PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export"

timbopoise

@stephenw10

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

How does pkg update fail?

": pkg update
pkg: Insufficient privileges to update the repository catalogue."

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

you may need to run pfSense-repoc before hand

I run this from the command line and then try to login webpage again?

stephenw10

Run pfSense-repoc at the command line then try running pkg update again.

If it still fails try: pkg-static -d update and note the error output.

timbopoise

@stephenw10

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

Run pfSense-repoc at the command line

[2.7.2-RELEASE][  ]: pfSense-repoc
failed to read the repo data.
[2.7.2-RELEASE][  ]:

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

if it still fails try: pkg-static -d update

[2.7.2-RELEASE][  ]: pkg-static -d update
DBG(1)[23852]> pkg initialized
pkg-static: Insufficient privileges to update the repository catalogue.
[2.7.2-RELEASE][  ]:

timbopoise

@timbopoise
I'm getting a comm cable and will hopefully gain root by tomorrow afternoon. Thanks

SteveITS

@timbopoise Are you logging in as "admin" or another user you've created?

timbopoise

@SteveITS said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

@timbopoise Are you logging in as "admin" or another user you've created?

I'm using a user name that we typically setup on all systems and used the pfsense login passwd. That got me on over ssh. However, I have since noticed that I have a login as well. My login is probably one that got setup setup by PFSense in prep for using vpn login.
The only two logins I see are in group "nobody" and "admins".

stephenw10

You would need to be actually admin or root to use pkg at the cli.

timbopoise

@stephenw10
Yes. As of now I have no privileges and so will need to get on FreeBSD console to set root passwd. then I will have ability to do more.
Thanks

timbopoise

@stephenw10
You have been helpful Thanks.
I have gotten my RJ45-USB adapter for com port and used it to follow guidance on internet to reset root password but for some reason the change does not take effect. I'm puzzled. I'll be back when I can figure this out.

Thx

stephenw10

Hmm, curious. The reset process appeared to complete correctly?

There may be more broken there than we thought. Though I'd expect to see a load of errors....

timbopoise

@stephenw10

Yes. I've review numerous processes explained on various websites and youtube... they all have me do the same and no errors are given, but no joy. Once I reboot root's passwd not changed.
I just got an answer from another post I just made questioning the flavor of FreeBSD with PFSense and according to @keyser I need to focus on using the admin account.

PFSense vs FreeBSD post

I'll post progress. Thx

timbopoise

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

Run pfSense-repoc at the command line then try running pkg update again.

If it still fails try: pkg-static -d update and note the error output.

Good news: I was able to get admin passwd reset to default using video provided by @keyser. I used method 2 which FYI involved getting into single user mode from console and entering these commands (for my ufs file system):

/sbin/mount -a -t ufs

/etc/rc.initial.passwd

/sbin/reboot

Now I will backtrack to previous comments and figure out what to do.

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

If so you could try a forced pkg reinstall:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#forced-pkg-reinstall

Question: would running the forced pkg reinstall be my best option, with least risk?

Also, If I were to do a recover config.xml, will it put me back at 2.7.0?

And, are my latest backups also on the pfsense box, besides saving them off on another computer?

thanks

stephenw10

Running a forced pkg reinstall is probably you're only option other than reinstalling at this point. I wouldn't say it's particularly safe, I wouldn't recommend it if there were other options. I have done it successfully myself a number of times.

The config is independent of the pfSense version. You can restore a config from 2.7.0 into 2.7.2. It should always be backwards compatible not is not guaranteed the other way.

If you re-install 2.7.2 you can recover the existing config during the install.

The last 30 config versions are stored on the firewall in /cf/conf/backup.

timbopoise

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

Running a forced pkg reinstall is probably you're only option other than reinstalling at this point. I wouldn't say it's particularly safe, I wouldn't recommend it if there were other options. I have done it successfully myself a number of times.

I'm hesitating to take the next step and I'm building the courage. But I want to be prepared for the worst case scenario-the forced pkg install hoses pfSense and I have to consider rebuilding the box...I assume. I've learned that the box is not running a vanilla FreeBSD install with pfSense installed after. So I need to find the image I can put on a thumb drive to boot and install 2.7.2.

In a brief search I found Download pfSense Community Edition webpage which references a
USB Memstick installation and VGA Console option. Under filename guide it's pointed out that I use file:
pfSense-CE-memstick-2.7.2-RELEASE-amd64.img.gz but it's not a link.

However, when I read guidance for Download Installation Media page, instructions are given to select architecture, installer type, and console, but it's not obvious where this is done??

If I follow the "Download" link these questions are not answered and I'm left wondering how to download the right file.

Suggestions?

Thanks

SteveITS

@timbopoise Netgate changed to an online installer.
https://docs.netgate.com/pfsense/en/latest/install/netinstaller.html
you boot it, configure WAN, and it downloads CE for you.

(ignore the version of the installer itself and just use it)

timbopoise

@SteveITS said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

Netgate changed to an online installer.
https://docs.netgate.com/pfsense/en/latest/install/netinstaller.html
you boot it, configure WAN, and it downloads CE for you.

I appear to have downloaded the installer.

I did find the image using a search here but I will follow the network installer should there be a need. Also, I can't find the sha56 for that file.

I'll work on building the courage 8

Thanks

stephenw10

For the net installer? Look here: https://www.netgate.com/hubfs/pfSense-plus-installer-checksums.txt

Fort everything else check: https://files.netgate.com/hashes/

timbopoise

@stephenw10 said in PFSense CE 2.7.0 package manager has no available packages, can't find "openvpn-client-export":

Hmm, well hard to say what happened without logs. It sounds like the upgrade only partially completed. I've not seen it fail like that though. Usually failed upgrades would show library errors.

Do you have pkg access? Can you run: pkg update?

If so you could try a forced pkg reinstall:
https://docs.netgate.com/pfsense/en/latest/troubleshooting/upgrades.html#forced-pkg-reinstall

Regarding the suggestions on the referenced forced-pkg reinstal pagel...

A: Clean the repository and forcefully reinstall pkg, repo data, and the upgrade script:
pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

B: Force a reinstall of everything:
pkg-static upgrade -f

I've been able to stew over this because my router, despite failing to complete the upgrade and leaving me with no webgui management page, the router came up and works as it should (rules, forwards, etc). To be clear, I have not tried reinstalling yet...

Question: Shall I assume that A: will clear my configuration and I will have to relay on getting webGUI up and running in order to restore my config backup? While B: when it completes should set current config?

I might as well as, should I do either A or B, is there a way to restore backup from com CLI, if so what is the command or link to help?

Thank you.

SteveITS

@timbopoise Neither of those command sequences should reset the configuration.

timbopoise

@stephenw10

Per original suggestions regarding:
reinstall instructions

And passwd set, I've performed the first reinstall suggestion:

pkg-static clean -ay; pkg-static install -fy pkg pfSense-repo pfSense-upgrade

However, still no webpage interface shows up.
Here's the log: pfsense-reinstall-pkg-terminal-out.txt

Next, I'm performing force a reinstall of everything:

pkg-static upgrade -f

Success!! After reboot I was able to access the webpage dashboard.

Thanks for your help and I know I've been a nuisance.

Last Question: I need to reset password that I used to ssh in that was set to default. How is that done?
I have logged in with default and attempted passwd and provided new password but it did not get changed.
I'm not sure about using "3) Reset webConfigurator password" in ssh shell menu because it appears this might change
my webpage dashboard login which I don't want changed. Thanks