Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Loader.conf.local deleted on restart

    Scheduled Pinned Locked Moved General pfSense Questions
    23 Posts 7 Posters 4.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bkraptor
      last edited by

      This got broken with this commit. That change is insidious as it could prevent admins from getting their console to work for their specific hardware setup. I was not aware that pfSense touches /boot/loader.conf.local as I always assumed I was the one controlling that file, as is commonly expected.

      1 Reply Last reply Reply Quote 1
      • K
        kpa
        last edited by

        That is not good. The loader.conf.local file should never be touched by the firmware (the PfSense OS) no matter how good the intentions for doing so are. Validation of the file and notification of errors would be ok but silent modifications are definitely not.

        1 Reply Last reply Reply Quote 0
        • C
          chbmb
          last edited by chbmb

          I can confirm I'm seeing loader.conf.local being deleted after a reboot on the current stable release of pfSense. Here's my shell output.

          EDIT: Running on x64 hardware with a VGA install from USB.

          chbmb@thinkpad ~ $ ssh admin@192.168.0.1
Password for admin@pfSense.localdomain:
....pfSense - Netgate Device ID: xxxxxxxxxxxxxxxxxxxx

*** Welcome to pfSense 2.4.3-RELEASE-p1 (amd64) on pfSense ***

 WAN (wan)       -> pppoe0     -> v4/PPPoE: xxx.xxx.xxx.xxx/xx
 LAN (lan)       -> em1        -> v4: 192.168.0.1/24
 GUEST (opt1)    -> em1.10     -> v4: 192.168.10.1/24
 VM (opt2)       -> em1.20     -> v4: 192.168.20.1/24

 0) Logout (SSH only)                  9) pfTop
 1) Assign Interfaces                 10) Filter Logs
 2) Set interface(s) IP address       11) Restart webConfigurator
 3) Reset webConfigurator password    12) PHP shell + pfSense tools
 4) Reset to factory defaults         13) Update from console
 5) Reboot system                     14) Disable Secure Shell (sshd)
 6) Halt system                       15) Restore recent configuration
 7) Ping host                         16) Restart PHP-FPM
 8) Shell

Enter an option: 8

[2.4.3-RELEASE][admin@pfSense.localdomain]/root: dmesg | grep console
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: dmesg | grep uart
uart2: <16550 or compatible> port 0x2e0-0x2e7 irq 7 on acpi0
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: echo comconsole_port="0x2e0" > /boot/loader.conf.local
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  311296 May 10 20:06 /boot/loader
-r--r--r--  1 root  wheel    7127 May 10 20:06 /boot/loader.4th
-rw-r--r--  1 root  wheel     159 Jun  4 00:19 /boot/loader.conf
-r-xr-xr-x  1 root  wheel  402432 May 10 20:06 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 20:06 /boot/loader.help
-rw-r--r--  1 root  wheel      22 Jun  4 00:19 /boot/loader.conf.local
-r--r--r--  1 root  wheel     350 May 10 20:06 /boot/loader.rc
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: reboot

chbmb@thinkpad ~ $ ssh admin@192.168.0.1
Password for admin@pfSense.localdomain:
....pfSense - Netgate Device ID: xxxxxxxxxxxxxxxxxxxx

*** Welcome to pfSense 2.4.3-RELEASE-p1 (amd64) on pfSense ***

 WAN (wan)       -> pppoe0     -> v4/PPPoE: xxx.xxx.xxx.xxx/xx
 LAN (lan)       -> em1        -> v4: 192.168.0.1/24
 GUEST (opt1)    -> em1.10     -> v4: 192.168.10.1/24
 VM (opt2)       -> em1.20     -> v4: 192.168.20.1/24

 0) Logout (SSH only)                  9) pfTop
 1) Assign Interfaces                 10) Filter Logs
 2) Set interface(s) IP address       11) Restart webConfigurator
 3) Reset webConfigurator password    12) PHP shell + pfSense tools
 4) Reset to factory defaults         13) Update from console
 5) Reboot system                     14) Disable Secure Shell (sshd)
 6) Halt system                       15) Restore recent configuration
 7) Ping host                         16) Restart PHP-FPM
 8) Shell

Enter an option: 8

[2.4.3-RELEASE][admin@pfSense.localdomain]/root: dmesg | grep console
uart2: console (115200,n,8,1)
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  311296 May 10 20:06 /boot/loader
-r--r--r--  1 root  wheel    7127 May 10 20:06 /boot/loader.4th
-rw-r--r--  1 root  wheel     159 Jun  4 00:26 /boot/loader.conf
-r-xr-xr-x  1 root  wheel  402432 May 10 20:06 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 20:06 /boot/loader.help
-r--r--r--  1 root  wheel     350 May 10 20:06 /boot/loader.rc
          1 Reply Last reply Reply Quote 1
          • C
            chbmb
            last edited by

            As a workaround I've set the system immutable flag, which preserves loader.conf.local across reboots.

            chflags schg /boot/loader.conf.local

            Turn it off with:

            chflags noschg /boot/loader.conf.local

            1 Reply Last reply Reply Quote 1
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Curious. I'm not seeing that here. The file is touched, that timestamp matches the reboot, but the contents are the same.

              Steve

              C 1 Reply Last reply Reply Quote 0
              • C
                chbmb @stephenw10
                last edited by chbmb

                @stephenw10 said in Loader.conf.local deleted on restart:

                Curious. I'm not seeing that here. The file is touched, that timestamp matches the reboot, but the contents are the same.

                Steve

                Yeah, I see that @Derelict couldn't reproduce it either, mine is a completely fresh install of 2.4.3 and the only package I've installed is Telegraf, so I'm at a loss to explain it as well.

                Happy to try troubleshooting if anyone can think of anything.

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Try putting something else in the file, something not ever specified in loader.conf. I used:

                  legal.intel_ipw.license_ack=1
legal.intel_iwi.license_ack=1

                  Steve

                  C 1 Reply Last reply Reply Quote 0
                  • C
                    chbmb @stephenw10
                    last edited by

                    @stephenw10 said in Loader.conf.local deleted on restart:

                    Try putting something else in the file, something not ever specified in loader.conf. I used:

                    legal.intel_ipw.license_ack=1
legal.intel_iwi.license_ack=1

                    Steve

                    Interestingly, when I did that the file was persistent.

                    [2.4.3-RELEASE][admin@pfSense.localdomain]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  311296 May 10 20:06 /boot/loader
-r--r--r--  1 root  wheel    7127 May 10 20:06 /boot/loader.4th
-rw-r--r--  1 root  wheel     159 Jun  5 18:41 /boot/loader.conf
-rw-r--r--  1 root  wheel      30 Jun  7 21:30 /boot/loader.conf.local
-r-xr-xr-x  1 root  wheel  402432 May 10 20:06 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 20:06 /boot/loader.help
-r--r--r--  1 root  wheel     350 May 10 20:06 /boot/loader.rc
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: cat /boot/loader.conf.local
legal.intel_ipw.license_ack=1
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: reboot
Connection to 192.168.0.1 closed by remote host.
Connection to 192.168.0.1 closed.
chbmb@thinkpad ~ $ ssh admin@192.168.0.1
Password for admin@pfSense.localdomain:
pfSense - Netgate Device ID: xxxxxxxxxxxxxxxxxxxx

*** Welcome to pfSense 2.4.3-RELEASE-p1 (amd64) on pfSense ***

 WAN (wan)       -> pppoe0     -> v4/PPPoE: xxx.xxx.xxx.xxx/32
 LAN (lan)       -> em1        -> v4: 192.168.0.1/24
 GUEST (opt1)    -> em1.10     -> v4: 192.168.10.1/24
 VM (opt2)       -> em1.20     -> v4: 192.168.20.1/24

 0) Logout (SSH only)                  9) pfTop
 1) Assign Interfaces                 10) Filter Logs
 2) Set interface(s) IP address       11) Restart webConfigurator
 3) Reset webConfigurator password    12) PHP shell + pfSense tools
 4) Reset to factory defaults         13) Update from console
 5) Reboot system                     14) Disable Secure Shell (sshd)
 6) Halt system                       15) Restore recent configuration
 7) Ping host                         16) Restart PHP-FPM
 8) Shell

Enter an option: 8

[2.4.3-RELEASE][admin@pfSense.localdomain]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  311296 May 10 20:06 /boot/loader
-r--r--r--  1 root  wheel    7127 May 10 20:06 /boot/loader.4th
-rw-r--r--  1 root  wheel     159 Jun  7 21:33 /boot/loader.conf
-rw-r--r--  1 root  wheel      30 Jun  7 21:33 /boot/loader.conf.local
-r-xr-xr-x  1 root  wheel  402432 May 10 20:06 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 20:06 /boot/loader.help
-r--r--r--  1 root  wheel     350 May 10 20:06 /boot/loader.rc
                    1 Reply Last reply Reply Quote 0
                    • C
                      chbmb
                      last edited by chbmb

                      And then, once again, when I make my changes the file is deleted on reboot. However the changes are picked up as evidenced by dmesg | grep console at the beginning and end of the below output. However that is not the case on subsequent reboots,

                      [2.4.3-RELEASE][admin@pfSense.localdomain]/root: dmesg | grep console
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: rm /boot/loader.conf.local 
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  311296 May 10 20:06 /boot/loader
-r--r--r--  1 root  wheel    7127 May 10 20:06 /boot/loader.4th
-rw-r--r--  1 root  wheel     159 Jun  7 21:33 /boot/loader.conf
-r-xr-xr-x  1 root  wheel  402432 May 10 20:06 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 20:06 /boot/loader.help
-r--r--r--  1 root  wheel     350 May 10 20:06 /boot/loader.rc
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: echo comconsole_port="0x2e0" > /boot/loader.conf.local
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  311296 May 10 20:06 /boot/loader
-r--r--r--  1 root  wheel    7127 May 10 20:06 /boot/loader.4th
-rw-r--r--  1 root  wheel     159 Jun  7 21:33 /boot/loader.conf
-rw-r--r--  1 root  wheel      22 Jun  7 21:37 /boot/loader.conf.local
-r-xr-xr-x  1 root  wheel  402432 May 10 20:06 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 20:06 /boot/loader.help
-r--r--r--  1 root  wheel     350 May 10 20:06 /boot/loader.rc
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: reboot
Connection to 192.168.0.1 closed by remote host.
Connection to 192.168.0.1 closed.
chbmb@thinkpad ~ $ ssh admin@192.168.0.1
Password for admin@pfSense.localdomain:
....pfSense - Netgate Device ID: xxxxxxxxxxxxxxxxx

*** Welcome to pfSense 2.4.3-RELEASE-p1 (amd64) on pfSense ***

 WAN (wan)       -> pppoe0     -> v4/PPPoE: xxx.xxx.xxx.xxx/32
 LAN (lan)       -> em1        -> v4: 192.168.0.1/24
 GUEST (opt1)    -> em1.10     -> v4: 192.168.10.1/24
 VM (opt2)       -> em1.20     -> v4: 192.168.20.1/24

 0) Logout (SSH only)                  9) pfTop
 1) Assign Interfaces                 10) Filter Logs
 2) Set interface(s) IP address       11) Restart webConfigurator
 3) Reset webConfigurator password    12) PHP shell + pfSense tools
 4) Reset to factory defaults         13) Update from console
 5) Reboot system                     14) Disable Secure Shell (sshd)
 6) Halt system                       15) Restore recent configuration
 7) Ping host                         16) Restart PHP-FPM
 8) Shell

Enter an option: 8

[2.4.3-RELEASE][admin@pfSense.localdomain]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  311296 May 10 20:06 /boot/loader
-r--r--r--  1 root  wheel    7127 May 10 20:06 /boot/loader.4th
-rw-r--r--  1 root  wheel     159 Jun  7 21:38 /boot/loader.conf
-r-xr-xr-x  1 root  wheel  402432 May 10 20:06 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 20:06 /boot/loader.help
-r--r--r--  1 root  wheel     350 May 10 20:06 /boot/loader.rc
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: dmesg | grep console
uart2: console (115200,n,8,1)
                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Hmm, odd.
                        What if you add the license line first and keep the comconsole line in addition?

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          I have one box with a very similar line that has no issues but it's running 2.3.5:

                          [2.3.5-RELEASE][admin@xtm8.stevew.lan]/root: cat /boot/loader.conf.local
comconsole_port="0x2F8"
legal.intel_wpi.license_ack=1
legal.intel_ipw.license_ack=1
legal.intel_iwi.license_ack=1

                          [2.3.5-RELEASE][admin@xtm8.stevew.lan]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  262144 May 10 21:07 /boot/loader
-r--r--r--  1 root  wheel    6747 May 10 21:07 /boot/loader.4th
-rw-r--r--  1 root  wheel     133 Jun 10 17:49 /boot/loader.conf
-rw-r--r--  1 root  wheel     113 Sep 21  2017 /boot/loader.conf.local
-r-xr-xr-x  1 root  wheel  393724 May 10 21:07 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 21:07 /boot/loader.help
-r--r--r--  1 root  wheel     350 May 10 21:07 /boot/loader.rc

                          Interesting that it does not get touched at boot.....

                          Steve

                          1 Reply Last reply Reply Quote 0
                          • C
                            chbmb
                            last edited by

                            Interesting.

                            So editing the /boot/loader.conf.local to give this

                            [2.4.3-RELEASE][admin@pfSense.localdomain]/root: cat /boot/loader.conf.local
legal.intel_wpi.license_ack=1
legal.intel_ipw.license_ack=1
legal.intel_iwi.license_ack=1
comconsole_port=0x2e0

                            Then after a reboot

                            [2.4.3-RELEASE][admin@pfSense.localdomain]/root: ls -la /boot/loader*
-r-xr-xr-x  1 root  wheel  311296 May 10 21:06 /boot/loader
-r--r--r--  1 root  wheel    7127 May 10 21:06 /boot/loader.4th
-rw-r--r--  1 root  wheel     159 Jun 11 20:06 /boot/loader.conf
-rw-r--r--  1 root  wheel      90 Jun 11 20:06 /boot/loader.conf.local
-r-xr-xr-x  1 root  wheel  402432 May 10 21:06 /boot/loader.efi
-r--r--r--  1 root  wheel   14766 May 10 21:06 /boot/loader.help
-r--r--r--  1 root  wheel     350 May 10 21:06 /boot/loader.rc
[2.4.3-RELEASE][admin@pfSense.localdomain]/root: cat /boot/loader.conf.local
legal.intel_wpi.license_ack=1
legal.intel_ipw.license_ack=1
legal.intel_iwi.license_ack=1

                            So it's removing the comconsole_port=0x2e0 entry, which if there is nothing else in the file, results in it being deleted.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Do you have a comconsole_port setting in loader.conf that might be conflicting?

                              What hardware are you running on that requires this change? I wonder if it's being recognised incorrectly.

                              Steve

                              1 Reply Last reply Reply Quote 0
                              • C
                                chbmb
                                last edited by chbmb

                                No comconsole_port setting in loader.conf

                                [2.4.3-RELEASE][admin@pfSense.localdomain]/root: cat /boot/loader.conf
kern.cam.boot_delay=10000
boot_multicons="YES"
boot_serial="YES"
console="comconsole,vidconsole"
comconsole_speed="115200"
autoboot_delay="3"
hw.usb.no_pf="1"

                                Running on an i5 SBC which has multiple serial ports, but disabled all of them in BIOS except the one I'm using.

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  Hmm, we're looking into this. Should be able to come back with something shortly.

                                  Steve

                                  1 Reply Last reply Reply Quote 1
                                  • jimpJ
                                    jimp Rebel Alliance Developer Netgate
                                    last edited by

                                    Try the commit on https://redmine.pfsense.org/issues/8571 as a patch in the System Patches package. That should fix the behavior.

                                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                    Need help fast? Netgate Global Support!

                                    Do not Chat/PM for help!

                                    C 1 Reply Last reply Reply Quote 3
                                    • C
                                      chbmb @jimp
                                      last edited by

                                      @jimp @stephenw10

                                      Can confirm that patch has fixed the issue. Thanks for looking into it.

                                      [2.4.3-RELEASE][admin@pfSense.localdomain]/root: cat /boot/loader.conf.local
comconsole_port="0x2e0"
legal.intel_wpi.license_ack=1
legal.intel_ipw.license_ack=1
legal.intel_iwi.license_ack=1
                                      1 Reply Last reply Reply Quote 2
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.