Unable to check for updates from dashboard

Nibblet

@stephenw10 After doing that I end up with the same "Unable to check for updates"

This all seems to respond very quickly, like it isn't reaching out to anything across the network to come to the conclusion that it is unable to check for updates.

On a firewall I have on my home network that IS working, the update checks seem to take seconds, and a small gear cog is spinning while this happens, on these 'internal' firewalls the 'unable to check for updates' is near on immediate.

Is there something other than the SRV records that it would be trying to check for? Keeping in mind, the cli pkg-static is working fine and can happily download data, and updating packages from the GUI also works as expected - it is just the OS checks that are failing to detect a new version available, and only then partially, as the branch availability shows "Previous stable version (2.6.0 DEPRECIATED)" as well as "Current Stable Release (2.7.0-RELEASE)"

One thing I did notice though, was using pkg rather than pkg-static results in a library failure..
[2.6.0-RELEASE][admin@pfSense-firewall]/root: pkg
ld-elf.so.1: /lib/libc.so.7: version FBSD_1.7 required by /usr/local/sbin/pkg not found
[2.6.0-RELEASE][admin@pfSense-firewall]/root:

Could the widget be using pkg rather than pkg-static?

Nibblet

OK, that wasn't the case either - deciding that pkg was broken I renamed it then symlinked pkg-static to /usr/sbin/pkg and still get the same behaviour.
If I were to try to look through the sources of this widget, would anyone know where to start? (I.e - is it a separate package maybe? or is it part of the core build..?)

stephenw10

Does it upgrade to 2.7 as expected if you just run pfSense-upgrade -d ?

Nibblet

@stephenw10 I can confirm that running the pfSense-upgrade -d from the CLI does indeed work :-)
To be fair, this is probably good enough for me - as I have other methods that do work to let me know there is a new version pending

Nibblet

Also to add - version 2.7.0 also seems to have the same problem - package management works, CLI package stuff works, but the update widget immediately fails with no indication as to why.

stephenw10

And also on the System > Update page?

Nibblet

@stephenw10 That is correct, post upgrade neither the dashboard or system -> updates completes an update check and shows the same error message.

stephenw10

Check the version of repoc you have:

pkg info -x pfsense

Nibblet

@stephenw10
[2.7.0-RELEASE][admin@pfSense]/root: pkg info -x pfsense
pfSense-2.7.0
pfSense-Status_Monitoring-php82-1.8_3
pfSense-base-2.7.0
pfSense-boot-2.7.0
pfSense-default-config-2.7.0
pfSense-kernel-pfSense-2.7.0
pfSense-pkg-API-1.6
pfSense-pkg-Open-VM-Tools-10.1.0_5,1
pfSense-pkg-openvpn-client-export-1.8
pfSense-pkg-pfBlockerNG-3.2.0_5
pfSense-pkg-squid-0.4.46
pfSense-rc-2.7.0
pfSense-repo-2.7.0_2
pfSense-repoc-20230616
pfSense-upgrade-1.0_33
php82-pfSense-module-0.95

(Sorry it took a while, work got busy)

callinectes

@stephenw10 I am having the same problem. Upgrade response was working fine a few weeks ago - before 2.7.0 came out. Now, if I run pkg info -x pfsense I get: ld-elf.so.1: Shared object "libssl.so.30" not found, required by "pkg"

If I run pkg-static info -x pfSense-upgrade I get: pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
pfSense-upgrade-1.0_15

If I run pfSense-upgrade -d -c I get:

Updating repositories metadata...
pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense-core has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!
Upgrading pkg...
pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense-core has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!

Any ideas? This is happening on two separate systems - one running 2.6.0 and one running 2.7.0-devel.

Gertjan

@callinectes said in Unable to check for updates from dashboard:

If I run pfSense-upgrade -d -c I get:

Updating repositories metadata...
pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended

Can you tell us what happens when you executed the recommend action ?

callinectes

@Gertjan Thanks for the response. I assume you mean running "pkg bootstrap -f"? I cannot do that right now but will attempt later and post back.

SteveITS

@callinectes said in Unable to check for updates from dashboard:

Shared object "libssl.so.30" not found, required by "pkg"

That error often means you have tried to install or update a package with the update branch set to a later pfSense version. (it defaults to Current) That tries to update any required libraries.

https://redmine.pfsense.org/issues/10464

There are a couple suggestions in that redmine but otherwise one can reinstall and restore from backup.

stephenw10

Seeing that lib error usually only means the version of pkg has been updated. That's normal as it checks for a new version every time it looks for pfSense updates.
It shouldn't be a problem since the pfSense pkg commands all use pkg-static.

@callinectes said in Unable to check for updates from dashboard:

Updating repositories metadata...
pkg-static: Warning: Major OS version upgrade detected. Running "pkg bootstrap -f" recommended
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package

Seeing that I would try running pkg-static -d update to see what error is shown there.

callinectes

@stephenw10 Thanks for the suggestion. I received a lot of the following (too many similar entries to paste in but happy to if it would help:

Hostname pkg00-atx.netgate.com was found in DNS cache
Trying 208.123.73.207:443...
Connected to pkg00-atx.netgate.com (208.123.73.207) port 443 (#9)
ALPN: offers http/1.1
CAfile: none
CApath: /etc/ssl/certs/
SSL certificate problem: self-signed certificate in certificate chain
Closing connection 9
DBG(1)[86277]> CURL> attempting to fetch from , left retry 2
Hostname pkg01-atx.netgate.com was found in DNS cache
Trying 208.123.73.209:443...
Connected to pkg01-atx.netgate.com (208.123.73.209) port 443 (#10)
ALPN: offers http/1.1
CAfile: none
CApath: /etc/ssl/certs/
SSL certificate problem: self-signed certificate in certificate chain
Closing connection 10
DBG(1)[86277]> CURL> attempting to fetch from , left retry 1
Hostname pkg00-atx.netgate.com was found in DNS cache
Trying 208.123.73.207:443...
Connected to pkg00-atx.netgate.com (208.123.73.207) port 443 (#11)
ALPN: offers http/1.1
CAfile: none
CApath: /etc/ssl/certs/
SSL certificate problem: self-signed certificate in certificate chain
Closing connection 11
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!

stephenw10

Ah, what pfSense version are you running? That output is from the new development pkg version.

callinectes

@stephenw10 Per the dashboard "Version 2.6.0-RELEASE (amd64)"

But it was set to watch the 2.7.0 devel versions

Gertjan

@callinectes said in Unable to check for updates from dashboard:

watch the 2.7.0 devel versions

Strange.
That version doesn't exist any more since the end of June, as 'dev' became 'Release'.
On the other hand, if it can't update any more, it also can't update the list with available versions.

What about the the easy way out :
Get an USB drive, goto pfsense download - download your version 2.7.0.
Build teh USB drive.
Export the current config.
Boot the pfSEnse device from USB, install pfSense, 'all clean'.
When it reboot ... check that it shows a 'future version' (or ancient 2.6.0)
Check that the available package list populates.
Now, import your config.
Reboot.
Be very patient, as packages get installed in the background.
When you are sure it's done, do a reboot for good manners.
After reboot : test and check most needed and important system functionalities.

Make a post-it, and paste it on the pfSense box : "stay away from bleeding edge technology".

stephenw10

It is possible to recover from there but it requires some command line shenanigans.

What update branches do you see offered in System > Update?

callinectes

@stephenw10 It appears the way I would assume it would if 2.7.0 was installed. The drop down shows:

Latest stable version (v2.7.0)
DEVEL version (devel)
PREVIOUS version (v2.6.0)