23.01 no GUI after install and no outbound connectivity for clients

tiekoetter

After upgrading to 23.01 I noticed some issues:

The GUI is not available.

No client can make outbound connections (no internet and no access to site-site vpn)

When SSHing into the pfSense box I am greeted by a plain sh shell (and not tcsh. the rc.initial screen is also missing)

After executing /etc/rc.initial and choosing option 11 I can log back into the web GUI. pfSense shows all connections (WAN and VPN) are up. I did verify this by pinging.

pfSense reports some issues with PHP (see PHP_errors.log )

For now I reverted back to my 22.05 Boot Environment.
I would appreciate some help. Thanks.

stephenw10

That looks like it failed to complete the upgrade. Do you have the upgrade logs?

What packages do you have installed?

tiekoetter

@stephenw10 Thanks for your fast reply!

Upgrade logs:

[22.05-RELEASE][root@IX.bi.net.tiekoetter.net]/root: cat /cf/conf/upgrade_log.latest.txt 
>>> Setting vital flag on php74... done.
>>> Updating repositories metadata... done.
22.01 version of pfSense is available
>>> Removing vital flag from php74... done.
>>> Locking package pfSense-pkg-Avahi... done.
>>> Locking package pfSense-pkg-Service_Watchdog... done.
>>> Locking package pfSense-pkg-Status_Traffic_Totals... done.
>>> Locking package pfSense-pkg-WireGuard... done.
>>> Locking package pfSense-pkg-freeradius3... done.
>>> Locking package pfSense-pkg-iperf... done.
>>> Locking package pfSense-pkg-openvpn-client-export... done.
>>> Locking package pfSense-pkg-squid... done.
>>> Locking package pfSense-pkg-suricata... done.
>>> Upgrading necessary core packages... 
Checking for upgrades (2 candidates): .. done
Processing candidates (2 candidates): .. done
Checking integrity... done (0 conflicting)
The following 2 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
	pfSense-base: 2.6.0 -> 22.01 [pfSense-core]
	pfSense-default-config: 2.6.0 -> 22.01 [pfSense-core]

Number of packages to be upgraded: 2

The process will require 4 MiB more space.
[1/2] Upgrading pfSense-default-config from 2.6.0 to 22.01...
[1/2] Extracting pfSense-default-config-22.01: . done
[2/2] Upgrading pfSense-base from 2.6.0 to 22.01...
[2/2] Extracting pfSense-base-22.01: .. done
===> Keeping a copy of current version mtree
===> Removing schg flag from base files
===> Extracting new base tarball
===> Removing static obsoleted files
>>> Updating ldconfig... done.
>>> Upgrading necessary packages... 
Checking for upgrades (7 candidates): ....... done
Processing candidates (7 candidates): .... done
Checking integrity... done (0 conflicting)
The following 4 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
	py38-libzfs: 1.1.2021100100 [pfSense]

Installed packages to be UPGRADED:
	pfSense: 2.6.0 -> 22.01 [pfSense]
	pfSense-repo: 2.6.0_8 -> 22.01_5 [pfSense]
	wrapalixresetbutton: 0.0.8 -> 0.0.11 [pfSense]

Number of packages to be installed: 1
Number of packages to be upgraded: 3

The process will require 1 MiB more space.
[1/4] Upgrading wrapalixresetbutton from 0.0.8 to 0.0.11...
[1/4] Extracting wrapalixresetbutton-0.0.11: .......... done
[2/4] Upgrading pfSense-repo from 2.6.0_8 to 22.01_5...
[2/4] Extracting pfSense-repo-22.01_5: .......... done
[3/4] Installing py38-libzfs-1.1.2021100100...
[3/4] Extracting py38-libzfs-1.1.2021100100: ........ done
[4/4] Upgrading pfSense from 2.6.0 to 22.01...
[4/4] Extracting pfSense-22.01: ..... done
>>> Setting vital flag on pfSense... done.
>>> Unlocking package pfSense-pkg-Avahi... done.
>>> Unlocking package pfSense-pkg-Service_Watchdog... done.
>>> Unlocking package pfSense-pkg-Status_Traffic_Totals... done.
>>> Unlocking package pfSense-pkg-WireGuard... done.
>>> Unlocking package pfSense-pkg-freeradius3... done.
>>> Unlocking package pfSense-pkg-iperf... done.
>>> Unlocking package pfSense-pkg-openvpn-client-export... done.
>>> Unlocking package pfSense-pkg-squid... done.
>>> Unlocking package pfSense-pkg-suricata... done.
>>> Removing unnecessary packages... done.
>>> Cleanup pkg cache... done.
[22.05-RELEASE][root@IX.bi.net.tiekoetter.net]/root: cat /cf/conf/upgrade_log.txt 
>>> Updating repositories metadata... done.
23.01 version of pfSense is available

Installed packages:

Avahi
freeradius3
iperf
openvpn-client-export
Service_Watchdog
squid
Status_Traffic_Totals
suricata
WireGuard

I have done this upgrade two times. First via the GUI and secondly via the pfSense-upgrade command.

tiekoetter

@stephenw10 Sorry these are the old logs. I will do the upgrade again and copy the logs before I revert. Sorry for the spam.

stephenw10

No worries. Yeah that's the CE > Plus log.

I would try uninstalling Squid before you upgrade. You can reinstall it again after the upgrade and it will retain the settings.

Steve

tiekoetter

@stephenw10 I removed squid like you said and it works now! Everything is up and running but I see a lot of errors reported in upgrade_log.latest.txt.

stephenw10

Yup, a large number of errors is expected there because of the PHP version change. That log looks good though, nothing unexpected there.

tiekoetter

@stephenw10 One last question: Was it expected that squid would break the upgrade like that?

Anyways thank you so much for your help!

stephenw10

No, it should not. You probably hit this though: https://redmine.pfsense.org/issues/13680

Steve

Dobby_

@tiekoetter

After upgrading to 23.01 I noticed some issues:

The most of us all, more or less. I find out the best methods
told around here and over the internet was the following;

Fresh install 2.7 and upgrade to the 23.01 and then over CLI
upgrade to the latest version 23.01 RC
From 2.6 (zfs) to 2.7 and then to 23.01 and once more to
23.01 RC as now would be the best two ways to walk.

Upgrade > reboot > update the packets and reboot again
let went away many of the most problems of my box.