To do 25.07 or not?! That is the question!

provels

@Zermus Same thing here on physical. Oh, well.

Gertjan

Same thing here : SG-4100 and it really looks like 25.07 was build for it
Its up and running now for two days, all is well, nothing goes of the charts.
Captive portal clients can still connect (its high season) - no one is yelling here.

@mcury said in To do 25.07 or not?! That is the question!:

Service_Watchdog

Really ? The best known system killer out there.

It has been ages for me that processes died on me.

edit : ah, ok, Rebel Alliance - I get it ;)

mcury

@Gertjan said in To do 25.07 or not?! That is the question!:

Same thing here : SG-4100 and it really looks like 25.07 was build for it

Indeed =)

It has been ages for me that processes died on me.

In version 24.11, I had issues with the NUT service failing to start on boot. That's why the service watchdog, only for NUT.
I’ll try disabling it in this new version 25.07 to see how that goes now.

edit : ah, ok, Rebel Alliance - I get it ;)

ahahahah, nothing like fresh adrenaline in the morning

Edit:

One thing I noticed is the disk IO decreased?
iostat -x is showing now around 50, it was around 75 before, can you confirm ?

Gertjan

@mcury said in To do 25.07 or not?! That is the question!:

In version 24.11, I had issues with the NUT service failing to start on boot. That's why the service watchdog, only for NUT.
I’ll try disabling it in this new version 25.07 to see how that goes now.

Wait .....
Thanks !!
I still see that : after a upgrade-reboot and normal reboot (?) the UPS service is shown down on the dashboard. After hitting 'Save' on the Services > UPS > Settings page, it's up and running. Never actually took some time to investigate why it doesn't start on boot.
So, I could (ab)use the "service watchdog" for this .... interesting
Thanks again for the suggestion.

JD 0

I saw similar behavior in NUT several releases back (don't recall which). But it's not resurfaced since. The instance running is polling the UPS over SNMP.

Zermus

FWIW doing a "pfSense-upgrade -d" from CLI fixes this for me and does the upgrade properly. Not sure why that works and the GUI fails lol. I did have to rebuild my base packages. Here is what ChatGPT had to say about it. I had the same problem, two different locations, network providers, etc. One is in a datacenter with multiple network redundancies so I doubt it was a network issue.

Root cause:
The core problem was due to an incomplete or partially failed upgrade from pfSense 24.11 to 25.07. The missing critical libraries (libmd.so.7), corrupted package repositories, and broken package signatures indicate that some part of the upgrade script was interrupted, incomplete, or encountered dependency conflicts.
Specific indicators of broken upgrade:
Missing libraries (libmd.so.7) causing package operations to fail.

Missing critical files (/usr/local/sbin/read_global_var, /usr/local/libexec/pfSense-upgrade, and /etc/version) indicate that pfSense-base or core packages were only partially upgraded.

Invalid or broken repository signatures (pkg-static: Error loading trusted certificates) point to repository configuration or trust issues post-upgrade.

Dependency conflicts (IGNORE_OSVERSION prompts) clearly indicated version mismatches due to packages from different pfSense/FreeBSD versions.

AndyRH

Updated my 7100. Took less than 5 minutes.

For some unknown reason the CPU usage has dropped. Even with a speed test pushing 1.29Gb the CPU only gets to about 50%. Yesterday that same test was pushing 80%. Crazy...

stephenw10

Hmm, what version were you seeing 80% usage in?

AndyRH

@stephenw10 24.11 would idle above 30% and speed test would push it over 80%. The only change was the upgrade.
I never saw a performance problem so I never chased it.
For a short time I had 2Gb internet and it would hit 100% pushing 2.5Gb which was the limit of the test machine.

stephenw10

Hmm, interesting! PPPoE WAN with the new driver maybe?

AndyRH

@stephenw10 Fiber straight into the 7100. Nothing funky. No heavy packages.
With no performance hit I did not see a reason to chase it.

Someone fixed something and made it better.

In theory I could boot the old image and Clonezilla the disk.

stephenw10

@AndyRH said in To do 25.07 or not?! That is the question!:

Someone fixed something and made it better.

I'll take it.