PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export"

timbopoise

A) https://docs.netgate.com/pfsense/en/latest/backup/restore-during-install.html
B) https://docs.netgate.com/pfsense/en/latest/install/netinstaller.html

Questions:
when using B) approach ("brute force"), I will lose all of my routing rules, etc?
I believe I've read that when restoring backup it will restore pfsense version too. Am starting over again with upgrade
to 2.7.2 with possible problem again?

stephenw10

Nope those are expected messages.

No I mean just run dmesg and see what the most recent logs are. They are probably going to be some error messages if you just tried to connect to the webgui.

You can also try checking /var/log/system.log

timbopoise

@stephenw10

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

just ran dmesg and see what the most recent logs are

No joy. I don't see anything to indicate a problem from output, after I attempted to open login page (https://192.168.5.1:xxx).

I don't know anything about PHP, but as I snoop around (nginx) and looking at /usr/local/www/ many of the *.php files are zero size?

stephenw10

Hmm, well hard to say what happened without logs. It sounds like the upgrade only partially completed. I've not seen it fail like that though. Usually failed upgrades would show library errors.

Do you have pkg access? Can you run: pkg update?

If so you could try a forced pkg reinstall:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#forced-pkg-reinstall

timbopoise

@stephenw10
No I apparently don't. I do not have su/root privilege (sudo not setup) but working on making a Comm cable to connect to comm port to connect and then set root passwd using a FreeBSD trick, if you call it that.

What a pain! Once I get this done I'll have more access and try to force pkg reinstall...I think

Thank goodness the router is up and running as is...just no ability to config from webpage.

Thanks @stephenw10 and @SteveITS

stephenw10

How does pkg update fail?

Since you can't access the webgui you may need to run pfSense-repoc before hand. The GUI processes usually run that when you access it.

timbopoise

@stephenw10

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

How does pkg update fail?

": pkg update
pkg: Insufficient privileges to update the repository catalogue."

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

you may need to run pfSense-repoc before hand

I run this from the command line and then try to login webpage again?

stephenw10

Run pfSense-repoc at the command line then try running pkg update again.

If it still fails try: pkg-static -d update and note the error output.

timbopoise

@stephenw10

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

Run pfSense-repoc at the command line

[2.7.2-RELEASE][  ]: pfSense-repoc
failed to read the repo data.
[2.7.2-RELEASE][  ]:

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

if it still fails try: pkg-static -d update

[2.7.2-RELEASE][  ]: pkg-static -d update
DBG(1)[23852]> pkg initialized
pkg-static: Insufficient privileges to update the repository catalogue.
[2.7.2-RELEASE][  ]:

timbopoise

@timbopoise
I'm getting a comm cable and will hopefully gain root by tomorrow afternoon. Thanks

SteveITS

@timbopoise Are you logging in as "admin" or another user you've created?

timbopoise

@SteveITS said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

@timbopoise Are you logging in as "admin" or another user you've created?

I'm using a user name that we typically setup on all systems and used the pfsense login passwd. That got me on over ssh. However, I have since noticed that I have a login as well. My login is probably one that got setup setup by PFSense in prep for using vpn login.
The only two logins I see are in group "nobody" and "admins".

stephenw10

You would need to be actually admin or root to use pkg at the cli.

timbopoise

@stephenw10
Yes. As of now I have no privileges and so will need to get on FreeBSD console to set root passwd. then I will have ability to do more.
Thanks

timbopoise

@stephenw10
You have been helpful Thanks.
I have gotten my RJ45-USB adapter for com port and used it to follow guidance on internet to reset root password but for some reason the change does not take effect. I'm puzzled. I'll be back when I can figure this out.

Thx

stephenw10

Hmm, curious. The reset process appeared to complete correctly?

There may be more broken there than we thought. Though I'd expect to see a load of errors....

timbopoise

@stephenw10

Yes. I've review numerous processes explained on various websites and youtube... they all have me do the same and no errors are given, but no joy. Once I reboot root's passwd not changed.
I just got an answer from another post I just made questioning the flavor of FreeBSD with PFSense and according to @keyser I need to focus on using the admin account.

PFSense vs FreeBSD post

I'll post progress. Thx

timbopoise

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

Run pfSense-repoc at the command line then try running pkg update again.

If it still fails try: pkg-static -d update and note the error output.

Good news: I was able to get admin passwd reset to default using video provided by @keyser. I used method 2 which FYI involved getting into single user mode from console and entering these commands (for my ufs file system):

/sbin/mount -a -t ufs

/etc/rc.initial.passwd

/sbin/reboot

Now I will backtrack to previous comments and figure out what to do.

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

If so you could try a forced pkg reinstall:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#forced-pkg-reinstall

Question: would running the forced pkg reinstall be my best option, with least risk?

Also, If I were to do a recover config.xml, will it put me back at 2.7.0?

And, are my latest backups also on the pfsense box, besides saving them off on another computer?

thanks

stephenw10

Running a forced pkg reinstall is probably you're only option other than reinstalling at this point. I wouldn't say it's particularly safe, I wouldn't recommend it if there were other options. I have done it successfully myself a number of times.

The config is independent of the pfSense version. You can restore a config from 2.7.0 into 2.7.2. It should always be backwards compatible not is not guaranteed the other way.

If you re-install 2.7.2 you can recover the existing config during the install.

The last 30 config versions are stored on the firewall in /cf/conf/backup.

timbopoise

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

Running a forced pkg reinstall is probably you're only option other than reinstalling at this point. I wouldn't say it's particularly safe, I wouldn't recommend it if there were other options. I have done it successfully myself a number of times.

I'm hesitating to take the next step and I'm building the courage. But I want to be prepared for the worst case scenario-the forced pkg install hoses pfSense and I have to consider rebuilding the box...I assume. I've learned that the box is not running a vanilla FreeBSD install with pfSense installed after. So I need to find the image I can put on a thumb drive to boot and install 2.7.2.

In a brief search I found Download pfSense Community Edition webpage which references a
USB Memstick installation and VGA Console option. Under filename guide it's pointed out that I use file:
pfSense-CE-memstick-2.7.2-RELEASE-amd64.img.gz but it's not a link.

However, when I read guidance for Download Installation Media page, instructions are given to select architecture, installer type, and console, but it's not obvious where this is done??

If I follow the "Download" link these questions are not answered and I'm left wondering how to download the right file.

Suggestions?

Thanks