Unable to check for updates (SOLVED)
-
@techpro2004 This just worked for me also. Was on 22.01-RELEASE and getting the "unable to check" error, 22.05 now shows as available.
-
I am having a similar issue on 5100. The difference being, I can see my installed packages, but the Available Packages is empty, nor is it able to check for system updates.
I have checked the pfSense.conf file. It looks to be correct (from what others have posted).
I have also tried switching to the development branch, then back.
pkg -d update
DBG(1)[96943]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[96943]> PkgRepo: verifying update for pfSense-core
DBG(1)[96943]> PkgRepo: need forced update of pfSense-core
DBG(1)[96943]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[96943]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.conf
DBG(1)[96943]> opening libfetch fetcher
DBG(1)[96943]> Fetch > libfetch: connecting
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.conf with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.conf with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.conf with opts "i"
DBG(1)[96943]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.txz
DBG(1)[96943]> opening libfetch fetcher
DBG(1)[96943]> Fetch > libfetch: connecting
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.txz with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.txz with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.txz with opts "i"
pkg: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/meta.txz: No address record
repository pfSense-core has no meta file, using default settings
DBG(1)[96943]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.pkg
DBG(1)[96943]> opening libfetch fetcher
DBG(1)[96943]> Fetch > libfetch: connecting
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.pkg with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.pkg with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.pkg with opts "i"
pkg: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.pkg: No address record
DBG(1)[96943]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.txz
DBG(1)[96943]> opening libfetch fetcher
DBG(1)[96943]> Fetch > libfetch: connecting
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.txz with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.txz with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.txz with opts "i"
pkg: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-core/packagesite.txz: No address record
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
DBG(1)[96943]> PkgRepo: verifying update for pfSense
DBG(1)[96943]> PkgRepo: need forced update of pfSense
DBG(1)[96943]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite'
DBG(1)[96943]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.conf
DBG(1)[96943]> opening libfetch fetcher
DBG(1)[96943]> Fetch > libfetch: connecting
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.conf with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.conf with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.conf with opts "i"
DBG(1)[96943]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.txz
DBG(1)[96943]> opening libfetch fetcher
DBG(1)[96943]> Fetch > libfetch: connecting
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.txz with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.txz with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.txz with opts "i"
pkg: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/meta.txz: No address record
repository pfSense has no meta file, using default settings
DBG(1)[96943]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.pkg
DBG(1)[96943]> opening libfetch fetcher
DBG(1)[96943]> Fetch > libfetch: connecting
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.pkg with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.pkg with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.pkg with opts "i"
pkg: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.pkg: No address record
DBG(1)[96943]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.txz
DBG(1)[96943]> opening libfetch fetcher
DBG(1)[96943]> Fetch > libfetch: connecting
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.txz with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.txz with opts "i"
DBG(1)[96943]> Fetch: fetching from: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.txz with opts "i"
pkg: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.txz: No address record
Unable to update repository pfSense
Error updating repositories!I also made sure ".pfsense.org" & ".netgate.com" were in the DNSBL whitelist.
Any ideas for me to try?
Thanks
-
@jossk said in Unable to check for updates (SOLVED):
pkg: https://firmware.netgate.com/pkg/pfSense_plus-v22_05_amd64-pfSense_plus_v22_05/packagesite.txz: No address record
Unable to update repository pfSense
Error updating repositories!No address record means it cannot resolve the repo server so you have a DNS issue on the firewall. Go to Diag > DNS Lookup and resolving
firmware.netgate.com
. Make sure you are seeing results from the configures servers.Steve
-
Host "firmware.netgate.com" could not be resolved.
Name Servers:
127.0.0.1 ----> No ResponseSystem > Gen. Setup set to "Use Local DNS, ignore remote DNS Servers".
So I guess I have a misconfiguration in the DNS Resolver, then?
-
Yes, I would think so. And you have no other servers configured or being passed? They won't be used with that setting in general setup though.
-
I added all of my interfaces as DNS servers in General Setup. Only 2 interfaces are having issues, the loopback (127.0.0.1), and one other network.
With any of those added, pfS can check for system updates, and the Package Manager can load the Available Packages.
Knowing that, I'm more inclined to think that the more likely cause is a firewall config.
Cursory glance at my firewall rules doesn't show anything that should block these 2 interfaces.
I'll have to keep investigating.
Thank you for the idea. Now I have a direction and a stop-gap solution until I get it working properly.
-
@jossk said in Unable to check for updates (SOLVED):
I added all of my interfaces as DNS servers in General Setup.
Not sure exactly what you did but that's probably not what you want. The list there should contain other remote DNS servers that pfSense itself can use. It doesn't need to contain localhost, that is used anyway. The behaviour it uses those in can be set there but by default it will try localhost (Unbound on the firewall) and fall back to others in the list or servers passed by dhcp.
But since making any change there allowed it to work it's definitely a DNS problem.
Steve
-
Sorry, I should have clarified. I did that just to test all of my interfaces to see if my other interfaces were working or not. After verifying they worked, I deleted those from the list.
Also, changing to "Use local DNS (127.0.0.1), fall back to remote DNS", it tests localhost without me having to add it manually.
If that's the case, here is screenshots of my DNS Resolver config. Is there anything that stands out that could be the cause?
Note: I have a firewall rule to block external DNS servers. Mostly so IoT devices with hard coded DNS will be forced to use mine.
-
Try disabling SSL/TLS for outgoing queries. That should only ever be set in conjunction with forwarding mode.
Also you are filtering responses there using pfBlocker/DNSBL. Check the pfBlocker alerts. -
Disabled SSL/TLS for outgoing. No change in DNS Lookup (will leave off).
To be honest, I don't know what I should be looking for in the alerts.
I did try disabling pfBlocker. No change in DNS Lookup.
I can try turning off "Keep Settings", and uninstalling the pfBlocker package.
I'm still confused as to why DNS resolution works on my VLAN interfaces work, while not working on my LAN and loopback.
-
Check Status > DNS Resolver after you try to look it up. You should see entries for netgate.com.
Otherwise you can try turning up the logging in Unbound to see the individual queries and failures.
Steve
-
I see 2 entries for netgate.com.
I also turned up logging to
Level 3: Query level information
in DNS Resolver > Advanced Settings.(Keep in mind I still have one of my (working) VLANs in my DNS servers list)
-
@jossk said in Unable to check for updates (SOLVED):
I also turned up logging to Level 3: Query level information in DNS Resolver > Advanced Settings.
Do you see failures in the DNS logs?
-
I think I found the issue. It was this floating firewall rule.
I disabled it (as shown), then tested via DNS Lookup (I also added Quad9 DNS as external DNS to test). All interfaces, including the loopback and the LAN interface are now connecting.
the IP_PublicDNS Alias (link contains list of public IPs). Unfortunately, it also appears to contain a number of private IPs, including 192.168.0.1, & loopback (127.0.0.1).
Now that I think of it, I know of a better way that doesn't use an arbitrary list.
I feel like an idiot for blindly using the list and not properly vetting before using.
Thank you. I appreciate your assistance and patients.
-
Yeah, that could easily block outbound requests. Setting direction In would prevent that.
But you probably want to use something that redirects anyway:
https://docs.netgate.com/pfsense/en/latest/recipes/dns-redirect.html -
I have that for my IoT subnet. That is the better method to transparently redirect traffic.
I think what happened was I found that list first, then learned how to do that traffic redirection, but neglected to scrap the list & associated rules.
I am perplexed as to why they put private IP addresses, including the reserved loopback on the list.
I just emailed the maintainers of the list to ask them why.
-
-
-
Unable to check for updates.
I can not see any packages and the notice on my dashboard says "unable to check for updates"
I have tried changing the contents of /usr/local/share/pfSense/pkg/repos/pfSense-repo.conf and soon realized this seemed like the wrong processor for my 2100. Put the file back to original.
$ pkg info pfSense-upgrade
pfSense-upgrade-1.0_29 Name : pfSense-upgrade Version : 1.0_29 Installed on : Fri Dec 30 12:55:58 2022 EST Origin : sysutils/pfSense-upgrade Architecture : FreeBSD:12:aarch64 Prefix : /usr/local Categories : sysutils Licenses : APACHE20 Maintainer : coreteam@pfsense.org WWW : https://www.pfsense.org/ Comment : pfSense upgrade script Annotations : FreeBSD_version: 1203506 build_timestamp: 2022-11-22T02:25:53+0000 built_by : poudriere-git-3.3.99.20220831 port_checkout_unclean: no port_git_hash : e46d32a272fe ports_top_checkout_unclean: yes ports_top_git_hash: e46d32a272fe repo_type : binary repository : pfSense Flat size : 64.7KiB Description : pfSense upgrade script WWW: https://www.pfsense.org/
$ pkg-static -d update
DBG(1)[86073]> pkg initialized Updating pfSense-core repository catalogue... DBG(1)[86073]> PkgRepo: verifying update for pfSense-core DBG(1)[86073]> PkgRepo: need forced update of pfSense-core DBG(1)[86073]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite' DBG(1)[86073]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.conf DBG(1)[86073]> opening libfetch fetcher DBG(1)[86073]> Fetch > libfetch: connecting DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.conf with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.conf with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.conf with opts "i" DBG(1)[86073]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.txz DBG(1)[86073]> opening libfetch fetcher DBG(1)[86073]> Fetch > libfetch: connecting DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.txz with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.txz with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.txz with opts "i" pkg-static: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/meta.txz: Service Unavailable repository pfSense-core has no meta file, using default settings DBG(1)[86073]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.pkg DBG(1)[86073]> opening libfetch fetcher DBG(1)[86073]> Fetch > libfetch: connecting DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.pkg with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.pkg with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.pkg with opts "i" pkg-static: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.pkg: Service Unavailable DBG(1)[86073]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.txz DBG(1)[86073]> opening libfetch fetcher DBG(1)[86073]> Fetch > libfetch: connecting DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.txz with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.txz with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.txz with opts "i" pkg-static: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-core/packagesite.txz: Service Unavailable Unable to update repository pfSense-core Updating pfSense repository catalogue... DBG(1)[86073]> PkgRepo: verifying update for pfSense DBG(1)[86073]> PkgRepo: need forced update of pfSense DBG(1)[86073]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite' DBG(1)[86073]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.conf DBG(1)[86073]> opening libfetch fetcher DBG(1)[86073]> Fetch > libfetch: connecting DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.conf with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.conf with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.conf with opts "i" DBG(1)[86073]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.txz DBG(1)[86073]> opening libfetch fetcher DBG(1)[86073]> Fetch > libfetch: connecting DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.txz with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.txz with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.txz with opts "i" pkg-static: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/meta.txz: Service Unavailable repository pfSense has no meta file, using default settings DBG(1)[86073]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.pkg DBG(1)[86073]> opening libfetch fetcher DBG(1)[86073]> Fetch > libfetch: connecting DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.pkg with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.pkg with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.pkg with opts "i" pkg-static: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.pkg: Service Unavailable DBG(1)[86073]> Request to fetch pkg+https://repo.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.txz DBG(1)[86073]> opening libfetch fetcher DBG(1)[86073]> Fetch > libfetch: connecting DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.txz with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.txz with opts "i" DBG(1)[86073]> Fetch: fetching from: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.txz with opts "i" pkg-static: https://repo00.atx.netgate.com/pkg/pfSense_plus-v23_01_aarch64-pfSense_plus_v23_01/packagesite.txz: Service Unavailable Unable to update repository pfSense Error updating repositories!
Wheat thoroughly mixed with chaff, unable to separate. Any/All help appreciated.
-
-
Upgrades to 1100/2100 models are suspended while an issue is being fixed
-
Package updates for 22.05 can be found by changing branch from 23.01 to 22.05 in System->Update
-
-
@rcoleman-netgate Thank you, that works - All I really needed was to see the packages. Any updates can wait until after I get an openVPN configured - what can go wrong now?
-
I am stuck AGAIN on ALL of my SG-5100 pfSense+ boxes.
Am stuck on 22.05 and getting "Unable to check for updates"
I do have the Update settings Branch set to 23.01
Can anyone advise on what to do this time?