I had the same exact issue with my box. First couldn't update to 2.7.2 from 2.7.0 due to a bug with cert hashes. Had to run certctl rehash to update then after the update it wouldn't boot with no real error message. Luckily I stumbled on this thread. I was surprised to find that indeed using boot menu options 7 5 5 1 1 booted fine, but as they said above it's an every boot thing. My Lenovo M90q doesn't have a serial port so I attached a USB serial port which didn't do anything. In the end I updated my BIOS and it boots right up every time. Must be a UEFI bug that was patched.

Use the memstick image for a memstick.

Use Etcher. 😉

Steve

You can use 'pkg search' like:

[2.7.2-RELEASE][admin@t70.stevew.lan]/root: pkg search pfSense-pkg pfSense-pkg-Avahi-2.2_4 pfSense package Avahi pfSense-pkg-Backup-0.6 pfSense package Backup pfSense-pkg-Cron-0.3.8_3 pfSense package Cron pfSense-pkg-FTP_Client_Proxy-0.3_8 pfSense package FTP_Client_Proxy pfSense-pkg-Filer-0.60.6_8 pfSense package Filer pfSense-pkg-LADVD-1.2.2_3 pfSense package LADVD pfSense-pkg-LCDproc-0.11.5_1 LCDproc package for pfSense pfSense-pkg-Lightsquid-3.0.7_3 pfSense package Lightsquid pfSense-pkg-Netgate_Firmware_Upgrade-0.47 pfSense package Netgate Firmware Upgrade pfSense-pkg-Notes-0.2.9_5 pfSense package Notes pfSense-pkg-Open-VM-Tools-10.1.0_5,1 pfSense package Open-VM-Tools pfSense-pkg-RRD_Summary-2.2 pfSense package RRD_Summary pfSense-pkg-Service_Watchdog-1.8.7_1 pfSense package Service_Watchdog pfSense-pkg-Shellcmd-1.0.5_3 pfSense package Shellcmd pfSense-pkg-Status_Traffic_Totals-2.3.2_3 Traffic Totals using the vnStat database pfSense-pkg-System_Patches-2.2.9_1 pfSense package System_Patches pfSense-pkg-Tailscale-0.1.4 pfSense package Tailscale pfSense-pkg-Telegraf-0.9_6 pfSense package Telegraf pfSense-pkg-WireGuard-0.2.1 pfSense package WireGuard pfSense-pkg-acme-0.7.5 ACME package for pfSense pfSense-pkg-apcupsd-0.3.92_1 pfSense package apcupsd pfSense-pkg-arping-1.2.2_4 pfSense package arping pfSense-pkg-arpwatch-0.2.1 Arpwatch package for pfSense pfSense-pkg-bandwidthd-0.7.5 BandwidthD package for pfSense pfSense-pkg-bind-9.17 BIND DNS suite with updated DNSSEC and DNS64 pfSense-pkg-cellular-1.2.3_3 Voleatech Cellular Module Interface pfSense-pkg-darkstat-3.1.3_6 pfSense package darkstat pfSense-pkg-freeradius3-0.15.10_1 FreeRADIUS 3.x package for pfSense pfSense-pkg-frr-2.0.2_1 FRR package for pfSense pfSense-pkg-haproxy-0.63_1 pfSense package haproxy pfSense-pkg-haproxy-devel-0.63_1 pfSense package haproxy-devel pfSense-pkg-iperf-3.0.3 pfSense package iperf pfSense-pkg-lldpd-0.9.11_2 802.1ab Link Layer Discovery Protocol (LLDP) daemon pfSense-pkg-mailreport-3.6.4_1 pfSense package mailreport pfSense-pkg-mtr-nox11-0.85.6_3 pfSense package mtr-nox11 pfSense-pkg-net-snmp-0.1.5_11 Net-SNMP package for pfSense pfSense-pkg-nmap-1.4.4_7 pfSense package nmap pfSense-pkg-node_exporter-0.18.1_3 pfSense package node_exporter pfSense-pkg-nrpe-4.1 pfSense package nrpe pfSense-pkg-ntopng-0.8.13_10 pfSense package ntopng pfSense-pkg-nut-2.8.2 Network UPS Tools pfSense-pkg-openvpn-client-export-1.9.2 pfSense package openvpn-client-export pfSense-pkg-pfBlockerNG-3.2.0_7 pfSense package pfBlockerNG pfSense-pkg-pfBlockerNG-devel-3.2.0_7 pfSense package pfBlockerNG pfSense-pkg-pimd-0.0.3_6 PIMD package for pfSense pfSense-pkg-siproxd-1.1.4_1 pfSense package siproxd pfSense-pkg-snmptt-1.0.0_1 pfSense package snmptt pfSense-pkg-snort-4.1.6_14 pfSense package snort pfSense-pkg-softflowd-1.2.6_1 pfSense package softflowd pfSense-pkg-squid-0.4.46 pfSense package squid pfSense-pkg-squidGuard-1.16.19 pfSense package squidGuard pfSense-pkg-stunnel-5.50_11 pfSense package stunnel pfSense-pkg-sudo-0.3_8 pfSense package sudo pfSense-pkg-suricata-7.0.2_3 pfSense package suricata pfSense-pkg-syslog-ng-1.16 pfSense package syslog-ng pfSense-pkg-tftpd-0.1.3_4 pfSense package for tftp server pfSense-pkg-tinc-1.0.35_3 pfSense package tinc pfSense-pkg-udpbroadcastrelay-1.0 pfSense package UDP Broadcast Relay pfSense-pkg-zabbix-agent4-1.0.6 pfSense package zabbix-agent pfSense-pkg-zabbix-agent5-1.0.6 pfSense package zabbix-agent pfSense-pkg-zabbix-agent6-1.0.6 pfSense package zabbix-agent pfSense-pkg-zabbix-agent64-1.0.6 pfSense package zabbix-agent pfSense-pkg-zabbix-proxy4-1.0.6 pfSense package zabbix-proxy pfSense-pkg-zabbix-proxy5-1.0.6 pfSense package zabbix-proxy pfSense-pkg-zabbix-proxy6-1.0.6 pfSense package zabbix-proxy pfSense-pkg-zabbix-proxy64-1.0.6 pfSense package zabbix-proxy pfSense-pkg-zeek-3.0.6_4 Zeek Network Security Monitor package for pfSense

@stephenw10 it only went to bios I have it back up and running now thanks

Hmm, if you add a new drive the BIOS may add a UEFI entry for it and try to boot that if if sees it as bootable.

If that does happen, on the 6100, you would need to set the boot device back to the old drive on the first boot at least. Just for anyone searching in the future.

@stephenw10 Will try to do that and I will reach to you regarding the license. Thanks for your support Stephen.

You can only use the tokens once. If you moved the config to a new VM it will have a new NDI which won't be registered.

Open a ticket with us.
https://www.netgate.com/tac-support-request

@stephenw10 Just wanted to follow up and mark this one as SOLVED — removing the <phase1>1</phase1> from <ipsec> fixed the PHP errors and allowed the interfaces to load. I’ve got it back in production and have a bit more work to restore to the original config, but your advice definitely made the difference! Thanks so much for the help.

ahhh my bad i meant plus-didnt mean to be lazy but with all the previous hoopla over the modest charge for a great piece of software I wanted to make sure that I wouldnt incur the wife approval factor paperwork again LOL

sorry to necro this but its the top google search for the topic - do you have any insight into performance difference between KVM vs LXC QEMU?

it would be nice to get a definitive answer on which is better

Yes I've hit that myself a few times and it can be confusing! There is work on-going to improve how that is handled.

@kj32 My experience with TAC is that you get a response within minutes any time of the day or night.

Ted

@techmattr said in Recover config from mirrored zfs disk?:

I rebooted my pfsense today and when it booted back up it threw an error that it could not find /boot/kernal/kernal or something to that effect.
I eneded up having to reinstall
My install was on 2 mirrored zfs disks.
When I did the reinstall I only installed onto 1 disk.
Is there any way for me to recover my config from the 2nd disk?

Open a terminal or console and identify the ZFS pool name. You can use the following command to list the available ZFS pools:

zpool list

Once the pool is imported, you need to mount the ZFS filesystem containing the pfSense configuration. The exact path may vary, but it's typically something like /mnt/<pool_name>.

zfs mount <pool_name>/mountpoint

@stephenw10

I have it set up for LAN. And I've seen the error message that I used to get, but the system keeps running after that now. I didn't use WAN because after reading what it says I thought that might be a bad idea.

@SteveITS Thanks for the tips. In the end, just restoring the pre-upgrade backup was the solution, the other things may have worked, but I needed to get fired back up and running so people could get back to work.

J.

@stephenw10 apologies didn't see update on this. No I am unsure if bios was modified. So I bought this as part of a set from reseller on Ebay. its a checkpoint t80? when i got it it already had pfsense install restored so it was just configuring and completing the install. Current update is getting a new SSD to swap and see if that will correct my issue. New ssd should be here this week. Next steps is new bare metal server running pfsesne or promox with pfsesne. Apologies again for the delay and thanks for the assist.

@stephenw10
Thank you for this information. After setting my bios to legacy mode and reinstalling I did not get this error even after reloading all my previous config.

Indeed, i did try to install it also from a generic SD card reader that can read all kinds of memory cards. But as already stated this was not an option because i only had a 1GB Compact Flash card.
After that i continued to install it via the USB memory stick image with serial output..
I'm still wondering why the memstick image with serial did not work and the one with VGA did.
I did not try to do the ultimate test to install the memstick image with VGA console directly on the XTM510 simply because this is my production gateway to the internet.
When my testbench of my homelab is up and running again, i can do some more tests and let you know.
Thanks!

I can confirm that should not happen. The only way it could is if a custom script has been added to do so. There are some examples here on the forum but we do not recommend that.