@stephenw10

System came back up and had to reinstall a couple of the packages from the Installed Packages page before those particular package services would start properly. But all appears to be OK.

Won't make that mistake again to update packages before updating to the latest pfSense version.

Try running pfSense-repoc at the command line.

Also try running pkg-static -d update and see if that throws any errors.

At the command line run: pkg-static info -x pfSense
See which pkgs are still running 23.05.1.

In most cases you should be able to just run: pkg-static upgrade and agree to the available upgrades. But be sure to have a backup of your config in case you have to install 23.09 clean.

Steve

Hmm, that's not an error state I've seen before.

Can you show the output from initial power up?

Steve

@sae did you see this?
https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#troubleshooting

Ok, I don't expect 2.7.1 to be any different but the line numbers in the php error might have changed.

@Patch Thanks Patch ... I will try that. It has been somewhat frustrating to get some images placed on this site. If necessary I will just past a link.

@redpola It won't help with the upgrade but one can use a RAM disk for /var and /tmp. However, pfSense will copy data to disk during boots. There is a "Log Directory" time in hours, but even if left blank I suspect it will copy at restart. And of course for an unexpected boot you'd lose all logs at boot. And note their note:

"The size of the /var RAM disk, in MiB. The default value is 60, but should be set much higher, especially if packages will be used. 512-1024 is a better starting point, depending on the available firewall RAM and kernel memory."

...hence why 32 MB seems small.

You could potentially add it using the filer package. But that would only be added back after the package is reinstalled and it's config applied. So it wouldn't help at first boot after a restore.

@mcpfl

Move away from UFS.

I did that as soon as ZFS came out as I was TIRED of having to fsck the "Firewall", every time the power went out.
(and/or the UPS was weak, or the communication to the UPS usb had failed).

Reinstall on different system/media and use ZFS instead.

It won't cause any issues uninstalling that. But I wouldn't expect either of those to be an issue during upgrade anyway.

Steve

@stephenw10 said in Not booting after upgrade or clean install to CE 2.7.1:

Does it support legacy (BIOS) install rather than UEFI? That would likely boot fine.

Unfortunately there is no CSM options in the BIOS. Only UEFI is available.
I would be thankful for an advice on how to troublshoot the UEFI boot.
For some reason only booting with Verbose-ON works. I do not know what does it change, but it somehow works.
I do not think it's a hardware incompatibility, because otherwise it would not boot at all.
If there is no solution and nobody can check the bug in CE 2.7.1 installation it makes no sense to continue chatting. It does not even make sense to think abou upgrading to Plus version.
Thanks for your efforts

Hmm, not seen that before but I'd guess it was ultimately filesystem damage from powering off a UFS install:

WARNING: / was not properly dismounted WARNING: /: mount pending error: blocks 832 files 2172

Steve

@terryzb I upgraded using the GUI and not thru the console....no special configuration was required for me

@stephenw10 Thank you again. I will report back when i have tried your solution.
I will first wait for the software from Netgate so i have it just in case.

Yes, I would also recommend backing up the config and reinstalling as ZFS. It's the simplest way to get to 23.09 that guarantees the system will be in a clean state. And you will then be on ZFS.

It can probably be recovered but there would be at least some diagnostic commands needed to see exactly why it's failing.

Steve

@stephenw10 thanks for your sharing, bro. this machine, i just had one version upgrade from 2.6 - 2.7 by uninstalling all packages so this time i will try without installing as yours the

sokeada

@jimp said in Netgate 2100 - Update from 23.05.1 to 23.09: Firewall will not boot:

Curious that you saw partial output -- that's usually what happens if two separate processes are attached to the serial port at the same time. They'll each see ~half the output and input won't work properly. Maybe you'd attached a screen to the terminal already and detached (not quit)? Hard to say.

That sounds very plausible. I might have attached multiple processes like you say.

Maybe the guide at https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/connect-to-console.html should warn against this?

I feel like it's a pitfall for people like me that are not very familiar with the sceen command.

Of the log?

The most useful way would be to add the log text directly by copy/pasting it from the serial console if you can. Adding a link to pastebin or similar would also work.

@CC88 Backup files can be restored to a later version.
https://docs.netgate.com/pfsense/en/latest/backup/restore-different-version.html

@stephenw10 Actually, I believe the update somehow only was partially applied.

TAC sent me a link to firmware I could install from the console / USB stick, and I did this, and all is well and good now. Thanks everyone!

You need to go through 2.7.0 because that was the first version to include the dynamic pkg repos.

@pool15 said in libcrypto.so.30 and libssl.so.30 missing after updating Snort to 4.1.6_13, Pfsense CE 2.7.0-Release:

OK missed the 2.7.1 update notice! Will unwind that symlink and run the update 🤞

Yep, always login to the Dashboard page first and let it check for any available pfSense updates BEFORE you do anything with a package. If there is a pfSense update available, install that before you touch any package update.

As you found, updating a package when there is a pfSense update out there also will bring down all new versions of shared libraries. Those new versions will almost certainly break things in the existing non-upgraded pfSense installation.

@SteveITS
The nice thing about using a L3 switch is DHCP is in the switch not Pfsense so I have no issues with DHCP.

@Ofloo said in pfSense 2.7.0 CE upgrade error, just tought i'd share:

pkg update
ld-elf.so.1: Shared object "libssl.so.30" not found, required by "pkg"

I will note that that in itself is not a problem. It's an expected error if you are running 2.7.0 after 2.7.1 was released. The pkg system pulls in the new pkg version which means you need to use pkg-static update at the CLI. The pkg system itself always uses the static linked versions so doesn't hit that.

Steve

Yes, it's almost always quickest to reinstall clean from a situation like that as long as you have a config backup to restore from.

Reading this phorum it seems, that the last upgrade provide more issues... not good, ff course, create ticket.

Use pkg remove.

I meant install an mSATA drive into the 4860 and switch to booting from that instead. But if you have a complete spare unit it's not really an issue.

@Gertjan Thats quite an approach... maybe it was too much out of the box for me 😳

@stephenw10,

Here is the original post where I installed and configured the boot options. I have never changed the BBS priorities since in the BIOS.

--> [https://forum.netgate.com/topic/141300/sg-5100-verify-that-m-2-ssd-is-recognized-after-physically-installing?_=1700249887071](link url)

Again my motto at this point is "if it ain't broke - don't fix it".

Phizix

Connect to the command line (console or ssh) and then run: pkg-static upgrade.

See what it offers you. But upgrading the rest of the packages manually should get you to 23.09.

Steve

@pFence Now it works (pfSense+ 23.09).

Console access was required. cmd line upgrade via pkg upgrade allowed the device to upgrade. Was not able to detect why the prior UI upgrade did not succeed.
Thank you.
Regards,

Send me your NDI in chat and I'll check it.

@pppfsense said in Netgate 3100 - Failed Upgrade:

I continue to struggle IF to buy "official" hardware from Netgate.

Buying Netgate hardware certainly helps support the entire pfSense family, so that is a good thing!

One piece of advice that is just my personal opinion-- buy only Intel based hardware from Netgate. It seems nearly all the issues have revolved around ARM based appliances. Unfortunately, the more inexpensive appliances seem to be ARM based. The Intel platforms cost a bit more.