某局点F1000-AK由于flash被只读导致保存配置失败经验案例

两台防火墙做的堆叠，发现slot1保存配置报错，save或者save force报错一样，如下：

导入导出文件以及升级特征库也失败，如下：

1、尝试在slot2写了个test.cfg文件可以保存，可以保存成功。

2、查看slot1的cpu和内存也都是正常范围。

  ===============display cpu=============== 

 Slot 1 CPU 0 CPU usage: 

 24% in last 5 seconds 

 11% in last 1 minute 

 7% in last 5 minutes

  ===============display memory=============== 

 Memory statistics are measured in KB: 

Slot 1: 

                    Total          Used           Free     Shared     Buffers  Cached   FreeRatio 

Mem:       8004864    3826984     4177880        0         7116    1380892    65.4% 

-/+ Buffers/Cache:    2438976     5565888 

Swap:               0             0                0

3、查看分布式文件系统fsd进程，也没见异常。

[F1000]dis process name fsd

                             Job ID: 17815

                                PID: 17815

                         Parent JID: 1

                         Parent PID: 1

                    Executable path: /sbin/fsd

                           Instance: 0

                            Respawn: ON

                      Respawn count: 1

             Max. spawns per minute: 12

                       Last started: Mon Nov 14 13:21:08 2022

                      Process state: sleeping

                          Max. core: 1

                               ARGS: -

    TID  LAST_CPU    Stack      PRI    State   HH:MM:SS:MESC  Name          

  17815      0        136K      120      S     0:0:0:0        fsd           

  17816      0        136K      120      S     0:0:1:950      fsd           

  17824      0        136K      120      S     0:0:17:730     fsd           

[ChuKouFW-F1000] probe

[ChuKouFW-F1000-probe]follow  job 17815

4、查看诊断 ，现场安全策略日志输出到信息中心，关一下策略日志测试，故障依旧。

5、进一步查看诊断，发现slot1的Flash被置为只读了，需要用串口登录，fixdisk flash修复。（注意要用串口，测试时用telnet或者ssh登录设备修复均失败。）

[   45.895277] 0:diagd (17823): drop_caches: 3

[   51.554156] 2:random: nonblocking pool is initialized

[   52.018349] 0:attach task 18415(kbfd/1) to /dev/cgroup/cpuset/oam failed

[   52.018363] 0:Process bfdd need NICE capability

[   52.264048] 0:FAT-fs (mmcblk0p1): error, fat_get_cluster: invalid cluster chain (i_pos 18282660)

[   52.264065] 0:FAT-fs (mmcblk0p1): Filesystem has been set read-only

6、现场console登录设备，修复成功了问题都解决了。

<F1000>fdisk slot1#flash:

Restoring slot1#flash: may take some time...

Restoring slot1#flash:... Done.

<F1000>save f

Validating file. Please wait... 

Saved the current configuration to mainboard device successfully.

串口登录设备，进行fixdisk flash修复。

<F1000>fdisk slot1#flash: