Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Update Clarity

    Scheduled Pinned Locked Moved General pfSense Questions
    20 Posts 4 Posters 1.8k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • zoqaskZ Offline
      zoqask
      last edited by zoqask

      Thanks for that so selecting 2.7.2 and running a console update should do the trick then by the sounds of it.

      I have an identical hardware box sitting in the corner. gave it a wan and it seemed to progress through the updates right up to 2.8 using the command console.

      finger crossed for this box although I can export the config over to this other box for test knowing it would actually upgrade is it should helps.

      1 Reply Last reply Reply Quote 0
      • stephenw10S Offline
        stephenw10 Netgate Administrator
        last edited by

        Yup you can go straight to 2.7.2. Then you will see 2.8.0 and can upgrade to that. Or wait for 2.8.1 real-soon-now.

        1 Reply Last reply Reply Quote 0
        • zoqaskZ Offline
          zoqask
          last edited by

          Thanks all.

          I tried it from command line and I get this t then just exits.

          *Question* Any ideas what command I can run in the shell to pull the 2.7.2? Really not sure. For some reason I think the update has borked somewhere hence the lack of dashboard notifications.

          d29760bd-c40b-4cf7-950a-e008d1da72ae-image.png

          My gui settings are

          20917ea4-6c45-4f67-90bc-edda9a5f1fff-image.png

          1 Reply Last reply Reply Quote 0
          • stephenw10S Offline
            stephenw10 Netgate Administrator
            last edited by

            Run at the command line: certctl rehash
            Then try again.

            1 Reply Last reply Reply Quote 0
            • zoqaskZ Offline
              zoqask
              last edited by

              Thanks for that. In reality and from my screenshots previous what do you think has happened to cause this?. I know you don't have a crystal ball but identifying why these updates didn't register / notify would be good the know.

              e90ad95d-5664-4a1d-9fba-b225d559b11c-image.png

              S 1 Reply Last reply Reply Quote 0
              • S Offline
                SteveITS Rebel Alliance @zoqask
                last edited by

                @zoqask Well per the link I posted above, "Due to changes in pkg, the new version of pkg may not be able to properly locate and use the CA trust store when running on the previous version before upgrading." A lot of (all) people had to run that command to be able to update.

                Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                Upvote ๐Ÿ‘ helpful posts!

                1 Reply Last reply Reply Quote 0
                • zoqaskZ Offline
                  zoqask
                  last edited by

                  Ok understood. I will try it out of hours and see if it gets a result.

                  Thanks in advance to both of you if t does๐Ÿค.

                  If it doesn't work I will post a screenshot. Hopefully if this is a common issue indeed its tried / tested and a recurring theme is the past (As you say). Having had others wipe the sweat from their brow hopefully I can as well.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S Offline
                    stephenw10 Netgate Administrator
                    last edited by

                    Yup it was a known bug in 2.7.0. It's fixed in 2.7.2 forward.

                    1 Reply Last reply Reply Quote 0
                    • zoqaskZ Offline
                      zoqask
                      last edited by

                      Ran certctl rehash

                      44e7036e-7ebe-4964-a2f2-a0c3ff18a0f9-image.png

                      I now get update request. So its a case of waiting for the right time out of hours now and trying it out.

                      59062c4a-75e5-403a-be28-939acb2740ec-image.png

                      Out of interest, when you progress in the command line and is says saving old kernel etc. If the install fails for some reason how do you revert back to the previous version. This may be an incredibly overly simplified question but some sort of command line fu would be helpful for those of us that aren't clocking into these appliances every day.

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S Offline
                        stephenw10 Netgate Administrator
                        last edited by

                        You can choose to boot the old kernel at the bootloader menu. But that's only the kernel, it will still fail to boot if the rest of the system is broken.

                        In ZFS you can create a snapshot boot environment before upgrading you can roll back to. Plus does that automatically.

                        1 Reply Last reply Reply Quote 0
                        • zoqaskZ Offline
                          zoqask
                          last edited by zoqask

                          Morning all.

                          Well it updated to 2.7.2 and appears to all work. Thats good.

                          Do I have to re run the certctl rehash for 2.8? Reason I'm asking is is the dashboard said 2.8.1 is available but running 13 console update just says all the repositories are up to date and doesn't proceed with the upgrade.

                          After clicking the refresh icon on the dashboard I see this. But I always use the console and don't really feel comfortable with using the gui.

                          0067f5d0-91fa-4086-ba6c-4eeb60ae28e9-image.png

                          Do I have to select 2.8 from the stable branch here first?

                          904a3df9-7d78-48a1-8417-a19751ddafa8-image.png

                          Lots of questions but this is a major jump just doing due diligence.

                          patient0P 1 Reply Last reply Reply Quote 0
                          • patient0P Online
                            patient0 @zoqask
                            last edited by

                            @zoqask said in Update Clarity:

                            Do I have to re run the certctl rehash for 2.8? Reason I'm asking is is the dashboard said 2.8.1 is available but running 13 console update just says all the repositories are up to date and doesn't proceed with the upgrade.

                            You don't have to run rehash again, no. But you will have select the 2.8.1 branch in the GUI, System / Update / System Update beforehand.

                            zoqaskZ 1 Reply Last reply Reply Quote 0
                            • zoqaskZ Offline
                              zoqask @patient0
                              last edited by

                              @patient0 thanks for that.

                              I did the update and get this message at the end.

                              c3f61b9a-26a6-4b0b-97fe-04429c8d6267-image.png

                              Any idea if when I reboot the system will run? this may mean my temp files are taking up too much space. I just don't want to reboot and break the whole system for now.

                              patient0P 1 Reply Last reply Reply Quote 0
                              • patient0P Online
                                patient0 @zoqask
                                last edited by

                                @zoqask said in Update Clarity:

                                Any idea if when I reboot the system will run?

                                I'm not sure, no. I'd say it's as it is written, the EFI partition has not enough space to update the boot loader.

                                I would try what is suggested: mount the EFI partition and check for file you can delete (but not sure how to know what to delete). And search the forum for similar errors.

                                Maybe @stephenw10 has an idea what can be delete from the EFI partition, and how to run to boot code upgrade again.

                                zoqaskZ 1 Reply Last reply Reply Quote 0
                                • zoqaskZ Offline
                                  zoqask @patient0
                                  last edited by

                                  @patient0 maybe Stephen has some ideas.

                                  S 1 Reply Last reply Reply Quote 0
                                  • S Offline
                                    SteveITS Rebel Alliance @zoqask
                                    last edited by

                                    @zoqask search the forum too, pretty sure Iโ€™ve seen discussions about that. Or just reinstall which will fix that and use the ZFS file system by default.

                                    https://docs.netgate.com/pfsense/en/latest/backup/restore-during-install.html

                                    Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                                    When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                                    Upvote ๐Ÿ‘ helpful posts!

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S Offline
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      It will probably boot with the old loader but I haven't tested that directly on CE. It's much more of an issue in arm64.

                                      But I would prepare to reinstall if you have to. It's unclear from that output whether it removed the old loader. It shouldn't if it can't update it.

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.