• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

some services show can't start

Plus 23.09 Development Snapshots (Retired)
5
131
27.5k
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • Y
    yon 0 @yon 0
    last edited by Oct 14, 2023, 8:28 PM

    Force pfsense to start wiregaurd, but it will stop automatically after a while

    🔒 Log in to view

    1 Reply Last reply Reply Quote 0
    • S
      stephenw10 Netgate Administrator
      last edited by Oct 14, 2023, 9:04 PM

      I would use:

      [23.09-BETA][admin@6100-3.stevew.lan]/root: ps aux | grep php_wg
root    24313   0.0  0.5  69316 44980  -  Ss   21:45     0:00.03 php_wg: WireGuard service (php_wg)
root    59822   0.0  0.0  12752  2364  0  S+   21:46     0:00.00 grep php_wg

      But it looks like you have an actual errors there.

      It's unable to add the linklocal IPv6 address:

      Oct 15 03:24:13	php_wg	22802	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/ifconfig tun_wg4 inet6 'fe80::a9b3:3fff:febe:d75a' -alias' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address'

      So that likely explains the issues you were seeing with FRR.
      But also:

      Oct 15 03:24:38	php_wg	22802	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.*PROTO.*>'' returned exit code '1', the output was ''

      If you run /sbin/route -n6 get 'default' dircetly does it return a valid default route?

      Is that the last thing logged by the php_wg process before it stops?

      Steve

      Y 3 Replies Last reply Oct 15, 2023, 4:47 AM Reply Quote 0
      • Y
        yon 0 @stephenw10
        last edited by Oct 15, 2023, 4:47 AM

        @stephenw10

        I will provide you with the latest php_wg log that I can see. I have tried to delete all fe80: address settings, but the wg service still cannot be started.

        Oct 15 12:41:33	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.*PROTO.*>'' returned exit code '1', the output was ''
Oct 15 12:41:33	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Default gateway setting frwg0 as default.
Oct 15 12:41:32	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Oct 15 12:41:31	check_reload_status	1217	Syncing firewall
Oct 15 12:41:31	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Oct 15 12:41:30	check_reload_status	1217	Syncing firewall
Oct 15 12:41:30	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Oct 15 12:41:30	check_reload_status	1217	Syncing firewall
Oct 15 12:41:29	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Oct 15 12:41:29	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Oct 15 12:41:28	check_reload_status	1217	Syncing firewall
Oct 15 12:41:28	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Oct 15 12:41:28	check_reload_status	1217	Syncing firewall
Oct 15 12:41:28	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
Oct 15 12:41:24	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Error starting gateway monitor for UKWG
Oct 15 12:41:24	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/usr/local/bin/dpinger -S -r 0 -i UKWG -B 10.18.1.2 -p /var/run/dpinger_UKWG~10.18.1.2~10.18.1.1.pid -u /var/run/dpinger_UKWG~10.18.1.2~10.18.1.1.sock -C "/etc/rc.gateway_alarm" -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 600 -L 80 10.18.1.1 >/dev/null' returned exit code '1', the output was ''
Oct 15 12:41:23	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/ifconfig tun_wg3 inet6 'fe80::32ed:b7ff:fe85:93d3' -alias' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address'
Oct 15 12:41:21	check_reload_status	1217	Syncing firewall
Oct 15 12:41:21	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Oct 15 12:41:20	check_reload_status	1217	Syncing firewall
Oct 15 12:41:20	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Oct 15 12:41:20	check_reload_status	1217	Syncing firewall
Oct 15 12:41:19	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Oct 15 12:41:18	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Oct 15 12:41:18	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Oct 15 12:41:17	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Oct 15 12:41:17	check_reload_status	1217	Syncing firewall
Oct 15 12:41:17	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
Oct 15 12:41:12	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Error starting gateway monitor for OPT7GW
Oct 15 12:41:12	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/usr/local/bin/dpinger -S -r 0 -i OPT7GW -B 10.17.2.2 -p /var/run/dpinger_OPT7GW~10.17.2.2~10.17.2.1.pid -u /var/run/dpinger_OPT7GW~10.17.2.2~10.17.2.1.sock -C "/etc/rc.gateway_alarm" -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 600 -L 80 10.17.2.1 >/dev/null' returned exit code '1', the output was ''
Oct 15 12:41:12	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/ifconfig tun_wg5 inet6 'fe80::f291:32ff:fe07:db47' -alias' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address'
Oct 15 12:41:10	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Oct 15 12:41:10	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Oct 15 12:41:09	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Oct 15 12:41:08	check_reload_status	1217	Syncing firewall
Oct 15 12:41:08	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Oct 15 12:41:08	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Oct 15 12:41:07	check_reload_status	1217	Syncing firewall
Oct 15 12:41:07	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Oct 15 12:41:07	check_reload_status	1217	Syncing firewall
Oct 15 12:41:07	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
Oct 15 12:41:03	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Error starting gateway monitor for DEwgGW
Oct 15 12:41:03	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/usr/local/bin/dpinger -S -r 0 -i DEwgGW -B 10.11.0.2 -p /var/run/dpinger_DEwgGW~10.11.0.2~10.11.0.1.pid -u /var/run/dpinger_DEwgGW~10.11.0.2~10.11.0.1.sock -C "/etc/rc.gateway_alarm" -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 600 -L 80 10.11.0.1 >/dev/null' returned exit code '1', the output was ''
Oct 15 12:41:03	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/ifconfig tun_wg4 inet6 'fe80::a9b3:3fff:febe:d75a' -alias' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address'
Oct 15 12:41:01	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Oct 15 12:41:00	check_reload_status	1217	Syncing firewall
Oct 15 12:41:00	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Oct 15 12:41:00	check_reload_status	1217	Syncing firewall
Oct 15 12:41:00	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Oct 15 12:40:59	check_reload_status	1217	Syncing firewall
Oct 15 12:40:59	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Oct 15 12:40:59	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Oct 15 12:40:58	check_reload_status	1217	Syncing firewall
Oct 15 12:40:58	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Oct 15 12:40:58	check_reload_status	1217	Syncing firewall
Oct 15 12:40:58	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
Oct 15 12:40:54	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Error starting gateway monitor for wg3GW
Oct 15 12:40:54	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/usr/local/bin/dpinger -S -r 0 -i wg3GW -B 10.15.1.2 -p /var/run/dpinger_wg3GW~10.15.1.2~10.15.1.1.pid -u /var/run/dpinger_wg3GW~10.15.1.2~10.15.1.1.sock -C "/etc/rc.gateway_alarm" -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 600 -L 80 10.15.1.1 >/dev/null' returned exit code '1', the output was ''
Oct 15 12:40:53	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/ifconfig tun_wg2 inet6 'fe80::a833:6fff:fe6c:4985' -alias' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address'
Oct 15 12:40:52	check_reload_status	1217	Syncing firewall
Oct 15 12:40:52	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Oct 15 12:40:51	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Oct 15 12:40:50	check_reload_status	1217	Syncing firewall
Oct 15 12:40:50	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Oct 15 12:40:49	check_reload_status	1217	Syncing firewall
Oct 15 12:40:49	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Oct 15 12:40:49	check_reload_status	1217	Syncing firewall
Oct 15 12:40:48	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Oct 15 12:40:48	check_reload_status	1217	Syncing firewall
Oct 15 12:40:47	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Oct 15 12:40:47	check_reload_status	1217	Syncing firewall
Oct 15 12:40:47	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
Oct 15 12:40:43	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Error starting gateway monitor for FMTv
Oct 15 12:40:43	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/usr/local/bin/dpinger -S -r 0 -i FMTv -B 10.10.2.2 -p /var/run/dpinger_FMTv~10.10.2.2~10.10.2.1.pid -u /var/run/dpinger_FMTv~10.10.2.2~10.10.2.1.sock -C "/etc/rc.gateway_alarm" -d 1 -s 500 -l 2000 -t 60000 -A 1000 -D 600 -L 80 10.10.2.1 >/dev/null' returned exit code '1', the output was ''
Oct 15 12:40:42	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/ifconfig tun_wg1 inet6 'fe80::32ed:b7ff:fe83:93d3' -alias' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address'
Oct 15 12:40:41	check_reload_status	1217	Syncing firewall
Oct 15 12:40:41	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Oct 15 12:40:40	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Oct 15 12:40:40	check_reload_status	1217	Syncing firewall
Oct 15 12:40:39	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Oct 15 12:40:39	check_reload_status	1217	Syncing firewall
Oct 15 12:40:38	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Oct 15 12:40:38	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Oct 15 12:40:37	check_reload_status	1217	Syncing firewall
Oct 15 12:40:37	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Oct 15 12:40:37	check_reload_status	1217	Syncing firewall
Oct 15 12:40:36	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
Oct 15 12:40:31	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: The command '/sbin/ifconfig tun_wg0 inet6 'fe80::981f:60ff:fee9:56d3' -alias' returned exit code '1', the output was 'ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address'
Oct 15 12:40:30	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Applied package default settings as necessary.
Oct 15 12:40:29	check_reload_status	1217	Syncing firewall
Oct 15 12:40:29	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed Unbound ACL group (WireGuard).
Oct 15 12:40:28	check_reload_status	1217	Syncing firewall
Oct 15 12:40:28	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed Unbound ACL group (WireGuard).
Oct 15 12:40:27	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed interface group (WireGuard).
Oct 15 12:40:27	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed interface group (WireGuard).
Oct 15 12:40:27	check_reload_status	1217	Syncing firewall
Oct 15 12:40:26	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] Installed earlyshellcmd(s).
Oct 15 12:40:26	check_reload_status	1217	Syncing firewall
Oct 15 12:40:26	php_wg	46096	/usr/local/pkg/wireguard/includes/wg_service.inc: Configuration Change: (system): [pfSense-pkg-WireGuard] De-installed earlyshellcmd(s).
        1 Reply Last reply Reply Quote 0
        • Y
          yon 0 @stephenw10
          last edited by yon 0 Oct 15, 2023, 4:50 AM Oct 15, 2023, 4:48 AM

          @stephenw10 said in some services show can't start:

          /sbin/route -n6 get 'default'

          [23.09-BETA][admin@]/root: /sbin/route -n6 get 'default'
route: route has not been found: No error: 0
[23.09-BETA][admin@]/root:

          i have upgrade pfsense to new version:

          23.09-BETA (amd64)
          built on Sun Oct 15 0:18:00 CST 2023
          FreeBSD 14.0-CURRENT

          Y 1 Reply Last reply Oct 15, 2023, 10:13 AM Reply Quote 0
          • Y
            yon 0 @yon 0
            last edited by Oct 15, 2023, 10:13 AM

            i can via ssh cli command add fe80 address, why pfsense can't add it?

            /sbin/ifconfig tun_wg4 inet6 fe80::a9b3:3fff:febe:d75a

tun_wg4: flags=10080c1<UP,RUNNING,NOARP,MULTICAST,LOWER_UP> metric 0 mtu 1350
	description: DEwg
	options=80000<LINKSTATE>
	inet 10.11.0.2 netmask 0xffffff00
	inet6 2602:fed:7022:b::11 prefixlen 127
	inet6 fe80::a9b3:3fff:febe:d75a%tun_wg4 prefixlen 64 scopeid 0xc
	groups: wg WireGuard
	nd6 options=101<PERFORMNUD,NO_DAD>
            S 1 Reply Last reply Oct 15, 2023, 1:47 PM Reply Quote 0
            • Y
              yon 0 @stephenw10
              last edited by yon 0 Oct 15, 2023, 10:26 AM Oct 15, 2023, 10:24 AM

              @stephenw10

              One of the causes of the problem was found. When I manually added the fe80:: address to the wiregaurd interface using the command, frr bgp sessions resumed working. The reason was that the new version of pfsenese restricted the addition of fe80 addresses.

              from frr8 start, must use linklocal IPv6 address for each interface.

              Y 1 Reply Last reply Oct 15, 2023, 10:57 AM Reply Quote 0
              • Y
                yon 0 @yon 0
                last edited by Oct 15, 2023, 10:57 AM

                🔒 Log in to view

                🔒 Log in to view

                1 Reply Last reply Reply Quote 0
                • Y
                  yon 0 @stephenw10
                  last edited by Oct 15, 2023, 11:42 AM

                  @stephenw10 said in some services show can't start:

                  @stephenw10 said in some services show can't start:

                  Ok, that is a bug I can easily replicate that.

                  https://redmine.pfsense.org/issues/14870

                  Changing the firewall gateway cannot take effect.

                  🔒 Log in to view

                  J 1 Reply Last reply Oct 15, 2023, 12:58 PM Reply Quote 0
                  • J
                    johnpoz LAYER 8 Global Moderator @yon 0
                    last edited by Oct 15, 2023, 12:58 PM

                    @yon-0 504 timeout.. The box has a load of 10 on it.. That for sure can not be normal - if it is this box is so undersized for what your wanting to do with it its pretty much useless..

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                    Y 1 Reply Last reply Oct 15, 2023, 3:31 PM Reply Quote 0
                    • S
                      stephenw10 Netgate Administrator @yon 0
                      last edited by Oct 15, 2023, 1:47 PM

                      @yon-0 said in some services show can't start:

                      i can via ssh cli command add fe80 address, why pfsense can't add it?

                      /sbin/ifconfig tun_wg4 inet6 fe80::a9b3:3fff:febe:d75a

                      Can you add it as an alias like the wg script tries to? -alias

                      When there is no v6 IP on the interface already.

                      Y 1 Reply Last reply Oct 15, 2023, 3:34 PM Reply Quote 0
                      • Y
                        yon 0 @johnpoz
                        last edited by Oct 15, 2023, 3:31 PM

                        @johnpoz said in some services show can't start:

                        @yon-0 504 timeout.. The box has a load of 10 on it.. That for sure can not be normal - if it is this box is so undersized for what your wanting to do with it its pretty much useless..

                        It is a dedicated server ,with enough spare resources . opnsense running normal now, only pfsense timeout

                        J 1 Reply Last reply Oct 16, 2023, 1:24 PM Reply Quote 0
                        • Y
                          yon 0 @stephenw10
                          last edited by Oct 15, 2023, 3:34 PM

                          @stephenw10 said in some services show can't start:

                          @yon-0 said in some services show can't start:

                          i can via ssh cli command add fe80 address, why pfsense can't add it?

                          /sbin/ifconfig tun_wg4 inet6 fe80::a9b3:3fff:febe:d75a

                          Can you add it as an alias like the wg script tries to? -alias

                          When there is no v6 IP on the interface already.

                          your mean is add this?
                          🔒 Log in to view

                          1 Reply Last reply Reply Quote 0
                          • S
                            stephenw10 Netgate Administrator
                            last edited by Oct 15, 2023, 8:29 PM

                            No I mean like it shows in the logged error:

                            @yon-0 said in some services show can't start:

                            The command '/sbin/ifconfig tun_wg3 inet6 'fe80::32ed:b7ff:fe85:93d3' -alias' returned exit code '1'

                            Y 1 Reply Last reply Oct 16, 2023, 10:52 AM Reply Quote 0
                            • Y
                              yon 0 @stephenw10
                              last edited by Oct 16, 2023, 10:52 AM

                              @stephenw10 said in some services show can't start:

                              /sbin/ifconfig tun_wg3 inet6 'fe80::32ed:b7ff:fe85:93d3' -alias

                              /sbin/ifconfig tun_wg3 inet6 'fe80::32ed:b7ff:fe85:93d3' -alias
ifconfig: ioctl (SIOCDIFADDR): Can't assign requested address
                              Y 1 Reply Last reply Oct 16, 2023, 11:12 AM Reply Quote 0
                              • Y
                                yon 0 @yon 0
                                last edited by yon 0 Oct 16, 2023, 11:14 AM Oct 16, 2023, 11:12 AM

                                23.09-BETA (amd64)
                                built on Sun Oct 15 0:18:00 CST 2023
                                FreeBSD 14.0-CURRENT

                                [23.09-BETA][admin@]/root: pfSense-upgrade -d4
ERROR: It was not possible to determine pkg remote version
>>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense-core has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!
ERROR: It was not possible to determine pfSense-upgrade remote version
ERROR: It was not possible to determine pfSense-upgrade remote version
>>> Upgrading pfSense-upgrade...
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense-core has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!
[23.09-BETA][admin@/root: pfSense-upgrade -d6
ERROR: It was not possible to determine pkg remote version
>>> Updating repositories metadata...
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense-core has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!
ERROR: It was not possible to determine pfSense-upgrade remote version
ERROR: It was not possible to determine pfSense-upgrade remote version
>>> Upgrading pfSense-upgrade...
Updating pfSense-core repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense-core has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
repository pfSense has no meta file, using default settings
pkg-static: An error occured while fetching package
pkg-static: An error occured while fetching package
Unable to update repository pfSense
Error updating repositories!

                                [23.09-BETA][admin@]/root: pkg update
Updating pfSense-core repository catalogue...
Fetching meta.conf: 100%    163 B   0.2kB/s    00:01
Fetching packagesite.pkg: 100%    2 KiB   1.6kB/s    00:01
Processing entries: 100%
pfSense-core repository update completed. 5 packages processed.
Updating pfSense repository catalogue...
Fetching meta.conf: 100%    163 B   0.2kB/s    00:01
Fetching packagesite.pkg: 100%  190 KiB 195.1kB/s    00:01
Processing entries: 100%
pfSense repository update completed. 725 packages processed.
All repositories are up to date.
                                1 Reply Last reply Reply Quote 0
                                • S
                                  stephenw10 Netgate Administrator
                                  last edited by Oct 16, 2023, 1:22 PM

                                  Hmm, pfSense-upgrade uses pkg-static for all it's commands. Try: pkg-static -d update

                                  Y 1 Reply Last reply Oct 16, 2023, 2:19 PM Reply Quote 0
                                  • J
                                    johnpoz LAYER 8 Global Moderator @yon 0
                                    last edited by Oct 16, 2023, 1:24 PM

                                    @yon-0 said in some services show can't start:

                                    It is a dedicated server ,with enough spare resources

                                    It has more than the 4 cpus I am seeing in your post? Cuz a 10 with only 4 cpus is pretty taxed.. 4 would be fully loaded with 4 cpus, and your showing a 10..

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • Y
                                      yon 0 @stephenw10
                                      last edited by Oct 16, 2023, 2:19 PM

                                      @stephenw10 said in some services show can't start:

                                      pkg-static -d update

                                      [23.09-BETA][admin@]/root: pkg-static -d update
DBG(1)[90793]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[90793]> PkgRepo: verifying update for pfSense-core
DBG(1)[90793]> PkgRepo: need forced update of pfSense-core
DBG(1)[90793]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[90793]> Request to fetch pkg+https://pfsense-plus-pkg-devel.netgate.com/pfSense_plus-v23_09_amd64-core/meta.conf
DBG(1)[90793]> curl_open
DBG(1)[90793]> Fetch: fetcher used: pkg+https
DBG(1)[90793]> curl> fetching https://pfsense-plus-pkg-devel.netgate.com/pfSense_plus-v23_09_amd64-core/meta.conf

DBG(1)[90793]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg-devel00.atx.netgate.com in the .netrc file; using defaults
*   Trying [2610:160:11:18::207]:443...
*   Trying 208.123.73.207:443...
* Connected to pfsense-plus-pkg-devel00.atx.netgate.com (2610:160:11:18::207) port 443
* ALPN: curl offers http/1.1
*  CAfile: /etc/ssl/netgate-ca.pem
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=pfSense Plus; CN=pfsense-plus-pkg-devel00.atx.netgate.com
*  start date: Oct  9 15:13:42 2023 GMT
*  expire date: Sep 15 15:13:42 2123 GMT
*  common name: pfsense-plus-pkg-devel00.atx.netgate.com (matched)
*  issuer: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=Netgate root CA; CN=Netgate root CA
*  SSL certificate verify ok.
* using HTTP/1.1
> GET /pfSense_plus-v23_09_amd64-core/meta.conf HTTP/1.1
Host: pfsense-plus-pkg-devel00.atx.netgate.com
Accept: */*
If-Modified-Since: Thu, 01 Jan 1970 00:00:00 GMT

< HTTP/1.1 200 OK
Fetching meta.conf:   0%< Server: nginx
< Date: Mon, 16 Oct 2023 14:16:06 GMT
< Content-Type: application/octet-stream
< Content-Length: 163
< Last-Modified: Mon, 16 Oct 2023 04:59:37 GMT
< Connection: keep-alive
< ETag: "652cc339-a3"
< Accept-Ranges: bytes
<
Fetching meta.conf: 100%    163 B   0.2kB/s    00:01
* Connection #0 to host pfsense-plus-pkg-devel00.atx.netgate.com left intact
DBG(1)[90793]> Request to fetch pkg+https://pfsense-plus-pkg-devel.netgate.com/pfSense_plus-v23_09_amd64-core/packagesite.pkg
DBG(1)[90793]> curl_open
DBG(1)[90793]> Fetch: fetcher used: pkg+https
DBG(1)[90793]> curl> fetching https://pfsense-plus-pkg-devel.netgate.com/pfSense_plus-v23_09_amd64-core/packagesite.pkg

DBG(1)[90793]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg-devel00.atx.netgate.com in the .netrc file; using defaults
* Found bundle for host: 0x20878f62b8d0 [serially]
* Re-using existing connection with host pfsense-plus-pkg-devel00.atx.netgate.com
> GET /pfSense_plus-v23_09_amd64-core/packagesite.pkg HTTP/1.1
Host: pfsense-plus-pkg-devel00.atx.netgate.com
Accept: */*
If-Modified-Since: Thu, 01 Jan 1970 00:00:00 GMT

< HTTP/1.1 200 OK
Fetching packagesite.pkg:   0%< Server: nginx
< Date: Mon, 16 Oct 2023 14:16:06 GMT
< Content-Type: application/octet-stream
< Content-Length: 1588
< Last-Modified: Mon, 16 Oct 2023 04:59:38 GMT
< Connection: keep-alive
< ETag: "652cc33a-634"
< Accept-Ranges: bytes
<
Fetching packagesite.pkg: 100%    2 KiB   1.6kB/s    00:01
* Connection #0 to host pfsense-plus-pkg-devel00.atx.netgate.com left intact
DBG(1)[90793]> PkgRepo: extracting packagesite.yaml of repo pfSense-core
DBG(1)[93033]> PkgRepo: extracting signature of repo in a sandbox
DBG(1)[90793]> Pkgrepo, reading new packagesite.yaml for '/var/db/pkg/repo-pfSense-core.sqlite'
Processing entries: 100%
pfSense-core repository update completed. 5 packages processed.
Updating pfSense repository catalogue...
DBG(1)[90793]> PkgRepo: verifying update for pfSense
DBG(1)[90793]> PkgRepo: need forced update of pfSense
DBG(1)[90793]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite'
DBG(1)[90793]> Request to fetch pkg+https://pfsense-plus-pkg-devel.netgate.com/pfSense_plus-v23_09_amd64-pfSense_plus_v23_09/meta.conf
DBG(1)[90793]> curl_open
DBG(1)[90793]> Fetch: fetcher used: pkg+https
DBG(1)[90793]> curl> fetching https://pfsense-plus-pkg-devel.netgate.com/pfSense_plus-v23_09_amd64-pfSense_plus_v23_09/meta.conf

DBG(1)[90793]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg-devel01.atx.netgate.com in the .netrc file; using defaults
*   Trying [2610:160:11:18::209]:443...
*   Trying 208.123.73.209:443...
* Connected to pfsense-plus-pkg-devel01.atx.netgate.com (2610:160:11:18::209) port 443
* ALPN: curl offers http/1.1
*  CAfile: /etc/ssl/netgate-ca.pem
*  CApath: /etc/ssl/certs/
* SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=pfSense Plus; CN=pfsense-plus-pkg-devel01.atx.netgate.com
*  start date: Oct  9 15:13:58 2023 GMT
*  expire date: Sep 15 15:13:58 2123 GMT
*  common name: pfsense-plus-pkg-devel01.atx.netgate.com (matched)
*  issuer: C=US; ST=Texas; L=Austin; O=Rubicon Communications, LLC (Netgate); OU=Netgate root CA; CN=Netgate root CA
*  SSL certificate verify ok.
* using HTTP/1.1
> GET /pfSense_plus-v23_09_amd64-pfSense_plus_v23_09/meta.conf HTTP/1.1
Host: pfsense-plus-pkg-devel01.atx.netgate.com
Accept: */*
If-Modified-Since: Thu, 01 Jan 1970 00:00:00 GMT

< HTTP/1.1 200 OK
Fetching meta.conf:   0%< Server: nginx
< Date: Mon, 16 Oct 2023 14:16:25 GMT
< Content-Type: application/octet-stream
< Content-Length: 163
< Last-Modified: Mon, 16 Oct 2023 04:59:25 GMT
< Connection: keep-alive
< ETag: "652cc32d-a3"
< Accept-Ranges: bytes
<
Fetching meta.conf: 100%    163 B   0.2kB/s    00:01
* Connection #0 to host pfsense-plus-pkg-devel01.atx.netgate.com left intact
DBG(1)[90793]> Request to fetch pkg+https://pfsense-plus-pkg-devel.netgate.com/pfSense_plus-v23_09_amd64-pfSense_plus_v23_09/packagesite.pkg
DBG(1)[90793]> curl_open
DBG(1)[90793]> Fetch: fetcher used: pkg+https
DBG(1)[90793]> curl> fetching https://pfsense-plus-pkg-devel.netgate.com/pfSense_plus-v23_09_amd64-pfSense_plus_v23_09/packagesite.pkg

DBG(1)[90793]> CURL> attempting to fetch from , left retry 3

* Couldn't find host pfsense-plus-pkg-devel01.atx.netgate.com in the .netrc file; using defaults
* Found bundle for host: 0x20878f6f0da0 [serially]
* Re-using existing connection with host pfsense-plus-pkg-devel01.atx.netgate.com
> GET /pfSense_plus-v23_09_amd64-pfSense_plus_v23_09/packagesite.pkg HTTP/1.1
Host: pfsense-plus-pkg-devel01.atx.netgate.com
Accept: */*
If-Modified-Since: Thu, 01 Jan 1970 00:00:00 GMT

< HTTP/1.1 200 OK
Fetching packagesite.pkg:   0%< Server: nginx
< Date: Mon, 16 Oct 2023 14:16:26 GMT
< Content-Type: application/octet-stream
< Content-Length: 195052
< Last-Modified: Mon, 16 Oct 2023 04:59:26 GMT
< Connection: keep-alive
< ETag: "652cc32e-2f9ec"
< Accept-Ranges: bytes
<
Fetching packagesite.pkg: 100%  190 KiB 195.1kB/s    00:01
* Connection #0 to host pfsense-plus-pkg-devel01.atx.netgate.com left intact
DBG(1)[90793]> PkgRepo: extracting packagesite.yaml of repo pfSense
DBG(1)[93461]> PkgRepo: extracting signature of repo in a sandbox
DBG(1)[90793]> Pkgrepo, reading new packagesite.yaml for '/var/db/pkg/repo-pfSense.sqlite'
Processing entries: 100%
pfSense repository update completed. 725 packages processed.
All repositories are up to date.
                                      1 Reply Last reply Reply Quote 0
                                      • M
                                        marcosm Netgate
                                        last edited by Oct 16, 2023, 9:37 PM

                                        If pfSense-upgrade -d4 still fails, would you share the output of: pkg-static -d rquery %v pkg?

                                        Y 1 Reply Last reply Oct 17, 2023, 11:19 AM Reply Quote 0
                                        • Y
                                          yon 0 @marcosm
                                          last edited by Oct 17, 2023, 11:19 AM

                                          @marcosm

                                          [23.09-BETA][admin@]/root: pkg-static -d rquery %v pkg
DBG(1)[49206]> pkg initialized
pkg-static: Repository pfSense-core missing. 'pkg update' required
[23.09-BETA][admin@]/root:
                                          1 Reply Last reply Reply Quote 0
                                          58 out of 131
                                          • First post
                                            58/131
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.