pfSense 2.4.5-RELEASE-p1 Now Available

[SteveITS]

re: upgrading with packages installed:
https://docs.netgate.com/pfsense/en/latest/install/upgrade-guide.html#packages

[revengineer]

@teamits said in pfSense 2.4.5-RELEASE-p1 Now Available:

re: upgrading with packages installed:
https://docs.netgate.com/pfsense/en/latest/install/upgrade-guide.html#packages

This is NOT a user error. I wiped the drive and did a fresh install and restore the latest config. Upon reboot the package installation hands. I waited up to 20 minutes for one package to complete. There is another post reporting to have waited hours. This is not right and did not used to be this way.

[revengineer]

I meant "...package installation HANGS." (Cannot edit the post.)

[serbus]

Hello!

I guess it could seem like it is hung if it is taking more than 20 minutes. Thats a long time.

What is that they say, "The logs are the window to the soul.", or something like that...

John

[revengineer]

@serbus said in pfSense 2.4.5-RELEASE-p1 Now Available:

Hello!

I guess it could seem like it is hung if it is taking more than 20 minutes. Thats a long time.

What is that they say, "The logs are the window to the soul.", or something like that...

John

I have been using "ps aux|grep pkg-static" to verify that it was hung on a single package for that long. I was not clear if there is a better place showing additional details of the install process. Pointer appreciated and I will take a look what happened.

[Qinn]

killall pkg-static

Gave me the possibility back to upgrade, yet after I tried to install the pfBlockerNG package it go stuck again

Had to do a

killall pkg-static

To get back out again

So no solution here...

[tman222]

Upgraded two machines this past week to 2.4.5p1 from 2.4.5 and everything went smoothly. Both are baremetal installs. On one of the boxes I have some sizable IP block lists and so was happy to see that the pfctl issue is now fixed. System seems snappier and no more latency spikes. Thanks everyone for the quick turnaround on this.

[Visseroth]

@tman222 That doesn't help the few of us that are experiencing problems, but we are glad that everything went smooth for you and things are better! That indeed is nice!

[Qinn]

When I hangs

78285  0  S+      0:00.00 grep pkg
[2.4.5-RELEASE][root@pfSense.localdomain]/root: ps ax | grep 'pkg'
53675  -  IN      0:00.00 /bin/sh /etc/rc.update_pkg_metadata
56258  -  IC      0:00.01 tee -a /cf/conf/pkg_log_pfSense-pkg-pfBlockerNG-devel
56497  -  I       0:00.00 pkg-static -o EVENT_PIPE=/tmp/pfSense-upgrade.sock up
56729  -  I       0:01.74 pkg-static -o EVENT_PIPE=/tmp/pfSense-upgrade.sock up
85699  0  S+      0:00.00 grep pkg

[Rico]

Which pkg version are you guys running?
I noticed someting strange in my logs...

Jun 10 23:16:37 	php 		[pfBlockerNG] No changes to Firewall rules, skipping Filter Reload
Jun 10 23:15:00 	php 		[pfBlockerNG] Starting cron process.
Jun 10 22:20:56 	pkg-static 	pkg upgraded: 1.12.0_1 -> 1.13.2
Jun 10 22:16:40 	php 		[pfBlockerNG] No changes to Firewall rules, skipping Filter Reload
Jun 10 22:15:00 	php 		[pfBlockerNG] Starting cron process. 

This happened automatically, I wasn't at home at this time and also not logged in to the pfSense WebGUI.

-Rico

[Qinn]

@Rico Sorry can't help you I have decided to reinstall pfS and now everything is fine.

[Rico]

Well I have no problem, just wondering what differs from my setup with others having issues.

-Rico

[jimp]

The issue with the packages getting "stuck" during (re)install appears to be due to how the install process launches services/daemons from within the install functions. If the daemons are killed (or stopped and started), then pkg will continue. So likely it was stuck, and then when a cron job came along and restarted the pfBlockerNG services, then pkg was able to continue.

[revengineer]

@jimp said in pfSense 2.4.5-RELEASE-p1 Now Available:

The issue with the packages getting "stuck" during (re)install appears to be due to how the install process launches services/daemons from within the install functions. If the daemons are killed (or stopped and started), then pkg will continue. So likely it was stuck, and then when a cron job came along and restarted the pfBlockerNG services, then pkg was able to continue.

Thanks for weighing in, Jim. Is there a solution or workaround for this issue other than killing each daemon upon install? Will this require a code change for each package affected?

[jimp]

Not yet, we are still looking into it

[revengineer]

@jimp said in pfSense 2.4.5-RELEASE-p1 Now Available:

Not yet, we are still looking into it

Perfect, thank you!!!

[bimmerdriver]

Does this issue with packages also affect snort? The system I updated didn't have any packages, but one of my systems has snort, so wondering if I should hold off before updating it.

[revengineer]

@bimmerdriver said in pfSense 2.4.5-RELEASE-p1 Now Available:

Does this issue with packages also affect snort? The system I updated didn't have any packages, but one of my systems has snort, so wondering if I should hold off before updating it.

In my case snort was not affected but many other packages were. But if it's a timing thing, I may have just been lucky. Having said that, the packages did actually install and were usable after installation despite need to kill the pkg-static process.

[chudak]

@bimmerdriver
I had snort and after upgrade it shown a new version available and all went thru without any problems

[reza.mnp]

after upgrade to P1 Everything OK . no problem, just wondering L2TP server is up but clients not able connect to server.
L2TP: waiting for connection on [wan ip] 1701
l2tps started, version 5.8 (root@pfSense_v2_4_5_amd64-pfSense_v2_4_5-job-01 23:02 6-Dec-2019)
l2tps Multi-link PPP daemon for FreeBSD