Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Update Clarity

    Scheduled Pinned Locked Moved General pfSense Questions
    25 Posts 4 Posters 8.3k Views 4 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S Offline
      stephenw10 Netgate Administrator
      last edited by

      Yup it was a known bug in 2.7.0. It's fixed in 2.7.2 forward.

      1 Reply Last reply Reply Quote 0
      • zoqaskZ Offline
        zoqask
        last edited by

        Ran certctl rehash

        44e7036e-7ebe-4964-a2f2-a0c3ff18a0f9-image.png

        I now get update request. So its a case of waiting for the right time out of hours now and trying it out.

        59062c4a-75e5-403a-be28-939acb2740ec-image.png

        Out of interest, when you progress in the command line and is says saving old kernel etc. If the install fails for some reason how do you revert back to the previous version. This may be an incredibly overly simplified question but some sort of command line fu would be helpful for those of us that aren't clocking into these appliances every day.

        1 Reply Last reply Reply Quote 0
        • stephenw10S Offline
          stephenw10 Netgate Administrator
          last edited by

          You can choose to boot the old kernel at the bootloader menu. But that's only the kernel, it will still fail to boot if the rest of the system is broken.

          In ZFS you can create a snapshot boot environment before upgrading you can roll back to. Plus does that automatically.

          1 Reply Last reply Reply Quote 0
          • zoqaskZ Offline
            zoqask
            last edited by zoqask

            Morning all.

            Well it updated to 2.7.2 and appears to all work. Thats good.

            Do I have to re run the certctl rehash for 2.8? Reason I'm asking is is the dashboard said 2.8.1 is available but running 13 console update just says all the repositories are up to date and doesn't proceed with the upgrade.

            After clicking the refresh icon on the dashboard I see this. But I always use the console and don't really feel comfortable with using the gui.

            0067f5d0-91fa-4086-ba6c-4eeb60ae28e9-image.png

            Do I have to select 2.8 from the stable branch here first?

            904a3df9-7d78-48a1-8417-a19751ddafa8-image.png

            Lots of questions but this is a major jump just doing due diligence.

            patient0P 1 Reply Last reply Reply Quote 0
            • patient0P Online
              patient0 @zoqask
              last edited by

              @zoqask said in Update Clarity:

              Do I have to re run the certctl rehash for 2.8? Reason I'm asking is is the dashboard said 2.8.1 is available but running 13 console update just says all the repositories are up to date and doesn't proceed with the upgrade.

              You don't have to run rehash again, no. But you will have select the 2.8.1 branch in the GUI, System / Update / System Update beforehand.

              zoqaskZ 1 Reply Last reply Reply Quote 0
              • zoqaskZ Offline
                zoqask @patient0
                last edited by

                @patient0 thanks for that.

                I did the update and get this message at the end.

                c3f61b9a-26a6-4b0b-97fe-04429c8d6267-image.png

                Any idea if when I reboot the system will run? this may mean my temp files are taking up too much space. I just don't want to reboot and break the whole system for now.

                patient0P 1 Reply Last reply Reply Quote 0
                • patient0P Online
                  patient0 @zoqask
                  last edited by

                  @zoqask said in Update Clarity:

                  Any idea if when I reboot the system will run?

                  I'm not sure, no. I'd say it's as it is written, the EFI partition has not enough space to update the boot loader.

                  I would try what is suggested: mount the EFI partition and check for file you can delete (but not sure how to know what to delete). And search the forum for similar errors.

                  Maybe @stephenw10 has an idea what can be delete from the EFI partition, and how to run to boot code upgrade again.

                  zoqaskZ 1 Reply Last reply Reply Quote 0
                  • zoqaskZ Offline
                    zoqask @patient0
                    last edited by

                    @patient0 maybe Stephen has some ideas.

                    S 1 Reply Last reply Reply Quote 0
                    • S Offline
                      SteveITS Galactic Empire @zoqask
                      last edited by

                      @zoqask search the forum too, pretty sure Iโ€™ve seen discussions about that. Or just reinstall which will fix that and use the ZFS file system by default.

                      https://docs.netgate.com/pfsense/en/latest/backup/restore-during-install.html

                      Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to reboot, or more depending on packages, CPU, and/or disk speed.
                      Upvote ๐Ÿ‘ helpful posts!

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S Offline
                        stephenw10 Netgate Administrator
                        last edited by

                        It will probably boot with the old loader but I haven't tested that directly on CE. It's much more of an issue in arm64.

                        But I would prepare to reinstall if you have to. It's unclear from that output whether it removed the old loader. It shouldn't if it can't update it.

                        1 Reply Last reply Reply Quote 0
                        • zoqaskZ Offline
                          zoqask
                          last edited by zoqask

                          Thankfully I created an identical system hardware build in the background at time of purchase. I copied the backup from the questionable box / installed 2,8.1 and restored. It all just worked.

                          Lesson of the day for me possibly. Make a vm system on hyperv for snapshots and rollbacks. I will have a search or create another thread asking about preferred hardware. These days of hanging onto hardware boxes is over for me. Yes you have the native edge but the advantages of virtualisation seem to offer tangible advantages..

                          Thanks to all for the insight all. Lesson learnt.

                          1 Reply Last reply Reply Quote 1
                          • zoqaskZ Offline
                            zoqask
                            last edited by

                            And just to follow up on the reality of a reboot. The boot loader was broken. Good job I left it running and provisioned the second box. Then moved the cabling over. It could have been a bit a hard landing there.

                            For now I'm going to buy an M.2 cloner. Get rig 1 working in the background and clone a drive for swap out if needed. Then look into virtualising it, although that seems to be have its drawbacks. The current setup I have has the chipset for VPN offloading etc. Not sure if I will get that on a Hyper-V setup.

                            Once again thanks to those who offered a hand.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S Offline
                              stephenw10 Netgate Administrator
                              last edited by

                              Mmm, I have numerous VMs I use for testing and they are super convenient there as you can imagine but I wouldn't personally use a VM as an edge device. It adds issues if you even have a problem with the host.

                              You should just be able to reinstall the hardware and have a much larger loader partition.

                              1 Reply Last reply Reply Quote 0
                              • zoqaskZ Offline
                                zoqask
                                last edited by

                                Thats pretty much what I'm doing now. Moving from 32gb to 128gb m.2 drives. I will just as I mentioned obtain 2 128gb and clone one to the other just so I have a swap out drive to hand for a get out of jail free card. Plus I have the second identical hardware box in the background.

                                P. s I bet there are people with hyperv edge devices.๐Ÿ˜‰ cheers Stephen.

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S Offline
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Oh yes there certainly are many users running VMs as edge on all hypervisors. I just wouldn't myself. ๐Ÿ˜‰

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.