Version 2.3.3_1 is available
-
The kernel package is locked normally on purpose (and only unlocked on upgrades). Dunno what makes the package manager think it's missing, it sure like hell wouldn't boot without kernel. Sigh…
Corrected above - at the console it didn't say missing kernel but something along the lines of wasn't updated last time because locked. Then it loaded the kernel package and updated it ok.
Also added the line from the initial updater that apparently pointed to the issue on the first run "locked … may not be modified". -
Here is version 2.3.3-RELEASE-p1 (amd64), but it showed FreeBSD 10.3-RELEASE-p16. Via the command line I made a```
pfSense-upgrade -d -
This doesn't look like a very good upgrade.
I upgraded from 2.3.2.
DNS Forwarder could not find local hostnames for dhcp-issued ip addresses anymore.
Port forwarding did not work anymore (probably because of the dns problem).
I'm no firewall expert so I reverted to my 2.3.2 slice and all is ok again. -
This doesn't look like a very good upgrade.
I upgraded from 2.3.2.
DNS Forwarder could not find local hostnames for dhcp-issued ip addresses anymore.
Port forwarding did not work anymore (probably because of the dns problem).
I'm no firewall expert so I reverted to my 2.3.2 slice and all is ok again.If your DNS failed to work after the upgrade, it wasn't a proper DNS configuration to start with.
https://redmine.pfsense.org/issues/6064Setting an appropriate search domain for the client will fix it in most cases.
-
I had these messages in the pfsense log:
filterdns failed to resolve host xxxx will retry later again.
search domain in client /etc/resolv.conf is fine:
bheinsius@kemphaan:~$ cat /etc/resolv.conf
Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf( 8 )
# DO NOT EDIT THIS FILE BY HAND – YOUR CHANGES WILL BE OVERWRITTEN
nameserver 10.0.0.1
search internal.abc.nl
bheinsius@kemphaan:~$ -
Then it doesn't match the domain on the firewall used/assumed for the hostnames. If it did, the short names would still resolve.
-
as i said before i'm no firewall expert.
can you help me where i may be missing this setting?has dns in pfsense changed from 2.3.2 to 2.3.3 causing this problem to surface in 2.3.3 and not in 2.3.2?
-
Help would be a topic for a different thread. And if you read the release notes for 2.3.3 you'll find the answer about the changes.
-
ok, thank you.
-
Updated last night through the GUI as always, but got a failed message from the GUI. The messages said packages updated but kernel failed due to locked Kernel.
SSH and and ran a shell and used pfSense-upgrade -d.
Everything seems to be working ok.
Is there anything that I did wrong? I've never seen the kernel package being locked.
Here's the output :-
>>> Updating repositories metadata... Updating pfSense-core repository catalogue... pfSense-core repository is up-to-date. Updating pfSense repository catalogue... pfSense repository is up-to-date. All repositories are up-to-date. >>> Unlocking package pfSense-kernel-pfSense... Unlocking pfSense-kernel-pfSense-2.3.3 The following 1 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: pfSense-kernel-pfSense: 2.3.3 -> 2.3.3_1 [pfSense-core] Number of packages to be upgraded: 1 15 MiB to be downloaded. **** WARNING **** Reboot will be required!! Proceed with upgrade? (y/N) y >>> Downloading upgrade packages... Updating pfSense-core repository catalogue... pfSense-core repository is up-to-date. Updating pfSense repository catalogue... pfSense repository is up-to-date. All repositories are up-to-date. Checking for upgrades (1 candidates): . done Processing candidates (1 candidates): . done The following 1 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: pfSense-kernel-pfSense: 2.3.3 -> 2.3.3_1 [pfSense-core] Number of packages to be upgraded: 1 15 MiB to be downloaded. Fetching pfSense-kernel-pfSense-2.3.3_1.txz: .......... done Checking integrity... done (0 conflicting) >>> Upgrading pfSense kernel... Checking integrity... done (0 conflicting) The following 1 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: pfSense-kernel-pfSense: 2.3.3 -> 2.3.3_1 [pfSense-core] Number of packages to be upgraded: 1 [1/1] Upgrading pfSense-kernel-pfSense from 2.3.3 to 2.3.3_1... [1/1] Extracting pfSense-kernel-pfSense-2.3.3_1: .......... done ===> Keeping a copy of current kernel in /boot/kernel.old Upgrade is complete. Rebooting in 10 seconds. Broadcast Message from admin@pfSense.paulgh.me.uk (/dev/pts/0) at 23:44 GMT... Upgrade is complete. Rebooting in 10 seconds. >>> Locking package pfSense-kernel-pfSense... Locking pfSense-kernel-pfSense-2.3.3_1 -
I upgraded via the web GUI dashboard and also received the update failed message in my browser. However, the router rebooted itself before I can get to the console and came up with the new update and all seems fine.
-
I upgraded via the web GUI dashboard and also received the update failed message in my browser. However, the router rebooted itself before I can get to the console and came up with the new update and all seems fine.
Note for readers: This is the "normal" behavior. The webGUI code that "monitors" how the upgrade is progressing (showing the log messages coming out…) is a bit too stupid and sometimes gets the idea that something in the upgrade output indicates that the upgrade has failed. But actually the upgrade process is happily detached and running in the background. Eventually the upgrade finishes its processing and kicks off a reboot.
So don't be in a panic when that happens - make yourself a cup of coffee, get a command line somewhere and run "top" to see that some interesting looking things are running, be happy when it reboots.
And yes, the webGUI needs to be made smarter at "guessing" if the upgrade failed.
-
Note for readers: This is the "normal" behavior. The webGUI code that "monitors" how the upgrade is progressing (showing the log messages coming out…) is a bit too stupid and sometimes gets the idea that something in the upgrade output indicates that the upgrade has failed. But actually the upgrade process is happily detached and running in the background. Eventually the upgrade finishes its processing and kicks off a reboot.
So don't be in a panic when that happens - make yourself a cup of coffee, get a command line somewhere and run "top" to see that some interesting looking things are running, be happy when it reboots.
And yes, the webGUI needs to be made smarter at "guessing" if the upgrade failed.
Uhm, that seems not always to be the case. Mine sat for three hours at step 6 of 7 (see my post #7), top showed nothing interesting and i rebooted after getting impatient. Also several users from the site where the updated pfSense box is installed, complained about "not having internet", due to squid being stopped during the unfinished update process.
-
The issue seems to be that the update/upgrade process is launched asynchronously from the GUI and the only monitoring the GUI does is the update log by parsing it in an ad-hoc manner and it doesn't pay any attention the status codes returned by the various sub-operations of the update/upgrade.
-
@kpa:
The issue seems to be that the update/upgrade process is launched asynchronously from the GUI and the only monitoring the GUI does is the update log by parsing it in an ad-hoc manner and it doesn't pay any attention the status codes returned by the various sub-operations of the update/upgrade.
Then maybe there should be an advice, at least for this update, to only use the console based updater until the issue is resolved ???
(no criticism, just asking). -
Initiated the update (from 2.3.3) via WebGUI and it gave me the failure message BUT it also stopped working (Internet, etc.) I reset the box and no service after that, either. I could not wait hours, so I reverted to my backup router. There is no monitor/keyboard on the pfSense computer, so I'll see when I can get to it.
Just FYI, but very disappointing.
Kamen -
My GUI upgrade hung. System still running 2.3.2, GUI showing "unable to check for updates.
ssh update doesn't work:
pkg -v
1.9.4pfSense-upgrade -d
pkg: No package(s) matching pfSense-kernel-*Updating repositories metadata…
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
ERROR: Unable to compare version of pfSense-repo -
My GUI upgrade hung. System still running 2.3.2, GUI showing "unable to check for updates.
ssh update doesn't work:
pkg -v
1.9.4pfSense-upgrade -d
pkg: No package(s) matching pfSense-kernel-*Updating repositories metadata…
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
ERROR: Unable to compare version of pfSense-repoThat looks like you have some major problem with your local pkg data. Please start a new thread, it is not related to this update.
-
My GUI upgrade hung. System still running 2.3.2, GUI showing "unable to check for updates.
ssh update doesn't work:
pkg -v
1.9.4pfSense-upgrade -d
pkg: No package(s) matching pfSense-kernel-*Updating repositories metadata…
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
ERROR: Unable to compare version of pfSense-repoThat looks like you have some major problem with your local pkg data. Please start a new thread, it is not related to this update.
I'm not so sure.
I upgraded to 2.3.3 1 and saw masses of stuff break across my install. My package manager was the main problem, it could no longer connect to check for any updates and it claimed I had no installed packages and was unable to reinstall anything. I tried both from the GUI and command line, both continued to fail. I havecompletely scrubbed and reinstalled my box three times now and I keep getting the same issue. 2.3.3 works fine. Upgrading to 2.3.3 1 leaves it in a horribly broken state where it still routes and all the basic functions are fine, but the package manager appears to broken and unable to do anything. I'm going to have to scrub this again and refuse to upgrade to 2.3.3 1 as if it can't even manage to cleanly upgrade from a fresh install then there is something wrong in there.
-
Initiated the update (from 2.3.3) via WebGUI and it gave me the failure message BUT it also stopped working (Internet, etc.) I reset the box and no service after that, either. I could not wait hours, so I reverted to my backup router. There is no monitor/keyboard on the pfSense computer, so I'll see when I can get to it.
Just FYI, but very disappointing.
KamenI had the same issue with my first upgrade. I lost both the package manager and saw breakage all over the place with loss of internet access which seemed DNS related as I could still directly ping IPs, but I couldn't find any reason for this in the logs. I tried a factory default reset but that actually made it worse a I lost even being able to reach the external internet even though again I could see no rules causing this and nothing in the logs. Three complete scrubs of the box and a fresh install leaves with me all routing functions working, but upgrading to 2.3.3 1 breaks the package manager everytime.
