SG-2100 starting update to 24.03 fails?

hispeed

I have SG-2100 which I can access via VPN and I updated it (or I try). Unfortunately I have problems.

I saw before that the update to 24.03 got stuck when the update process was ongoing:

extracting new base tarball

Now the pfsense is online but I can't login anymore. What are my best options?
I saw that the space was all full during but I don't know if that was the problem. But why is the space full?

Thank you for any ideas.

stephenw10

Probably because of old BE snapshots taking up space.

Can you SSH to it to reach the command line?

If so you can use bectl to list and delete old BE snaps.

Steve

hispeed

@stephenw10

Sounds not so funny. I can not access SSH from external unfortunately I would have to connect directy to the device via serial.
What happens when I would restart the device? The device is 40 KM away at my parents house.

We have an auto online backup maybe can you do something from external?

SteveITS

@hispeed for reference see
https://docs.netgate.com/pfsense/en/latest/troubleshooting/filesystem-shrink.html
And the linked
https://docs.netgate.com/pfsense/en/latest/backup/zfsbe/space.html

I thought I saw a warning/info message about space/BEs on the upgrade I ran last night but I’d already checked and didn’t pay much attention. I normally keep only 1-2 because no need to boot back to 9 months ago.

:-/

hispeed

@SteveITS
But I can't login anymore at the moment from remote? What do you think happens if I advice my father to do hard reboot?
Can i acccess via VPN again and do the things you told me and stephennw10?

stephenw10

Maybe. Is it still routing traffic? Can you remote to a client behind it and try connecting from there?

If the update fails because of a lack of space if should show an alert indicating that but obviously only if you can connect to it.

The auto backup will have your config which could be recovered but that's not something we can push to the device. And it's only the config. It may still need to be reinstalled if it cannot boot correctly.

SteveITS

@hispeed yeah I understand. Sounds unclear what state it’s in. Not sure what to tell you. Can your parents still connect out or is it not functional? If they can get out then you could remote in and have them connect a console cable. Can they hotspot a phone?

If there’s no connection and booting doesn’t help then you might need to go there to use the console.
Worst case a reinstall.
https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/reinstall-pfsense.html

A tip for remote updates via VPN, add a temporary rule to allow from your IP to WAN:443 and :22 so you can directly connect. Disable when done.

hispeed

@stephenw10
@SteveITS
Ok yes this was it i had to remove old BE Snapshots. Now it works unfortunately I had to use the serial cable to do so.
But I was lucky my father was able to do all the stuff ;) hot-spot and serial cable....
This can be closed.

SteveITS

@hispeed Nice! Now just remind him to turn off the phone hotspot. :)

Side note: years ago back when hotspots first came out, I remember being at a restaurant and noticing my phone was connected to wireless...it was somebody's not-password-protected phone hotspot.

ghiner

@hispeed Thanks for this thread. Solved my problem as I was in the same boat.

psiess

This thread helped me too. Thanks very much!

JulieConsultancy

@stephenw10 thank you, helped me today on one of the customers 2100 box.