New NetGate SG1100 no "packages" available

[cfrudolphy]

I am new to Netgate and Pfsense so please excuse me as a newb. I just purchased my NetGate SG1100 appliance and have the following issue.

My system is:

Version	2.4.4-RELEASE-p3 (arm64)
built on Thu May 16 06:01:19 EDT 2019
FreeBSD 11.2-RELEASE-p10

The system is on the latest version.
Version information updated at Sat Sep 7 5:56:40 CDT 2019

As you can see the system update check was successful. I am assuming the system check accesses the package repositories.

I was setting up OpenVPN following a guide and got to the point where I needed to install the OpenVPN Export Client. When I went to package manager the list of available packages was blank. After googling around I found a reddit post that said try this command from the Diagnostics -> Command Prompt:

pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

I did this and the results were:

Updating pfSense-core repository catalogue...
pkg-static: Repository pfSense-core load error: access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
pkg-static: https://repo.netgate.com/pkg/pfSense_factory-v2_4_4_aarch64-core/meta.txz: Authentication error
repository pfSense-core has no meta file, using default settings
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
pkg-static: https://repo.netgate.com/pkg/pfSense_factory-v2_4_4_aarch64-core/packagesite.txz: Authentication error
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: Repository pfSense load error: access repo file(/var/db/pkg/repo-pfSense.sqlite) failed: No such file or directory
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
Child process pid=50197 terminated abnormally: Segmentation fault

Note that in my setup I am reaching the internet and can ping/tracert to 8.8.8.8 or ubuntu.com with no issues so internet connectivity is not the issue. I tried to ping repo.netgate.com and was unsuccessful with the message that:

Host "repo.netgate.com" did not respond or could not be resolved.

Yet I could successfully ping netgate.com

Any help or guidance would be appreciated.

Thanks
Chuck

[kiokoman]

https://docs.netgate.com/pfsense/en/latest/packages/fixing-a-broken-pkg-database.html

repo.netgate.com does not answer .. idk if it's a temporary problem anyway try the official docs

[jimp]

Open a support request at https://go.netgate.com (create an account there if you do not already have one), and the support crew can assist you.

[cfrudolphy]

Ok first tried kiokoman's advice and went to "fixing a broken pkg database instructions. Note that I am doing this through the web gui using Diagnostics --> Command prompt.

I get through step one with no report from the command. I verify the directories exist by entering "ls /var/db/" and "ls /root/var/db/", and in both instances found "pkg" in both directories.

On to step two.
I enter the command "/usr/sbin/pkg-static update -f" the command results in the following: "sh: /usr/sbin/pkg-static: not found"

I googled the pkg command and found nothing on "pkg-static" so I tried
"/user/sbin/pkg update" which resulted in

"Updating pfSense-core repository catalogue...
pkg: Repository pfSense-core load error: access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory
1085486128:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:3266:
1085486128:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:3266:
1085486128:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:3266:
pkg: https://repo.netgate.com/pkg/pfSense_factory-v2_4_4_aarch64-core/meta.txz: Authentication error
repository pfSense-core has no meta file, using default settings
1085486128:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:3266:
1085486128:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:3266:
1085486128:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:3266:
pkg: https://repo.netgate.com/pkg/pfSense_factory-v2_4_4_aarch64-core/packagesite.txz: Authentication error
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg: Repository pfSense load error: access repo file(/var/db/pkg/repo-pfSense.sqlite) failed: No such file or directory
1085486128:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/build/factory-crossbuild-244/pfSense/tmp/FreeBSD-src/crypto/openssl/ssl/s3_clnt.c:3266:
Child process pid=17011 terminated abnormally: Segmentation fault"

with that I stopped and tried jimp's suggestion of opening a support ticket. When you go to support to create an account it only allows you to purchase support for hundreds of dollars. So I sent an email to sales@netgate.com. I explained the situation including that my appliance was purchased by my wife as a birthday present from Amazon about 6 weeks ago. The response I got was
"I'm sorry for these issues. Thank you for taking the time to write us.

I can extend our support option for the SG-1100 at 49$."

I don't think I need to pay $49.00 to fix this. Can someone help me?

Chuck

[cfrudolphy]

As an update I changed the command from:

"/usr/sbin/pkg-static update -f" to "pkg-static update -f" and got this result

"Updating pfSense-core repository catalogue...
pkg-static: Repository pfSense-core load error: access repo file(/var/db/pkg/repo-pfSense-core.sqlite) failed: No such file or directory
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
pkg-static: https://repo.netgate.com/pkg/pfSense_factory-v2_4_4_aarch64-core/meta.txz: Authentication error
repository pfSense-core has no meta file, using default settings
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
pkg-static: https://repo.netgate.com/pkg/pfSense_factory-v2_4_4_aarch64-core/packagesite.txz: Authentication error
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
pkg-static: Repository pfSense load error: access repo file(/var/db/pkg/repo-pfSense.sqlite) failed: No such file or directory
7407188:error:14099044:SSL routines:ssl3_send_client_verify:internal error:/usr/local/poudriere/jails/pfSense_factory-v2_4_4_aarch64/usr/src/crypto/openssl/ssl/s3_clnt.c:3266:
Child process pid=170 terminated abnormally: Segmentation fault"

Which is the same error I got using the command "/usr/sbin/pkg update" .
pkg-update must reside in a different directory from /usr/sbin.

Anyway I am still stuck. Sure could use some help.

Chuck

[cfrudolphy]

@cfrudolphy said in New NetGate SG1100 no "packages" available:

/var/db/pkg/repo-pfSense-core.sqlite

I used the command "ls /var/db/pkg" and the only sqlite file I see is local.sqlite.

Chuck

[Gertjan]

@cfrudolphy said in New NetGate SG1100 no "packages" available:

I used the command "ls /var/db/pkg" and the only sqlite file I see is local.sqlite.

Not good - as you might have guessed.

It should be :

[2.4.4-RELEASE][admin@pfsense.brit-hotel-fumel.net]/root: ls -al /var/db/pkg
total 51172
drwxr-xr-x   2 root  wheel       512 Sep 23 02:24 .
drwxr-xr-x  22 root  wheel      1536 Sep 23 06:56 ..
-rw-r--r--   1 root  wheel       246 May 17  2016 FreeBSD.meta
-rw-r--r--   1 root  wheel   5268480 Sep 16 11:56 local.sqlite
-rw-r--r--   1 root  wheel       246 May 20 02:39 pfSense-core.meta
-rw-r--r--   1 root  wheel       246 Sep 23 01:14 pfSense.meta
-rw-r--r--   1 root  wheel  45684736 May 17  2016 repo-FreeBSD.sqlite
-rw-r--r--   1 root  wheel    212992 May 20 02:39 repo-pfSense-core.sqlite
-rw-r--r--   1 root  wheel   1081344 Sep 23 01:14 repo-pfSense.sqlite

First of all, stop using the GUI : Diagnostics > Command Prompt
Activate SSH access, install Putty - and use that access to execute these kind of commands.

Even better : get yourself a real console access using the USB-to-serial cable. This is a typical "if you have it - you will never need it" access.

Have a look at the dmesg (boot) log.
File system issues ? See the manual how to fix that. A power downs can happen when the power is ripped of without shutting the system down using a console, SSH or GUI command.
Bad (dirty) file system can have the effect that no more files can be created, like the missing data base files.

Also : get yourself a copy of the system, burn it to a USB key, and reinstall. You'll be sure to have a system that works out of the box. Again, see manual how to do that. It's not hard to do at all.

[kiokoman]

After the registration you only need to open a ticket, tell them that you need the image to reinstall the system. they will send it to you for free. as you can see on the other 3d just below this one.

[cfrudolphy]

thanks to both of you for responding. i have opened a ticket with support requesting a system image. i will post later how things transpire.

Chuck