pfSense CE auto upgrade

n1md4

I have recently installed pfSense 2.6, but have noticed in the dashboard that checking for updates fails; the URL set in pfSense repo configuration file does not load. The question then, what should CE users set the update repo to?

rcoleman-netgate

@n1md4 "Current"

If you are seeing it fail to check toggle between previous or development and back to Current/Stable. Give it a chance to check before you switch a second time.

n1md4

@rcoleman-netgate didn't work.

Switched to snapshot 2.7 devel :

Retrieving: Unable to check for updates

Switched back to latest stable 2.6:

Retrieving: Unable to check for updates

Here's the output of /usr/local/share/pfSense/pkg/repos/pfSense-repo.conf which 404s:

FreeBSD: { enabled: no }

pfSense-core: {
url: "pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-core",
mirror_type: "srv",
signature_type: "fingerprints",
fingerprints: "/usr/local/share/pfSense/keys/pkg",
enabled: yes
}

pfSense: {
url: "pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0",
mirror_type: "srv",
signature_type: "fingerprints",
fingerprints: "/usr/local/share/pfSense/keys/pkg",
enabled: yes
}

and /usr/local/share/pfSense/pfSense-repo.conf which has no reverse DNS:

FreeBSD: { enabled: no }

pfSense-core: {
  url: "pkg+http://release-staging.nyi.netgate.com/ce/packages/pfSense_v2_6_0_amd64-core",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/local/share/pfSense/keys/pkg",
  enabled: yes
}

pfSense: {
  url: "pkg+http://release-staging.nyi.netgate.com/ce/packages/pfSense_v2_6_0_amd64-pfSense_v2_6_0",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/local/share/pfSense/keys/pkg",
  enabled: yes
}

stephenw10

At the command line run pkg-static -d update. What error(s) is shown?

n1md4

@stephenw10 60 second pauses after each fetch attempt:

[2.6.0-RELEASE][root@sharevdi.home.lan]/root: pkg-static -d update
DBG(1)[38045]> pkg initialized
Updating pfSense-core repository catalogue...
DBG(1)[38045]> PkgRepo: verifying update for pfSense-core
DBG(1)[38045]> PkgRepo: need forced update of pfSense-core
DBG(1)[38045]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense-core.sqlite'
DBG(1)[38045]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-core/meta.conf
DBG(1)[38045]> opening libfetch fetcher
DBG(1)[38045]> Fetch > libfetch: connecting
DBG(1)[38045]> Fetch: fetching from: https://pkg00-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-core/meta.conf with opts "i"
DBG(1)[38045]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-core/meta.txz
DBG(1)[38045]> opening libfetch fetcher
DBG(1)[38045]> Fetch > libfetch: connecting
DBG(1)[38045]> Fetch: fetching from: https://pkg00-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-core/meta.txz with opts "i"
pkg-static: https://pkg00-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-core/meta.txz: Not Found
repository pfSense-core has no meta file, using default settings
DBG(1)[38045]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-core/packagesite.pkg
DBG(1)[38045]> opening libfetch fetcher
DBG(1)[38045]> Fetch > libfetch: connecting
DBG(1)[38045]> Fetch: fetching from: https://pkg00-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-core/packagesite.pkg with opts "i"
pkg-static: https://pkg00-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-core/packagesite.pkg: Not Found
DBG(1)[38045]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-core/packagesite.txz
DBG(1)[38045]> opening libfetch fetcher
DBG(1)[38045]> Fetch > libfetch: connecting
DBG(1)[38045]> Fetch: fetching from: https://pkg00-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-core/packagesite.txz with opts "i"
pkg-static: https://pkg00-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-core/packagesite.txz: Not Found
Unable to update repository pfSense-core
Updating pfSense repository catalogue...
DBG(1)[38045]> PkgRepo: verifying update for pfSense
DBG(1)[38045]> PkgRepo: need forced update of pfSense
DBG(1)[38045]> Pkgrepo, begin update of '/var/db/pkg/repo-pfSense.sqlite'
DBG(1)[38045]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.conf
DBG(1)[38045]> opening libfetch fetcher
DBG(1)[38045]> Fetch > libfetch: connecting
DBG(1)[38045]> Fetch: fetching from: https://pkg01-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.conf with opts "i"
DBG(1)[38045]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz
DBG(1)[38045]> opening libfetch fetcher
DBG(1)[38045]> Fetch > libfetch: connecting
DBG(1)[38045]> Fetch: fetching from: https://pkg01-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz with opts "i"
pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/meta.txz: Not Found
repository pfSense has no meta file, using default settings
DBG(1)[38045]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg
DBG(1)[38045]> opening libfetch fetcher
DBG(1)[38045]> Fetch > libfetch: connecting
DBG(1)[38045]> Fetch: fetching from: https://pkg01-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg with opts "i"
pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.pkg: Not Found
DBG(1)[38045]> Request to fetch pkg+https://firmware.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz
DBG(1)[38045]> opening libfetch fetcher
DBG(1)[38045]> Fetch > libfetch: connecting
DBG(1)[38045]> Fetch: fetching from: https://pkg01-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz with opts "i"
pkg-static: https://pkg01-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-pfSense_v2_6_0/packagesite.txz: Not Found
Unable to update repository pfSense
Error updating repositories!

stephenw10

@n1md4 said in pfSense CE auto upgrade:

https://pkg00-atx.netgate.com/pkg/pfSense_v2_6_0_amd64-core/meta.txz

Hmm, curious. Did you try to upgrade that to Plus at any point?

That pkg URL isn't valid for CE. What repo pkg do you have?
pkg-static info pfSense-repo

What do see in?: /usr/local/share/pfSense/pkg/repos/pfSense-repo.conf

It should have:

FreeBSD: { enabled: no }

pfSense-core: {
  url: "pkg+https://pkg.pfsense.org/pfSense_v2_6_0_amd64-core",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/local/share/pfSense/keys/pkg",
  enabled: yes
}

pfSense: {
  url: "pkg+https://pkg.pfsense.org/pfSense_v2_6_0_amd64-pfSense_v2_6_0",
  mirror_type: "srv",
  signature_type: "fingerprints",
  fingerprints: "/usr/local/share/pfSense/keys/pkg",
  enabled: yes
}

n1md4

@stephenw10 that works now.

I had previously edited that file because the OS updates weren't able to be retrieved. Changed it to your posting, and the package repo now updates. But the GUI update still fails:

Confirmation Required to update pfSense system.
Branch: Latest stable version (2.6.0)
Please select the branch from which to update the system firmware.
Use of the development version is at your own risk!

Current Base System
Latest Base System
Retrieving Unable to check for updates

stephenw10

Hmm, what error do you see at the CLI from?: pfSense-upgrade -dc

n1md4

@stephenw10 okaaay ....

[2.6.0-RELEASE][root@sharevdi.home.lan]/root: pfSense-upgrade -dc 
>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
Your system is up to date

So why is the GUI not responding in like. GUI says "unable to check for updates".

stephenw10

Good question, since it uses the same code.

Can you see the list of available packages in the package manager?

n1md4

@stephenw10 Yes, there are available packages. The install list is empty, but that's expected. GUI bug ...

stephenw10

Hmm, what about in System > Update? If it shows the package list it should be able to see updates.

n1md4

@stephenw10 Both System -> Update and dashboard updates are not working. Just says "Unable to check for updates".

Is this the latest version:

2.6.0-RELEASE (amd64)
built on Mon Jan 31 19:57:53 UTC 2022
FreeBSD 12.3-STABLE

rcoleman-netgate

@n1md4 Yes, 2.7 is currently in development

n1md4

@rcoleman-netgate so no known reports of the system upgrades working on the command line but not the GUI?

stephenw10

Not in 2.6.

Try running pkg upgrade and see if it offers you any updates.

n1md4

@stephenw10

Output below:

[2.6.0-RELEASE][root@sharevdi.home.lan]/root: time pkg upgrade
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
Checking for upgrades (2 candidates): 100%
Processing candidates (2 candidates): 100%
Checking integrity... done (0 conflicting)
Your packages are up to date.
0.149u 0.033s 7:34.66 0.0%      2622+230k 25+40io 12pf+0w

Any ideas why it takes forever to update too?

stephenw10

7.5 mins?! Mmm that should be a few seconds. Does it stop at any particular point?

jimp

Sounds like what might happen if it's struggling to connect over IPv6 and failing, waiting for each thing to fail on IPv6 before falling back to IPv4. Might try toggling the option to prefer IPv4 over IPv6 for the firewall itself (System > Advanced, Networking tab).

n1md4

@jimp thanks. This was indeed the issue. Switched to prefer IPv4 and everything is now working; updates and upgrades take seconds not minutes, and the GUI now displays updated status too.