Unable to upgrade from 2.7.1 to 2.7.2 | Unmounting /boot/efi... done. | failed.

slu

I can not upgrade from 2.7.1 to 2.7.2 any idea whats wrong here?

All repositories are up to date.
Checking for upgrades (8 candidates): ........ done
Processing candidates (8 candidates): ........ done
Checking integrity... done (0 conflicting)
The following 8 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
	isc-dhcp44-relay: 4.4.3P1_3 -> 4.4.3P1_4 [pfSense]
	isc-dhcp44-server: 4.4.3P1_3 -> 4.4.3P1_4 [pfSense]
	pfSense: 2.7.1 -> 2.7.2 [pfSense]
	pfSense-base: 2.7.1 -> 2.7.2 [pfSense-core]
	pfSense-default-config: 2.7.1 -> 2.7.2 [pfSense]
	pfSense-kernel-pfSense: 2.7.1 -> 2.7.2 [pfSense-core]
	pfSense-repo: 2.7.1 -> 2.7.2 [pfSense]
	strongswan: 5.9.11_2 -> 5.9.11_3 [pfSense]

Number of packages to be upgraded: 8
>>> Downloading pkg... 

No packages are required to be fetched.
Integrity check was successful.
>>> Upgrading pfSense-boot...>>> Unmounting /boot/efi... done.
 failed.
pfSense - Serial: XXXXX

*** Welcome to pfSense 2.7.1-RELEASE (amd64) on fwvpn ***

Edit:

nda0 GPT 119G
efi 200M
freebad-ufs 115G
freebsd-swap 4G
free 248M

alethewizard

@slu

Hi.

Same issue here, but only on one upgrade from 2.7.1 to 2.7.2 and this is the only one on virtual machine (VMware ESXi).

No issues on all the other upgrades on physical appliances (both CE and Plus).

Same topic also on "23.09.1 - pfsense-boot fails to upgrade"

Thanks.

slu

@alethewizard said in Unable to upgrade from 2.7.1 to 2.7.2 | Unmounting /boot/efi... done. | failed.:

physical appliances (both CE and Plus).

In my case it is a physical CE appliance.

@alethewizard said in Unable to upgrade from 2.7.1 to 2.7.2 | Unmounting /boot/efi... done. | failed.:

Same topic also on "23.09.1 - pfsense-boot fails to upgrade"

Since it is not the exactly same error (message) I was not sure it is the same root cause.

alethewizard

@slu

Now I think it may not be a physical appliance or virtual machine issue, but it may be due to EFI.

Probably the error is the same: please check /conf/upgrade_log.txt .

slu

@alethewizard said in Unable to upgrade from 2.7.1 to 2.7.2 | Unmounting /boot/efi... done. | failed.:

Probably the error is the same: please check /conf/upgrade_log.txt .

You are right, exactly the same error!

stephenw10

So:

[1/1] Reinstalling pfSense-boot-23.09.1...
[1/1] Extracting pfSense-boot-23.09.1: .......... done
Updating the EFI loader
install: //boot/efi/efi/boot/INS@syoFrx: Input/output error
pkg-static: POST-INSTALL script failed

But with a different random filename?

slu

@stephenw10 said in Unable to upgrade from 2.7.1 to 2.7.2 | Unmounting /boot/efi... done. | failed.:

But with a different random filename?

If you mean the masked "123456" yes:

[1/1] Reinstalling pfSense-boot-2.7.2...
[1/1] Extracting pfSense-boot-2.7.2: .......... done
Updating the EFI loader
install: //boot/efi/efi/boot/INS@123456: Input/output error
pkg-static: POST-INSTALL script failed
 failed.

beatvjiking

I've encountered this on a number of systems now, both on UFS and ZFS.

install: //boot/efi/efi/boot/INS@LAoX8f: No space left on device

These were set up with default partitioning done by the pfsense installer, all machines have plenty of storage and "gpart show" shows an EFI partition size of 200M, which I'm guessing is plenty.

alethewizard

@stephenw10

Yes.

jimp

@beatvjiking said in Unable to upgrade from 2.7.1 to 2.7.2 | Unmounting /boot/efi... done. | failed.:

I've encountered this on a number of systems now, both on UFS and ZFS.
install: //boot/efi/efi/boot/INS@LAoX8f: No space left on device
These were set up with default partitioning done by the pfsense installer, all machines have plenty of storage and "gpart show" shows an EFI partition size of 200M, which I'm guessing is plenty.

What does this show for you (or anyone getting similar errors):

# df -hi /boot/efi/efi/boot/

beatvjiking

@jimp output below:

[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/root: df -hi /boot/efi/efi/boot/
Filesystem            Size    Used   Avail Capacity iused ifree %iused  Mounted on
zroot/ROOT/default    195G    966M    194G     0%     29k  407M    0%   /
[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/root:

slu

@jimp

df -hi /boot/efi/efi/boot/

Filesystem                                         Size    Used   Avail Capacity iused ifree %iused  Mounted on
/dev/gptid/123456                                  111G    2.4G    100G     2%     49k   15M    0%   /

jimp

Either those are not EFI systems or the EFI partition isn't mounted since it's showing the root slice there.

Try running mount /boot/efi before the df command.

# sysctl machdep.bootmethod
# mount /boot/efi
# df -hi /boot/efi/efi/boot/

beatvjiking

@jimp access to the efi partition seems blocked.

[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/root: sysctl machdep.bootmethod
machdep.bootmethod: UEFI
[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/root: mount /boot/efi
mount: /boot/efi: unknown special file or file system
[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/root:

jimp

@beatvjiking said in Unable to upgrade from 2.7.1 to 2.7.2 | Unmounting /boot/efi... done. | failed.:

@jimp access to the efi partition seems blocked.

[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/root: sysctl machdep.bootmethod
machdep.bootmethod: UEFI
[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/root: mount /boot/efi
mount: /boot/efi: unknown special file or file system
[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/root:

Do you have either /dev/msdosfs/EFISYS or /dev/gpt/EFISYS? If so, try this instead:

# mount_msdosfs /dev/msdosfs/EFISYS /boot/efi

Or

# mount_msdosfs /dev/gpt/EFISYS /boot/efi

Followed by the df -hi /boot/efi/efi/boot/ command.

beatvjiking

@jimp that seems to have done the trick:

[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/dev: mount_msdosfs /dev/msdosfs/EFISYS /boot/efi
[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/dev: df -hi /boot/efi/efi/boot/
Filesystem             Size    Used   Avail Capacity iused ifree %iused  Mounted on
/dev/msdosfs/EFISYS    780K    387K    393K    50%       3   509    1%   /boot/efi
[2.7.0-RELEASE][admin@pvd-dhall-1.cic.com]/dev:

seems a bit... cramped?

alethewizard

@jimp

Filesystem Size Used Avail Capacity iused ifree %iused Mounted on
/dev/msdosfs/EFISYS 779K 386K 393K 50% 3 509 1% /boot/efi

jimp

Yeah, those must be rather old installations to have an EFI partition that small. I thought we made them significantly larger several years ago.

There probably isn't going to be a safe way to upgrade those in-place given the space constraint there. You're better off reinstalling.

But with the config recovery in the installer that should only take a few minutes to do in most cases.

alethewizard

@jimp

Thank you.

My EFI partition is 200M.

Could I resize the /dev/msdosfs/EFISYS to be more than 800K?

jimp

@alethewizard said in Unable to upgrade from 2.7.1 to 2.7.2 | Unmounting /boot/efi... done. | failed.:

@jimp

Thank you.

My EFI partition is 200M.

Could I resize the /dev/msdosfs/EFISYS to be more than 800K?

We looked into doing that in an automated manner at one time, but deemed it too dangerous. While technically possible you'd spend more time doing that and possibly messing it up than you would just reinstalling and recovering the configuration.

Once upon a time the FreeBSD EFI update method involved writing out a FAT filesystem image onto the partition rather than mounting and copying files, and that image was very small since it didn't need to be much larger than the loader itself. That was ... less than ideal for a number of reasons. But it's hard to break out of that in a safe manner.