SG1100 on 22.1 updated to 23.01, basically a brick

oldschoolrouterjockey

At this point theres so many issues I think its best to just downgrade back to 22.01 and load a saved config.

But currently now I can log into the GUI and the serial console says I was logged in but the GUI redirects to enter password again. I actually had to go into the serial console to enable the GUI as it was disabled after the upgrade. The router/firewall is not allowing ANY traffic through it now either. There is a console log error that I suspect is the culprit:

Configuring firewall..PHP ERROR: Type: 64, File: /usr/local/pkg/squid.inc, Line:852, Message: Array and string offset access syntax with curly braces is no longer supported

There are also some other similar "curly brace" errors elsewhere

Directly after the GUI reported the upgrade was nearly done and it and was waiting for the reboot (which after 15 min never came back up) I connected serial console and did a reboot and got TONS of PHP errors on lots of different .so files which these sorts dont show up now after a reboot.

There is a crash report:

Crash report begins.  Anonymous machine information:

arm64
14.0-CURRENT
FreeBSD 14.0-CURRENT #0 plus-RELENG_23_01-n256037-6e914874a5e: Fri Feb 10 20:28:37 UTC 2023     root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/obj/aarch64/Z3hsU8Fs/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/Free

Crash report details:

PHP Errors:
[30-Apr-2023 00:49:25 Etc/UTC] PHP Fatal error:  Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/pfblockerng/pfblockerng.inc:1013
Stack trace:
#0 /usr/local/pkg/pfblockerng/pfblockerng.inc(6466): pfb_build_if_list(true, false)
#1 /etc/inc/pkg-utils.inc(715) : eval()'d code(3): sync_package_pfblockerng()
#2 /etc/inc/pkg-utils.inc(715): eval()
#3 /etc/rc.start_packages(66): sync_package('pfBlockerNG-dev...')
#4 {main}
  thrown in /usr/local/pkg/pfblockerng/pfblockerng.inc on line 1013

No FreeBSD crash data found.

Also now after every reboot the console has lots of these types of errors:

FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
arc4random: WARNING: initial seeding bypassed the cryptographic random device be                                                                                        cause it was not yet seeded and the knob 'bypass_before_seeding' was enabled.
iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi.LIC                                                                                        ENSE.
iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /bo                                                                                        ot/loader.conf.

I have a VERY complex config, I just cannot redo it all now. I think at this point the best thing is to load 22.01 back on it and restore my config.

Is there a process for downgrade?

SteveITS

@oldschoolrouterjockey

waiting for the reboot (which after 15 min never came back up

Sorry to say, you probably didn’t wait long enough especially if a lot of packages were left installed, because it reinstalls them. Emmc storage is not that fast.

No downgrade; need to reinstall with 23.01 or you can try asking for an earlier version.
https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/reinstall-pfsense.html

On the plus side reinstalling will get you ZFS if you didn’t have it.

chrcoluk

@oldschoolrouterjockey

one of those is just a license warning, easy silence if it bothers you.

The other is a pfblockerng package issue.

oldschoolrouterjockey

I already had zfs due to support helping me upgrade from CE version to PF+ some time last year.

any reason why my backup xml doesnt work on the new version though?

SteveITS

@oldschoolrouterjockey Normally it’ll work fine. The config is forward compatible. See the version notes in https://docs.netgate.com/pfsense/en/latest/install/upgrade-guide.html.

rcoleman-netgate

@oldschoolrouterjockey said in SG1100 on 22.1 updated to 23.01, basically a brick:

PHP Errors:
[30-Apr-2023 00:49:25 Etc/UTC] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/pfblockerng/pfblockerng.inc:1013
Stack trace:
#0 /usr/local/pkg/pfblockerng/pfblockerng.inc(6466): pfb_build_if_list(true, false)
#1 /etc/inc/pkg-utils.inc(715) : eval()'d code(3): sync_package_pfblockerng()

Uninstall and reinstall pfBlockerNG

Download/install latest System Patches package.
Install all recommended patches.
Reboot.