Unable to upgrade my SG-2220
-
Hello all:
Updated
I tried upgrading via the gui, with the "Latest stable version (2.4.x)" as well as the "Previous Stable Version" selected under Firmware Branch, but get the following:
Confirmation Required to update pfSense system.
Current Base System
Latest Base System
Retrieving Unable to check for updatesAt the CLI, I tried to upgrade via console,with the following results:
/root: pkg-static info -x pfSense-upgrade pfSense-upgrade-0.69/root: pkg-static clean -ay The following package files will be deleted: /var/cache/pkg/pfSense-upgrade-0.27.txz ... /var/cache/pkg/pfSense-repo-2.4.4_12.txz The cleanup will free 88 MiB Deleting files: 100% All done/root: pkg-static install -fy pkg pfSense-repo pfSense-upgrade Updating pfSense-core repository catalogue... pfSense-core repository is up to date. Updating pfSense repository catalogue... pfSense repository is up to date. All repositories are up to date. Updating database digests format: 100% The following 3 package(s) will be affected (of 0 checked): Installed packages to be DOWNGRADED: pkg: 1.15.6 -> 1.10.5_6 [pfSense] Installed packages to be REINSTALLED: pfSense-repo-2.4.4_12 [pfSense] pfSense-upgrade-0.69 [pfSense] Number of packages to be reinstalled: 2 Number of packages to be downgraded: 1 The operation will free 2 MiB. 3 MiB to be downloaded. [1/3] Fetching pkg-1.10.5_6.txz: 100% 3 MiB 1.6MB/s 00:02 [2/3] Fetching pfSense-repo-2.4.4_12.txz: 100% 6 KiB 5.8kB/s 00:01 [3/3] Fetching pfSense-upgrade-0.69.txz: 100% 14 KiB 14.0kB/s 00:01 Checking integrity... done (0 conflicting) [1/3] Reinstalling pfSense-upgrade-0.69... [1/3] Extracting pfSense-upgrade-0.69: 100% [2/3] Downgrading pkg from 1.15.6 to 1.10.5_6... [2/3] Extracting pkg-1.10.5_6: 100% You may need to manually remove /usr/local/etc/pkg.conf if it is no longer needed. [3/3] Reinstalling pfSense-repo-2.4.4_12... [3/3] Extracting pfSense-repo-2.4.4_12: 100%/root: pkg-static bootstrap -f pkg(8) is already installed. Forcing reinstallation through pkg(7). The package management tool is not yet installed on your system. Do you want to fetch and install it now? [y/N]: y Bootstrapping pkg from pkg+https://firmware.netgate.com/pkg/pfSense_factory-v2_4_4_amd64-pfSense_factory-v2_4_4, please wait... pkg: /usr/local/share/pfSense/keys/pkg/revoked/.empty: invalid chunk added Verifying signature with trusted certificate pkg.pfsense.org.20160406... done pkg-static: warning: database version 35 is newer than libpkg(3) version 34, but still compatible Installing pkg-1.10.5_6... Newer FreeBSD version for package pkg: To ignore this error set IGNORE_OSVERSION=yes - package: 1102000 - running kernel: 1003000 Allow missmatch now?[Y/n]: y package pkg is already installed, forced install Extracting pkg-1.10.5_6: 100%/root: pkg-static update -f Updating pfSense-core repository catalogue... Fetching meta.conf: 100% 163 B 0.2kB/s 00:01 Fetching packagesite.txz: 100% 2 KiB 2.2kB/s 00:01 Processing entries: 100% pfSense-core repository update completed. 14 packages processed. Updating pfSense repository catalogue... pkg-static: Repository pfSense has a wrong packagesite, need to re-create database Fetching meta.conf: 100% 163 B 0.2kB/s 00:01 Fetching packagesite.txz: 100% 145 KiB 148.9kB/s 00:01 Processing entries: 0% pkg-static: Newer FreeBSD version for package pfSense-builder: To ignore this error set IGNORE_OSVERSION=yes - package: 1103507 - running kernel: 1003000 pkg-static: repository pfSense contains packages for wrong OS version: FreeBSD:11:amd64 Processing entries: 100% Unable to update repository pfSense Error updating repositories!Enter an option: 13 >>> Updating repositories metadata... Updating pfSense-core repository catalogue... pfSense-core repository is up to date. Updating pfSense repository catalogue... pkg-static: Repository pfSense has a wrong packagesite, need to re-create database Fetching meta.conf: . done Fetching packagesite.txz: .......... done Processing entries: pkg-static: Newer FreeBSD version for package pfSense-builder: To ignore this error set IGNORE_OSVERSION=yes - package: 1103507 - running kernel: 1003000 pkg-static: repository pfSense contains packages for wrong OS version: FreeBSD:11:amd64 Processing entries... done Unable to update repository pfSense Error updating repositories! >>> Locking package pkg... done. ERROR: Unable to compare version of pfSense-repoI tried to do a pkg update and I get an error stating that I have packages for version 11:
pfSense-upgrade -d -c >>> Updating repositories metadata... Updating pfSense-core repository catalogue... pfSense-core repository is up to date. Updating pfSense repository catalogue... pkg-static: Repository pfSense has a wrong packagesite, need to re-create database Fetching meta.conf: . done Fetching packagesite.txz: .......... done Processing entries: pkg-static: Newer FreeBSD version for package pfSense-builder: To ignore this error set IGNORE_OSVERSION=yes - package: 1103507 - running kernel: 1003000 pkg-static: repository pfSense contains packages for wrong OS version: FreeBSD:11:amd64 Processing entries... done Unable to update repository pfSense Error updating repositories! ERROR: Unable to compare version of pfSense-repo [2.3.4-RELEASE]/conf: cat upgrade_log.txt >>> Updating repositories metadata... failed. ERROR: It was not possible to determine pkg remote version ERROR: It was not possible to determine pfSense-repo remote version ERROR: Unable to compare version of pfSense-repo [2.3.4-RELEASE]/root: pkg-static clean -ay pkg-static: Repository pfSense missing. 'pkg update' required pkg-static: No package database installed. Nothing to do! [2.3.4-RELEASE][root@recluse2.localdomain]/root: pkg update Shared object "libelf.so.2" not found, required by "pkg" [2.3.4-RELEASE]/root: pkg install -y pfSense-upgrade Shared object "libelf.so.2" not found, required by "pkg"I deleted the repo-pfSense-core.sqlite and tried to reboot and have it update the repo, but that did not help.
Disk space is good - 32% Capacity:
/root: df -h
Filesystem Size Used Avail Capacity Mounted on /dev/ufsid/56a1835d9af3fd49 2.4G 727M 1.5G 32% / devfs 1.0K 1.0K 0B 100% /dev /dev/md0 3.4M 96K 3.0M 3% /var/run devfs 1.0K 1.0K 0B 100% /var/dhcpd/devnslookup appears good:
/root: nslookup firmware.netgate.com Server: 192.168.0.2 Address: 192.168.0.2#53 Non-authoritative answer: Name: firmware.netgate.com Address: 162.208.119.40 Name: firmware.netgate.com Address: 162.208.119.41 Name: firmware.netgate.com Address: 2607:ee80:10::119:40 Name: firmware.netgate.com Address: 2607:ee80:10::119:41 telnet firmware.netgate.com 443 Trying 162.208.119.41... Connected to firmware.netgate.com. Escape character is '^]'.Tried upgrading my FreeBSD 10.3p19, but that also fails
/root: freebsd-update fetch freebsd-update: Command not found.Any ideas? Download an image to thumbdrive and upgrade from the front? If so, should I go straight to 2.5?
Thanks, in advance.
-
The fastest way out : contact Netgate support.
They will send you a latest version of pfSense. -
@discarn8 I had the same problem, it looks like your localhost has no internet. check in the console ping 8.8.8.8 and ping google.com. If first one is working and second one not, then its a DNS problem, if both are not working, it´s a gateway problem.
-
@gertjan Thank you, sir. As mentioned in my original post - I have tried that and was unable to get anywhere with it. Thank you, once again.
-
@aschenbecher - Hello and thank you for the assist. I am able to ping 1.1.1.1 - both from the gui as well as from a shell via ssh or via term session.
/root: ping 1.1.1.1 PING 1.1.1.1 (1.1.1.1): 56 data bytes 64 bytes from 1.1.1.1: icmp_seq=0 ttl=57 time=10.488 ms 64 bytes from 1.1.1.1: icmp_seq=1 ttl=57 time=10.397 msas well as being able to ssh into the netgate firmware host
/root: nslookup firmware.netgate.com Server: 192.168.0.2 Address: 192.168.0.2#53 Non-authoritative answer: Name: firmware.netgate.com Address: 162.208.119.40 Name: firmware.netgate.com Address: 162.208.119.41 Name: firmware.netgate.com Address: 2607:ee80:10::119:40 Name: firmware.netgate.com Address: 2607:ee80:10::119:41 telnet firmware.netgate.com 443 Trying 162.208.119.41... Connected to firmware.netgate.com. Escape character is '^]'.Thank you, again
-
@discarn8 can you ping www.google.com as well?
-
@aschenbecher nvm, you did a nslookup already ...
-
@aschenbecher - Sorry - I'm not a fan of google. May I choose an alternate target? Cloudflare, perhaps? If it is the same objective, then yes - I am able to ping that host:
/root: ping cloudflare.com PING cloudflare.com (104.16.132.229): 56 data bytes 64 bytes from 104.16.132.229: icmp_seq=0 ttl=57 time=9.985 ms 64 bytes from 104.16.132.229: icmp_seq=1 ttl=57 time=23.062 ms 64 bytes from 104.16.132.229: icmp_seq=2 ttl=57 time=9.672 msThank you very much for the assist
-
@discarn8 well, I just saw you are using a really old version of pfsense, right? its 2.3?
Maybe you will find something helpful here:
https://docs.netgate.com/pfsense/en/latest/install/upgrade-guide-versions.html#upgrading-from-versions-older-than-pfsense-2-4-0but it looks like you have to do a fresh install (dont use 2.5 :D )
-
@aschenbecher here you will find instructions for fresh install:
https://docs.netgate.com/pfsense/en/latest/solutions/sg-2220/reinstall-pfsense.html
do a backup of your config before ;)
-
@aschenbecher - Hello - Yes, that is correct. I am admittedly, using an antiquated version. I bought it used and wanted to get it up to date as quick as possible as it is replacing a 3rd party hardware solution running pfsense 2.4 that continuously powers off at random times. My goal to update the Netgate device to the 21st century is what brought me here, but I'm not getting very far with it.
I suspected as much - it would require booting with a downloaded image via USB drive. Thank you very much for addressing the 2.5 question. I was not sure whether to upgrade to the latest or stay with the 2.4.
I'll go take a look at the link you sent, again [I have read it a couple of times, thus far - but it will not hurt to read it again], and then peruse the available images for download and try an install via the front USB port.
Thank you, very much.
-
@aschenbecher said in Unable to upgrade my SG-2220:
https://docs.netgate.com/pfsense/en/latest/solutions/sg-2220/reinstall-pfsense.html
Thank you, very much and for the advice to back up my config. Currently, it is not in use and barely configured, so I will not lose anything. I'll head over and check that re-install page out.
Again - thank you for the help
-
@aschenbecher said in Unable to upgrade my SG-2220:
https://docs.netgate.com/pfsense/en/latest/solutions/sg-2220/reinstall-pfsense.html
As for utilizing the https://docs.netgate.com/pfsense/en/latest/solutions/sg-2220/reinstall-pfsense.html link, I have viewed this document and have indeed tried contacting Netgate support to open a ticket but that was futile. I have, as of yet, been unable to create an account, by which to create a ticket. Each time I attempt to login to the site, I am told my password is invalid. If I select "Forgot my password", I am given the opportunity to request a link to reset my password via email. I complete this form and never receive the email. If I attempt to create a new account, I am told my email is already being used. I don't have time to spin that wheel, so I came here, seeking an alternative method of getting the firmware.
-
@discarn8 said in Unable to upgrade my SG-2220:
@aschenbecher said in Unable to upgrade my SG-2220:
https://docs.netgate.com/pfsense/en/latest/solutions/sg-2220/reinstall-pfsense.html
As for utilizing the https://docs.netgate.com/pfsense/en/latest/solutions/sg-2220/reinstall-pfsense.html link, I have viewed this document and have indeed tried contacting Netgate support to open a ticket but that was futile. I have, as of yet, been unable to create an account, by which to create a ticket. Each time I attempt to login to the site, I am told my password is invalid. If I select "Forgot my password", I am given the opportunity to request a link to reset my password via email. I complete this form and never receive the email. If I attempt to create a new account, I am told my email is already being used. I don't have time to spin that wheel, so I came here, seeking an alternative method of getting the firmware.
If you happen to be using a Protonmail email address, that will be an issue as I believe that service is blocked by the filters. There may be other email providers that are on a blacklist. If you can, try a gmail account.
-
@bmeeks Hello and thank you for the reply, sir. Indeed, I am using protonmail. This poses a problem, as I do not use anything other than protonmail, for general correspondence.
Is there a commonly-known reason why protonmail is being filtered?
The CE software reboots two of my 3rd party hardware solutions randomly so far [it's free, so no I have no justifiable complaints] but then, I can't get a purchased netgate device to load said software.
I'm beginning to suspect that this pfsense business just may not be for me.
Thank you very much for the assist.
-
@discarn8 said in Unable to upgrade my SG-2220:
@bmeeks Hello and thank you for the reply, sir. Indeed, I am using protonmail. This poses a problem, as I do not use anything other than protonmail, for general correspondence.
Is there a commonly-known reason why protonmail is being filtered?
The CE software reboots two of my 3rd party hardware solutions randomly so far [it's free, so no I have no justifiable complaints] but then, I can't get a purchased netgate device to load said software.
I'm beginning to suspect that this pfsense business just may not be for me.
Thank you very much for the assist.
No, I don't know exactly why. I just know several other folks have had the same issue, and it was due to Protonmail being blocked by the filters on the Netgate email server.
-
@bmeeks Roger that. Again, thanks all. Let it be said, "We came, We saw, We purchased, We tried."
-
@discarn8 said in Unable to upgrade my SG-2220:
@bmeeks Roger that. Again, thanks all. Let it be said, "We came, We saw, We purchased, We tried."
With regards to the Protonmail thing, Netgate is not the only "blocker" of that service. There are many others. It is frequently flagged for spam and abuse. I would recommend obtaining a Gmail or Yahoo or Microsoft email address for those times where you don't get a reply back for your Protonmail address.
-
@bmeeks Much appreciated, sir. Thanks, again.
-
Or the email your ISP gave you, the one that comes with your "connection".
