Upload the VM-Series Image to OCI

Complete the following procedure to upload a VM-Series for KVM qcow2 file and create a custom image that you need to launch the VM-Series firewall. Uploading and creating the image is required only once. You can use the same image for all subsequent deployments of the VM-Series firewall.
  1. Download the VM-Series for KVM qcow2 file from the Palo Alto Networks Customer Support Portal.
    1. Log in to the Customer Support Portal.
    2. Select UpdatesSoftware Updates.
    3. Select PAN-OS for VM-Series KVM Base Images from the Filter By drop-down.
    4. Download the 8.1.3or later base image qcow2 file.
  2. Create a storage bucket for the qcow2 file.
    1. Log in to the OCI console.
    2. Select Object StorageObject StorageCreate Bucket.
    3. Enter a descriptive Name for your bucket.
    4. Select Standard for Storage Tier.
    5. Click Create Bucket.
    oci_create_bucket.png
  3. Upload the qcow2 file. It is recommended that you use the OCI CLI to reliably upload the VM-Series firewall image. Using the browser interface to upload the image using the OCI portal is not recommended.
    1. Refer to the OCI documentation to install and configure the OCI CLI.
    2. Use the following command to upload the qcow2 file to the bucket you created previously.
      oci os object put -ns <tenancy> -bn <bucket> --file <qcow2-file-name> --no-multipart
  4. Create a pre-authenticated request. This is needed to create the object URL used in the creation of the custom image used to lauch the VM-Series firewall instance.
    1. Log in to the OCI console.
    2. Select Object StorageObject Storage and click the name of the bucket you create previously.
    3. Select Pre-Authenticated RequestsCreate Pre-Authenticated Request.
    4. Enter a descriptive Name for your Pre-Authenticated Request.
    5. Select Object and enter the name of the qcow2 file.
    6. Select Permit Reads on the Object under Access Type.
    7. Enter an Expiration Date/Time.
    8. Click Create Pre-Authenticated Request.
    9. Copy the Pre-Authenticated Request URL. You must copy the URL because it will not be displayed again.
    10. Click Close.
    oci_create_pre_auth.png
  5. Import the qcow2 file and create a custom VM-Series firewall image.
    1. Select ComputeCustom ImagesImport Image.
    2. Enter a descriptive Name for your Image.
    3. Paste the Pre-Authenticated Request URL in Object Storage URL.
    4. Select QCOW2 as the Image Type.
    5. Select Paravirtualized Mode under Launch Mode.
    6. Click Import Image.
    oci_import_image.png

Related Documentation