can't update pfsense or install packages

mrrobot · May 26, 2023, 6:19 PM

hello,

i've been experiencing errors while trying to install packages from the package manager, i have no dns issues and i followed the "Troubleshooting a Broken pkg Database" guide but no succes

Below the result of the https://docs.netgate.com/pfsense/en/latest/troubleshooting/pkg-broken-database.html command

2.6.0-RELEASE][admin@pfSense.xxx.local]/root: /usr/local/sbin/pkg-static update -f
Updating pfSense-core repository catalogue...
pkg-static: https://packages.netgate.com/pfSense_v2_6_0_amd64-core/meta.txz: No address record
repository pfSense-core has no meta file, using default settings
pkg-static: https://packages.netgate.com/pfSense_v2_6_0_amd64-core/packagesite.pkg: No address record
pkg-static: https://packages.netgate.com/pfSense_v2_6_0_amd64-core/packagesite.txz: No address record
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: https://packages.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz: No address record
repository pfSense has no meta file, using default settings
pkg-static: https://packages.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg: No address record
pkg-static: https://packages.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz: No address record
Unable to update repository pfSense
Error updating repositories!
[2.6.0-RELEASE][admin@pfSense.bigeyesbeats.local]/root:

any suggesting or help if you may having been in this situation in the past ?

Im running 2.6.0-RELEASE on a protectli vault appliance

jimp · May 26, 2023, 6:38 PM

"no address record" can only be DNS issues or a lack of connectivity in general.

It's saying it can't resolve packages.netgate.com properly. Check which of these steps is failing for you:

$ host -t srv _https._tcp.packages.netgate.com
_https._tcp.packages.netgate.com has SRV record 10 10 443 pkg01-atx.netgate.com.
_https._tcp.packages.netgate.com has SRV record 10 10 443 pkg00-atx.netgate.com.

$ host pkg00-atx.netgate.com
pkg00-atx.netgate.com has address 208.123.73.207
pkg00-atx.netgate.com has IPv6 address 2610:160:11:18::207

$ host pkg01-atx.netgate.com
pkg01-atx.netgate.com has address 208.123.73.209
pkg01-atx.netgate.com has IPv6 address 2610:160:11:18::209

mrrobot · May 26, 2023, 6:43 PM

@jimp cant access any of the hosts

2.6.0-RELEASE][admin@pfSense.xxx.local]/root: host -t srv _https._tcp.packages.netgate.com
;; connection timed out; no servers could be reached
[2.6.0-RELEASE][admin@pfSense.xxx.local]/root: host pkg00-atx.netgate.com
;; connection timed out; no servers could be reached
[2.6.0-RELEASE][admin@pfSense.xxx.local]/root: host pkg01-atx.netgate.com
;; connection timed out; no servers could be reached

jimp · May 26, 2023, 6:48 PM

So your firewall can't resolve hosts via DNS, you need to investigate why and fix that.

mrrobot · May 26, 2023, 6:50 PM

@jimp any idea on how ?

mrrobot · May 26, 2023, 6:52 PM

@jimp i have reinstalled the system, tried different dns servers, restarted the dns resolver any of that helped

jimp · May 26, 2023, 6:55 PM

https://docs.netgate.com/pfsense/en/latest/troubleshooting/dns.html

Dobby_ · May 26, 2023, 6:59 PM

@mrrobot said in can't update pfsense or install packages:

@jimp i have reinstalled the system, tried different dns servers, restarted the dns resolver any of that helped

Is your WAN Gateway the default gateway?

mrrobot · May 27, 2023, 9:00 AM

@jimp said in can't update pfsense or install packages:

https://docs.netgate.com/pfsense/en/latest/troubleshooting/dns.html

followed the guide, everything is ok only the last part of it where i do actually have lot of blocked traffic firewall logs
login-to-view
i didn't touch the firewall rules btw

login-to-view

mrrobot · May 27, 2023, 9:32 AM

@Dobby_ said in can't update pfsense or install packages:

Gateway the default gate

yes

mrrobot · Jun 19, 2023, 7:30 PM

@Dobby_ any ideas ?

stephenw10 · Jun 19, 2023, 9:58 PM

You are still seeing DNS resolution errors?

Can you ping out by IP directly?

mrrobot · Jun 20, 2023, 6:51 AM

@stephenw10 yes even after a fresh install

stephenw10 · Jun 20, 2023, 12:01 PM

So, yes, you are still seeing DNS errors.

Can you ping out by IP directly?

mrrobot · Jun 20, 2023, 6:58 PM

@stephenw10 dns resolution works fine though login-to-view

mrrobot · Jun 20, 2023, 6:58 PM

@stephenw10 login-to-view

stephenw10 · Jun 20, 2023, 8:01 PM

So what do you see if you run?: pkg-static -d update

mrrobot · Jun 20, 2023, 8:05 PM

@stephenw10 said in can't update pfsense or install packages:
for some reason i cant put all the code, it gets reported as spam so i put the end of it

pkg-static -d update

DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.conf with opts "i"
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.conf with opts "i"
DBG(1)[94031]> Request to fetch pkg+https://packages.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz
DBG(1)[94031]> opening libfetch fetcher
DBG(1)[94031]> Fetch > libfetch: connecting
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz with opts "i"
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz with opts "i"
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz with opts "i"
pkg-static: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz: No route to host
repository pfSense has no meta file, using default settings
DBG(1)[94031]> Request to fetch pkg+https://packages.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg
DBG(1)[94031]> opening libfetch fetcher
DBG(1)[94031]> Fetch > libfetch: connecting
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg with opts "i"
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg with opts "i"
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg with opts "i"
pkg-static: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg: No route to host
DBG(1)[94031]> Request to fetch pkg+https://packages.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz
DBG(1)[94031]> opening libfetch fetcher
DBG(1)[94031]> Fetch > libfetch: connecting
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz with opts "i"
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz with opts "i"
DBG(1)[94031]> Fetch: fetching from: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz with opts "i"
pkg-static: https://pkg01-atx.netgate.com/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz: No route to host
Unable to update repository pfSense
Error updating repositories!
[2.6.0-RELEASE][admin@xxxxx]/root:

stephenw10 · Jun 20, 2023, 8:19 PM

@mrrobot said in can't update pfsense or install packages:

No route to host

Ok, so it has no route. Check Diag > Routes. Make sure there's a valid default route.

Steve

mrrobot · Jun 20, 2023, 10:12 PM

@stephenw10 how do i know that the default route is valid ?

my wan interface ip is the one ending with 228 and its a public ip

looks like my isp giving me x.x.x.228 defaulting to a x.x.x.229 gateway

login-to-view