Forum Discussion
easy way to delete all object in a Partition to remove it.
Great ones, Does anyone have a cool command to delete all objects in a partition so the partition can be deleted?
David
- afedden_1985Cirrus
If you find a way let me know!
- afedden_1985Cirrus
This seems to work for me to delete a partition called bingo that had config in it from /config/partitions I used this directory remove command. rm -r Bingo then tmsh load sys config partitions all
then in the gui I was able to delete the partition
- gsharriAltostratus
I agree with afedden. This is how I delete a partition also. Since v11 any object created in a custom partition is stored in it's own bigip.conf file with the path /config/partitions/partition_name. Delete that bigip.conf file, load config then delete partition. Note that if a user account has been granted access to this specific partition you can't delete it. Change the users partition assignment to something else then you can delete the partition.
- moriarti_26889Nimbostratus
Hello, I have a problem after trying to delete a partition. Well, I am able to remove the partition but the problem is with one of the certificates that were installed in a SSL Profile in that partition. This is the output when I try to do a "tmsh> load sys config partitions all":
01070712:3: failed in syscall link(/config/filestore/files_d/SAND_d/certificate_key_d/:SANDETEL:correo.des.juncia.es.key_40081_1, /config/filestore/.trash_bin_d/.current_d/SAND_d/certificate_key_d/:SANDL:correo.des.juncia.es.key_40081_1) errno=(No such file or directory)
Please, how could I get rid of it? I tried to move to other image installation (I was desperate) but realized that /config/ partition is a LVM volume, so it gives me the same error. Could someone give me a hand?
Thank you in advance
- nitassEmployee
Well, I am able to remove the partition but the problem is with one of the certificates that were installed in a SSL Profile in that partition. This is the output when I try to do a "tmsh> load sys config partitions all"
can you try to manually delete that ssl certificate in configuration file (bigip.conf) and then re-load again?
- moriarti_26889Nimbostratus
Thank you for your response, Nitass. After changing the active HDD partition I could load a plain config without the certificate error. I deleted all lines related to SSL certificates in bigip.conf.
Almost everything is fine now and I am rebuilding the config. The only problem I have found is when I try to create a Self-signed certificate. I can run the following commands in the command line and everything is OK:
openssl req -x509 -nodes -newkey rsa:2048 -keyout /config/ssl/ssl.key/tal.es.key -out /config/ssl/ssl.crt/tal.es.crt -days 3650
tmsh install /sys crypto key from-local-file tmsh install /sys crypto cert from-local-file
But when I try to do it by the web interface, the bigip gives me this result:
com.f5.tmui.util.Syscall$CallException: Error: Failure to create certificate kkdelavaca with error: Key file named "kkdelavaca.key" must exist to create a corresponding certificate.
I have done this a lot of times in other bigips, it must be something corrupt that hasn't changed when I switched the active HDD partition. My concrete questions are:
What config paths get preserved when you switch active HDD partition? How can I completely erase the SSL certificates I previously installed? Any references in bigip.conf and /config/partitons/XXXXX/bigip.conf are already deleted.
Thank you very much for your help!
- rsbs01Nimbostratus
Hi guys. I would like to ask, how is the real traffic affected, when I issue a command 'load sys config partitions all'.
Delete the file bigip.conf that is in the desired partition
Procedure: Access the partition in:
/config/partitions/(partition name)
rm -f bigip.conf
tmsh load sys config
tmsh delete auth partition (partition name)
**It is recommended to do this type of maintenance in a maintenance window.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com