Vendors have firmware bugs similar to this quite often, and usually you'd see the OS failing suddenly for no good reason. Falling back to PCI IO access for the config space will probably only allowing boot-through, but any time something allocates memory into that region, it won't be going to DRAM... leading to data corruption. If you enable above 4GB decoding (and it successfully boots), there could be a change to the ACPI tables that the firmware generates. In any case, we'll need to find a way to let FreeBSD know not to use that memory region for allocations.

@SteveITS I went back and retraced my steps, ONLY to realized that I had actually been attempting to restore an OPNsense config and NOT a pfSense config into pfSense 2.8.0... Today I had been running the same exercise (prep for switching from Cable to Fiber) in both... Hence False Alarm: pfSense 2.8.0 was "Correct", in fact it was NOT a pfSense config!!! Restoring Today's Initial Chrome config into pfSense 2.8.0 works as expected... Lawrence Houston

@m80s said in Update 2.7.2 to 2.8.0 Dynamic DNS not working with Cloudflare: @stephenw10 in my case I tried with 25.07.1: DuckDNS DeSec both with IPv4 and both failing. Yeah that's unexpected. Unless they are using a WAN with a gateway that shows as down. In which case you would be hitting the new behaviour requiring gateway monitoring be corrected.

Your root filesystem is down to 1.5G with only 345MB available. It is a space issue. Go to System> Boot Environments and remove any older snapshots you're no longer using. I usually recommend removing all but the currently running BE and one previous one. Then retry upgrading.

@stephenw10 Hi Stephen. That's why I posted -- the 25.07.1 update has been out for well over 24 hours and yet there was no upgrade available LED flashing. I upgraded last night so we'll see if it picks up when the next upgrade is available.

Ah, good and bad news then I guess. Thanks for following up. Yes, some SSDs will fail to a read-only state such that they appear to take changes but lose it at reboot. And that can be confusing!

Yup use Python mode if you have kea2unbound and DNS-BL.

@hspindel said in Upgrading 24.11 to 25.07 fails: @keyser Thank you. So do you concur that removing packages is a good idea? And I have to reinstall manually? Yes and yes

@luckman212 said in Auto update check, checks for updates to base system + packages and sends email alerts: That's why e.g. the current script isn't detecting 25.07.1 etc. Check that you've selected : [image: 1755701317878-103cf890-ded4-4473-8a21-21333f615049-image.png]

If it's the first time it's changed I can probably migrate it to the new NDI. Send it to me in chat and I'll check it.

That ^, It's actually taking up far more space. That error: pkg: "out of space" returned error code 3 confirms it out of disk space. I would remove all but the current and one previous BE and run the upgrade again.

Hmm, strange indeed.

Yup it's unclear how it gets added. If it was a config that got upgraded across a lot of versions though it has probably been there for a while. Future versions should handle that better.

That's a bios or efi function. It deppends how the BIOS presents it. If it boots pfSense you can use efibootmgr to set the boot order if you need to.

Same issue here from 24.11 to 25.11. Clearing /cf/conf/backup was the solution. Thanks for sharing !

Oh so you still see this even without pfSense involved at all? It must be a problem in the route then. Like something at your ISP routing packets via multiple routes perhaps. What happens if you route traffic over a VPN to somewhere else so you bypass anything the ISP is doing?

@stephenw10 Thank you for the remark with the power saving settings. This fits to the picture trhat the system allways was crashing at night when nothing happens. I ordered and installed a new internal SSD. Not it is running stable since 3 nights. I think it really have been some power states of the SSD or USB.

said in "Version 2.8.0 is available." but then "up to date": Ok, I enlarged the efi partition on both pfSense. Restarting the update on the secondary worked, now I'll run it on the primary. All updates have passed without errors, both pfSense are back to normal, data flow seems to be ok. Thx@all. Thread closed. cu.

Hmm, what do you get after the reboot though? Just the BIOS output? How did you get to 25.07 in the end? There's a separate setting for denying DHCP to clients without a static mapping: Deny Unknown Clients