PHP Errors after upgrade to 2.4.4

TheNarc

At least in my case, I'm pretty sure that my PHP errors coincide with an hourly cron job that attempts to start the pfb_filter service that's part of pfBlockerNG. I say this because if I attempt to start that service manually, it provokes the exact same set of errors. I did not attempt to manually upgrade any of my packages prior to running the 2.4.3 -> 2.4.4 upgrade.
I've been in touch with BBCan17 and linked him to this thread too, since this seems potentially all related to the pfBlockerNG package.

Gertjan

@thenarc said in PHP Errors after upgrade to 2.4.4:

since this seems potentially all related to the pfBlockerNG package

Noop, see the link @jimp mentioned. Same thing happens when upgrading the recently updated package acme.
The most recent acme package also depends on PHP 7.2.

burtonmadness

As a datapoint, just took a new SG-1000, configured LAN/WAN LAN-DHCP range no additional packages, and then initiated update.
After restart after the same issues as OP, and no commands on console working apart from shell/restart

Have spare SG-1000 and will recover once the issue is fixed.

wayne622

Just to add data I do have PfBlocker, Service Watchdog, UPS and Snort installed but the error log doesnt mention any of these add-on's. For troubleshooting I uninstalled PfBlocker and installed the Dlevel version and received this:

Fatal error: Uncaught Error: Call to undefined function pfb_alerts_default_page() in /usr/local/www/pfblockerng/pfblockerng_general.php:96 Stack trace: #0 {main} thrown in /usr/local/www/pfblockerng/pfblockerng_general.php on line 96 PHP ERROR: Type: 1, File: /usr/local/www/pfblockerng/pfblockerng_general.php, Line: 96, Message: Uncaught Error: Call to undefined function pfb_alerts_default_page() in /usr/local/www/pfblockerng/pfblockerng_general.php:96 Stack trace: #0 {main} thrown

So I uninstalled the Dlevel and I am back to using the regular at least it works even though its creating all sorts of errors.

lvrmsc

@jimp said in PHP Errors after upgrade to 2.4.4:

pkg-static upgrade pfSense-upgrade

Seen https://redmine.pfsense.org/issues/8938 and ran above command. But it looks like I can't get out of that bad state triggered by having attempted upgrade of acme package before spotting there was an important system update.

What am I left with?
Is there a way to recover from this situation other than zapping the system and rebuilding anew?

lvrmsc

@lvrmsc said in PHP Errors after upgrade to 2.4.4:

@jimp said in PHP Errors after upgrade to 2.4.4:

pkg-static upgrade pfSense-upgrade

Seen https://redmine.pfsense.org/issues/8938 and ran above command. But it looks like I can't get out of that bad state triggered by having attempted upgrade of acme package before spotting there was an important system update.

What am I left with?
Is there a way to recover from this situation other than zapping the system and rebuilding anew?

I finally could run pfSense-upgrade from an ssh console and I apparently got out of the hole.

noel.alanguilan

@gertjan Not exactly. I looked over the warnings and the report and it's all related to php7.2. There was no mention of pfBlockerNG and it so happens that that package (pfBlocker) was the only one I updated.

pankajkumawat79 0

Enter following command in PfSense Console to restart the Php-Fpm service after OS version upgrade from 2.4.3 to 2.4.4

PFSense Version 2.4.3 uses Php version 5.6 and PFSense Version 2.4.4 uses Php version 7.2 as well as PFSense version 2.4.3 uses FreeBSD version 11.1 and PFSense Version 2.4.4 uses FreeBSD version 11.2

What I did to resolve the PHP errors on update is:

SSH to PFSense Console and Enter the following command to restart PHP Service:

service php-fpm onestart

I restarted this service because, some tasks might be running on the older PHP version, so the errors are there.
Most important thing you should keep in mind is that you should be authorized to restart the service.

If you are not able to SSH to PfSense console then manually connect VGA monitor and a compatible keyboard to the PfSense device --> login as root/sudo user --> run the above command

You can go through following url to check how to connect monitor and keyboard to PfSense Device:
https://www.netgate.com/docs/pfsense/solutions/xg-1541/connect-to-console.html

pankajkumawat79

@pankajkumawat79-0 When I tried to install ACME pkg on PFSense version 2.4.3, it deleted some of the php files resulting no access to webgui.

As ACME pkg required php 7.2 and my PFSense version 2.4.3 was running on PHP 5.X, it tried to update the PHP resulting in a big mess up.

What I did to fix this problem is to reinstall all packages aggressively.

"pkg update -f"
"pkg upgrade -f"

Their was a new PFSense version 2.4.4 available which runs on PHP 7.2.

It solved my issue of webgui access.

Still, some of the controls were not accessible for me in the PFSense webconsole, so I tried to run the following command in the console shell

"service php-fnm onestart"

by connecting a monitor and a keyboard to the PFSense hardware device directly.

It solved my issue and now PFSense is updated to latest version 2.4.4.

shawnloy

RE: upgrading Netgate SG-8860 from 2.4.3_1 to 2.4.4_1

First update attempt apparently downloaded a bunch of files, reported as failed, and indicated that 2.4.4_1 was available.

So, I tried to update again.
Second try succeeded after several minutes.

However, when I logged back in, I did get a long crash report listing many PHP errors:

Starting lines:

"Crash report details:

PHP Errors:
[22-Dec-2018 13:44:38 UTC] PHP Warning: Failed loading Zend extension 'opcache.so' ..."

After finding this page and reading and mostly understanding Gertjan's comments, and since it's a weekend and I can, I simply Rebooted (yes, I know how to login to the console and run a command line to just restart the service, but I thought it'd probably be a good idea to do a reboot anyway. disclaimer: there are risks and your mileage may vary, I'm generally aware of mine and what works for me may not work for you.)

No errors after reboot.

Thanks to you geniuses who keep making this relatively easier and user friendly.

Just thought I'd add my experience to the rest listed.

polkovnick

@prfoks perfect solution. You are superman bro. Thank you