Delete all packages prior to update
-
Netgate recommends deleting packages prior to upgrading. Before doing so I wanted to confirm this includes deleting the System_Patches package too?
-
@terryzb FWIW, I normally uninstall "big" packages like Suricata and pfBlocker, but leave others like Patches and Apcupsd. Packages that are not removed will reinstall during the upgrade. Normally, packages that are uninstalled leave their settings in the config file for easy reinstallation.
Patches does not "do anything" by itself so it seems harmless to leave, to me.
-
@SteveITS
Thank you for the help Steve. I've got a 2100 for a small home setup with just a handful of packages - Avahi, iperf, pfBlockerNG, System_Patches, and ipsec-profile-wizard and openvpn-client-export that were installed by default. I'll just remove Avahi, iperf and pfBlockerNG. -
@terryzb Yeah it sure not going to hurt uninstalling packages. Normally I use the time that upgrading to uninstall stuff I don't really use anyway, but have installed to test something, etc. Its a good time to do an overall assessment of everything to be honest.
I have in the past just hit go, and not run into any issues. I would already be on 24.03 if wasn't that I want to move over to ssd. And got lots of other things going on that have put the time to unplug everything and open it up and install the ssd, etc.
-
@johnpoz
Thanks John. I'd love to install an SSD in the 2100 but I don't think it's possible. EDIT: just read that an M.2 SATA drive is possible. -
@terryzb I think the only ones that present a (small) bit of risk are those that may need to perform downloads in order to function. pfBlockerNG, Suricata, and the like. Avahi and iperf should be no problem.
-
@terryzb said in Delete all packages prior to update:
@johnpoz
Thanks John. I'd love to install an SSD in the 2100 but I don't think it's possible.https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/m-2-sata-installation.html
:)re: problems, specifically for the new 24.03 version there is this:
https://redmine.pfsense.org/issues/15396
"Some package install scripts attempt to connect out to update lists/signatures/aliases. When run as part of the new BE upgrade process they are run before any network interfaces are setup which causes significant delay as each connection attempt has to timeout:
...
Snort, Suricata and pfBlockerNG do this." -
@SteveITS
Thanks Steve for the info about timeout behavior for those packages during upgrade. One more reason to uninstall prior. Our messages crossed regarding the 2100 M.2 SATA storage! -
-
@terryzb The second photo has "NVMe" on it, you're sure it's SATA?
"Note
The Netgate 2100 does not support NVMe drives....
The connector is for a 2242 (22mm x 42mm) M.2 SATA only."per https://shop.netgate.com/products/2100-base-pfsense
"1x M.2 'B' key sockets (SSD, LTE)" -
@SteveITS
You're right! I grabbed the wrong screen shot for a single 'B' key example. Thank you for noticing the "1x M.2 'B' key sockets (SSD, LTE)" on the 2100 product page -- I was looking only at the manual.A problem is I'm not seeing any (non-NVME) M.2 'B' key SATA SSDs on Amazon or NewEgg. Are these not available anymore?
-
To close the loop on this. I saw in the Netgate hardware discussions where an M.2 2242 SSD with B+M keys can work in the 2100. https://forum.netgate.com/topic/184700/m-2-sata-ssd-128gb?_=1722035654829
