OK missed the 2.7.1 update notice! Will unwind that symlink and run the update 🤞
Yep, always login to the Dashboard page first and let it check for any available pfSense updates BEFORE you do anything with a package. If there is a pfSense update available, install that before you touch any package update.
As you found, updating a package when there is a pfSense update out there also will bring down all new versions of shared libraries. Those new versions will almost certainly break things in the existing non-upgraded pfSense installation.
pkg update
ld-elf.so.1: Shared object "libssl.so.30" not found, required by "pkg"
I will note that that in itself is not a problem. It's an expected error if you are running 2.7.0 after 2.7.1 was released. The pkg system pulls in the new pkg version which means you need to use pkg-static update at the CLI. The pkg system itself always uses the static linked versions so doesn't hit that.
Console access was required. cmd line upgrade via pkg upgrade allowed the device to upgrade. Was not able to detect why the prior UI upgrade did not succeed.
Thank you.
Regards,
It's because the install image is multiboot, it has an EFI partition and loader, but the APU is not UEFI so the installed image on the SSD does not. The upgrade script looks for an EFI partition to update the loader and the only one on the system is on the SD card. It wouldn't happen on a UEFI system.
But that seems like a bug. It shouldn't really do that.
As an aside, I hope future Netgate products always include a hardware factory reset button in their design. The absence of such a button on the 1100 lacks customer focus and makes contending with failed upgrades and malfunctions such as this much more difficult than it has to be.
We don't always have complete and total control over every aspect of the hardware as we develop new platforms, but we do try to have a config reset button if at all possible since we know it makes things easier for users (and TAC). Plus we are always trying to make the process easier for users. Just wait until you see the reset process on the next device, it's the best one yet. :-)