file and create a custom image that you need to launch the VM-Series firewall. Uploading and creating the image is required only once. You can use the same image for all subsequent deployments of the VM-Series firewall.
  1. Download the VM-Series for KVM qcow2 file from the Palo Alto Networks Customer Support Portal.
    1. Select
      Updates
      Software Updates
      .
    2. Select
      PAN-OS for VM-Series KVM Base Images
      from the
      Filter By
      drop-down.
    3. Download the 8.1.3or later base image qcow2 file.
  2. Create a storage bucket for the qcow2 file.
    1. Log in to the OCI console.
    2. Select
      Object Storage
      Object Storage
      Create Bucket
      .
    3. Enter a descriptive
      Name
      for your bucket.
    4. Select
      Standard
      for
      Storage Tier
      .
    5. Click
      Create Bucket
      .
    oci_create_bucket.png
  3. Upload the qcow2 file. It is recommended that you use the OCI CLI to reliably upload the VM-Series firewall image. Using the browser interface to upload the image using the OCI portal is not recommended.
    1. Refer to the OCI documentation to install and configure the OCI CLI.
    2. Use the following command to upload the qcow2 file to the bucket you created previously.
      oci os object put -ns <tenancy> -bn <bucket> --file <qcow2-file-name> --no-multipart
  4. Create a pre-authenticated request. This is needed to create the object URL used in the creation of the custom image used to lauch the VM-Series firewall instance.
    1. Log in to the OCI console.
    2. Select
      Object Storage
      Object Storage
      and click the name of the bucket you create previously.
    3. Select
      Pre-Authenticated Requests
      Create Pre-Authenticated Request
      .
    4. Enter a descriptive
      Name
      for your Pre-Authenticated Request.
    5. Select
      Object
      and enter the name of the qcow2 file.
    6. Select
      Permit Reads on the Object
      under Access Type.
    7. Enter an
      Expiration Date/Time
      .
    8. Click
      Create Pre-Authenticated Request
      .
    9. Copy the Pre-Authenticated Request URL. You must copy the URL because it will not be displayed again.
    10. Click
      Close
      .
    oci_create_pre_auth.png
  5. Import the qcow2 file and create a custom VM-Series firewall image.
    1. Select
      Compute
      Custom Images
      Import Image
      .
    2. Enter a descriptive
      Name
      for your Image.
    3. Paste the Pre-Authenticated Request URL in
      Object Storage URL
      .
    4. Select
      QCOW2
      as the
      Image Type
      .
    5. Select
      Paravirtualized Mode
      under
      Launch Mode
      .
    6. Click
      Import Image
      .
    oci_import_image.png

Related Documentation