Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Now Available: pfSense® CE 2.8.0-RELEASE

    Scheduled Pinned Locked Moved Messages from the pfSense Team
    112 Posts 24 Posters 18.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jiri.zemanek @jiri.zemanek
      last edited by

      @jiri-zemanek Out of curiosity I installed using netgate installer ISO the 2.7.2 version and it does not even show available packages because the /usr/local/etc/pkg/repos/pfSense.conf -> /usr/local/etc/pfSense/pkg/repos/pfSense_Installer-repo-0002.conf link is broken (there is no /usr/local/etc/pfSense/pkg/repos/pfSense_Installer-repo-0002.conf file). It seems the testing department is on holiday for a long time :-D

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Seems more like you have no upstream access to pull the repo branches on either version for some reason.

        In 2.8 try running: pfSense-repoc -ND see what errors it returns.

        J 1 Reply Last reply Reply Quote 0
        • J
          jiri.zemanek @stephenw10
          last edited by

          @stephenw10 No error, just printed some system info (OS, platform, etc.). The last line some POST data.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, yet you still see no branches? If you run pfSense-repoc -NDJ it ll show you the branch JSON data you are passed.

            What hardware are you running on? What was the driver you needed to build?

            J 1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Ah, are you trying to run in Azure by any chance? Because that is not supported if so.

              1 Reply Last reply Reply Quote 0
              • P
                pfFog29
                last edited by

                I don't see the CE 2.8.0 version at all, even after a reboot. Under System/Update only "Previous Stable Version (2.7.2)" or older versions show. What am I missing?

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  You are trying to upgrade to 2.8?

                  Do you see any errors if you run: pfSense-repoc -D?

                  P 1 Reply Last reply Reply Quote 0
                  • P
                    pfFog29 @stephenw10
                    last edited by stephenw10

                    @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                    You are trying to upgrade to 2.8?

                    Yes.
                    Result of requested command "pfSense-repoc -D"
                    OS: FreeBSD
                    OS Version: 14.0-CURRENT
                    Platform: amd64
                    Product: pfSense
                    Version: 2.7.0-RELEASE
                    FS type: ufs
                    Language: en_US
                    Model: unknown hardware
                    NDI: <redacted>
                    Package prefix: pfSense-pkg-
                    Serial: (null)
                    Repo path: /usr/local/etc/pfSense
                    Request query: {"platform":"unknown hardware","os":"FreeBSD","osver":"14.0-CURRE NT","fstype":"ufs","prod":"pfSense","ver":"2.7.0-RELEASE","ed":"Community","pkgs ":"[{"name":"Avahi","ver":"2.2_4"}]"}
                    POST data: uid=9f6a16c2dfe390fc56bf&language=en_US&serial=&version=%7B%22platfor m%22%3A%22unknown+hardware%22%2C%22os%22%3A%22FreeBSD%22%2C%22osver%22%3A%2214.0 -CURRENT%22%2C%22fstype%22%3A%22ufs%22%2C%22prod%22%3A%22pfSense%22%2C%22ver%22% 3A%222.7.0-RELEASE%22%2C%22ed%22%3A%22Community%22%2C%22pkgs%22%3A%22%5B%7B%5C%2 2name%5C%22%3A%5C%22Avahi%5C%22%2C%5C%22ver%5C%22%3A%5C%222.2_4%5C%22%7D%5D%22%7 D&arch=amd64
                    failed to read the repo data.

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Oh you're on 2.7.0. You'll need to upgrade to 2.7.2 first. In general upgrades are only supported from two previous versions.

                      P 1 Reply Last reply Reply Quote 0
                      • P
                        pfFog29 @stephenw10
                        last edited by

                        @stephenw10
                        I don't understand. If I go to System/Update there is nothing newer to update to. The version showing in pic is the latest version in the drop down.
                        pfSense_System_Update_System Update.jpg

                        How to update?

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          SteveITS Galactic Empire @pfFog29
                          last edited by

                          @pfFog29 You might try https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#upgrade-not-offered-library-errors

                          Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                          When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                          Upvote 👍 helpful posts!

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            It will be the missing cert issue. Run: certctl rehash then recheck.

                            P 1 Reply Last reply Reply Quote 0
                            • P
                              pfFog29 @stephenw10
                              last edited by

                              @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                              Run: certctl rehash then recheck.

                              I ran this and and it came back permission denied.

                              Here is a pic of Certificates.
                              pfSense Certs.jpg
                              I'm no expert, but aren't these good? What do I need to do?

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                How did you run it? It should look something like:

                                [2.8.0-RELEASE][admin@t70.stevew.lan]/root: certctl rehash
certctl: Skipping untrusted certificate 66445960 (/etc/ssl/untrusted/66445960.0)
certctl: Skipping untrusted certificate 5e98733a (/etc/ssl/untrusted/5e98733a.0)
certctl: Skipping untrusted certificate 5d3033c5 (/etc/ssl/untrusted/5d3033c5.0)
certctl: Skipping untrusted certificate 7aaf71c0 (/etc/ssl/untrusted/7aaf71c0.0)
certctl: Skipping untrusted certificate 57bcb2da (/etc/ssl/untrusted/57bcb2da.0)
certctl: Skipping untrusted certificate 76cb8f92 (/etc/ssl/untrusted/76cb8f92.0)
certctl: Skipping untrusted certificate 5a7722fb (/etc/ssl/untrusted/5a7722fb.0)
certctl: Skipping untrusted certificate 4304c5e5 (/etc/ssl/untrusted/4304c5e5.0)
certctl: Skipping untrusted certificate 1636090b (/etc/ssl/untrusted/1636090b.0)
certctl: Skipping untrusted certificate 18856ac4 (/etc/ssl/untrusted/18856ac4.0)
certctl: Skipping untrusted certificate 08063a00 (/etc/ssl/untrusted/08063a00.0)
certctl: Skipping untrusted certificate 4a6481c9 (/etc/ssl/untrusted/4a6481c9.0)
certctl: Skipping untrusted certificate 03179a64 (/etc/ssl/untrusted/03179a64.0)
certctl: Skipping untrusted certificate 2e5ac55d (/etc/ssl/untrusted/2e5ac55d.0)
certctl: Skipping untrusted certificate 3e44d2f7 (/etc/ssl/untrusted/3e44d2f7.0)
certctl: Skipping untrusted certificate 18856ac4 (/etc/ssl/untrusted/18856ac4.0)
certctl: Skipping untrusted certificate 08063a00 (/etc/ssl/untrusted/08063a00.0)
certctl: Skipping untrusted certificate 57bcb2da (/etc/ssl/untrusted/57bcb2da.0)
certctl: Skipping untrusted certificate 5e98733a (/etc/ssl/untrusted/5e98733a.0)

                                And can take a while to complete, like ~1min.

                                P 2 Replies Last reply Reply Quote 0
                                • P
                                  pfFog29 @stephenw10
                                  last edited by

                                  @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                  How did you run it?

                                  I used PuTTY.

                                  S 1 Reply Last reply Reply Quote 0
                                  • S
                                    SteveITS Galactic Empire @pfFog29
                                    last edited by

                                    @pfFog29 logged in as “admin?”

                                    Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                    When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
                                    Upvote 👍 helpful posts!

                                    P 1 Reply Last reply Reply Quote 0
                                    • P
                                      pfFog29 @stephenw10
                                      last edited by

                                      @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                      It should look something like:

                                      Here are some snippets...

                                      find: -delete: unlink(/etc/ssl/certs/cd8c0d63.1): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/157753a5.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/861a399d.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/f90208f7.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/cb59f961.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/442adcac.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/c47d9980.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/0b7c536a.0): Permission denied
find: -delete: unlink(/etc/ssl/untrusted/349f2832.0): Permission denied

                                      ...

                                      install: symlink ../../../usr/share/certs/trusted/emSign_ECC_Root_CA_-_G3.pem -> /etc/ssl/certs/14bc7599.0: Permission denied
install: symlink ../../../usr/share/certs/trusted/emSign_Root_CA_-_C1.pem -> /etc/ssl/certs/406c9bb1.0: Permission denied
install: symlink ../../../usr/share/certs/trusted/emSign_Root_CA_-_G1.pem -> /etc/ssl/certs/2923b3f9.0: Permission denied
Scanning /usr/local/share/certs for certificates...
install: symlink ../../../usr/local/share/certs/ca-root-nss.crt -> /etc/ssl/certs/cd8c0d63.0: Permission denied
                                      1 Reply Last reply Reply Quote 0
                                      • P
                                        pfFog29 @SteveITS
                                        last edited by

                                        @SteveITS said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                        logged in as “admin?

                                        Yes.

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Hmm. Try running it from Diag > Command Prompt in the gui. That should always have the right permissions.

                                          If it still fails try to create any file in the filesystem. Make sure the filesystem is not read-only.

                                          P 3 Replies Last reply Reply Quote 0
                                          • P
                                            pfFog29 @stephenw10
                                            last edited by

                                            @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                            Try running it from Diag > Command Prompt in the gui.

                                            Running command seems to fail when running "certctl rehash".
                                            pfSense_Command Prompt.jpg

                                            @stephenw10 said in Now Available: pfSense® CE 2.8.0-RELEASE:

                                            If it still fails try to create any file in the filesystem. Make sure the filesystem is not read-only.

                                            Sorry, I do not have any idea what your talking about. What filesystem? Where? How would I create?

                                            stephenw10S 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.