Version 2.5.2 Upgrade > 2.6.0 or 2.7.0

G-Edge

Re: Version 2.5.2 Upgrade > 2.6.0 or 2.7.0

ok so I've followed pretty much everything that was on this page - and it still failed - Had to go to the netgate docs and followed it step by step - the one thing that did it and fixed everything was this portion right here and it automatically upgraded my firewall to 2.6 - after which I was able to upgrade to 2.7:

firstly my network has IP6 disabled... since I'm not hosting any web sites at this location... so first step was to let pfsense firewall know to only use IPv4:
pfSense-upgrade -4

then there was Segmentation Fault in pkg (we need to do a hard reboot here - full shutdown and restart)
Certain cryptographic hardware can have a software-induced race condition which leads to a problematic state. In this state, pkg will crash with a segmentation fault:

1085486128:error:14099044:SSL routines:ssl3_send_client_verify:internal error:
Child process pid=30149 terminated abnormally: Segmentation fault

In this case, the device must be powered off and back on to recover. A warm reboot is not sufficient to reset the hardware.

Navigate to Diagnostics > Halt System
Wait for the device to shut down. Monitor the console to ensure that the shutdown completes.
Unplug the power adapter
Plug the power adapter back in

then Forced pkg Reinstall (this portion should force install 2.6 from the Shell while you are in SSH mode)
Forcing a reinstallation of all packages may resolve problems that otherwise may require a full reinstall. This is not ideal, as a clean install is more likely to have a positive result, but that is not always an option in every situation (e.g. remote install with no console access).

To forcefully reinstall all packages, take the following steps:

Make a backup
Clean the repository and forcefully reinstall pkg, repo data, and the upgrade script:

       pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

Force a reinstall of everything (and notice we are using the -f not -d or -c as others may have suggested in this post):

      pkg-static upgrade -f

once completed - reboot (type reboot at the shell is enough) - this will reboot your system - log in to the GUI and you should now be able to upgrade to 2.7 as it's at 2.6 - remember the upgrade process takes about 15 to 20 minutes and multiple reboots - go away have a coffee - or a smoke or don't but stay away for that period and don't interrupt the process... otherwise you could end up worst off from where you started.

hope this helped - good luck

G

MushyMiddle

Thanks - this will be helpful when I tackle upgrading my work firewall from 2.5.2 to 2.7.0 (via 2.6.0).

ddepaolis

@MushyMiddle Hi ! I've still a PFSense firewall on version 2.5.2 (amd64) but I'm not sure if I can upgrade it directly to 2.7 version. Or I should upgrade to 2.6 prior. Actually my Dashboard GUI says upgrade to 2.7 it's available. So my three questions:

upgrade directly to 2.7 is possible ?
in case how to upgrade to 2.6 prior ?
as I've many optional packages installed (HAProxy, Zabbix agent, mail report etc) can I upgrade leaving them all at actual versions they're installed at this time ?

Thanks and regards !

SteveITS

@ddepaolis You can upgrade directly to the latest version if it is offered.

You can set the update branch to Previous Stable: https://docs.netgate.com/pfsense/en/latest/install/upgrade-guide.html

Per the upgrade guide it is recommended to uninstall packages, upgrade, and then reinstall packages. Otherwise the upgrade will also try to upgrade packages during the upgrade. Either way they do get upgraded to the latest version. Package settings are saved by default, though a few like pfBlockerNG have a checkbox to remove package settings when uninstalling.