"PHP Fatal error: Maximum execution time of 900 seconds exceeded in /etc/inc/util.inc on line 3728" after installing latest pfBlockerNG 3.2.0_12
-
@incith The same has happened to me. The web UI is completely unresponsive; I rebooted and after another 15 minute timeout the console login prompt showed up. PHP is using 100% of the cpu. I tried reverting back to backup #5 (the one that was autocreated before updating pfblockerNG), then rebooting. No change; it’s as if it didn’t restore from the earlier backup at all. I’m now attempting to deinstall pfblockerNG from the command line and it’s been stuck at “loading package instructions” for many minutes.
-
@gigabitwanted said in "PHP Fatal error: Maximum execution time of 900 seconds exceeded in /etc/inc/util.inc on line 3728" after installing latest pfBlockerNG 3.2.0_12:
and it’s been stuck at “loading package instructions” for many minutes
Yep, that's what I saw ....
Interrupting it after 'PHP' staying at 100 % for half on hours or so, and still blocked on “loading package instructions”, pfSense started, to use a previous ZFS ! (I use Plus), so the GUI cert was to old, and because stupid me was using SHTS certs .... :( so locked out nicely.
SSH and console was still ok.
The previous ZFS was based upon the original 24.03 and 24.03_1 was available, so ok lets upgrade ... but no, that re installs packages also so when it reaches pfBlockerng ..... blocked again.
Nice rabbit hole.De-installed pfBlockerng for the moment.
-
-
similar experience going from _08 to _15 on 2.7.2 CE edition... can no longer get to \status\dashboard menu also, and uninstalling pfblockerng from package manager is unresponsive.
in the meantime internet access and other menus continue to work...
what is the best resolution out there at this moment please?
-
@wufwuf Same here, did an update before coming here. It just hangs until timeout.
>>> Upgrading pfSense-pkg-pfBlockerNG-devel... Updating pfSense-core repository catalogue... Fetching meta.conf: Fetching packagesite.pkg: pfSense-core repository is up to date. Updating pfSense repository catalogue... Fetching meta.conf: Fetching packagesite.pkg: pfSense repository is up to date. All repositories are up to date. The following 1 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: pfSense-pkg-pfBlockerNG-devel: 3.2.0_8 -> 3.2.0_15 [pfSense] Number of packages to be upgraded: 1 The operation will free 1 MiB. 2 MiB to be downloaded. [1/1] Fetching pfSense-pkg-pfBlockerNG-devel-3.2.0_15.pkg: ......... done Checking integrity... done (0 conflicting) [1/1] Upgrading pfSense-pkg-pfBlockerNG-devel from 3.2.0_8 to 3.2.0_15... [1/1] Extracting pfSense-pkg-pfBlockerNG-devel-3.2.0_15: .......... done Removing pfBlockerNG-devel components... Menu items... done. Services... done. Loading package instructions... Removing pfBlockerNG...grep: /var/unbound/pfb_dnsbl.conf: No such file or directory All customizations/data will be retained... done. Saving updated package information... overwrite! Loading package configuration... done. Configuring package components... Loading package instructions...
-
I tried removing pfBlockerNG then reinstall it and it still hangs on update.
-
Mmm, OK seeing that in 2.7.2 with the devel package here too. Appears to be an issue with the pkg install/deinstall script. Digging....
-
Ok one thing you can do is kill the script in another terminal to allow installing the regular package which then restores access to the dashboard etc.
So try to remove the devel version:
Checking integrity... done (0 conflicting) Deinstallation has been requested for the following 1 packages (of 0 packages in the universe): Installed packages to be REMOVED: pfSense-pkg-pfBlockerNG-devel: 3.2.0_15 Number of packages to be removed: 1 The operation will free 6 MiB. Proceed with deinstalling packages? [y/N]: y [1/1] Deinstalling pfSense-pkg-pfBlockerNG-devel-3.2.0_15... Removing pfBlockerNG-devel components... Menu items... done. Services... done. Loading package instructions... ^C
It hangs there. I ^C'd out of it.
Try to install the regular pkg:[2.7.2-RELEASE][admin@t70.stevew.lan]/root: pkg-static install pfSense-pkg-pfBlockerNG Updating pfSense-core repository catalogue... Fetching meta.conf: 0% Fetching packagesite.pkg: 0% pfSense-core repository is up to date. Updating pfSense repository catalogue... Fetching meta.conf: 0% Fetching packagesite.pkg: 0% pfSense repository is up to date. All repositories are up to date. The following 1 package(s) will be affected (of 0 checked): New packages to be INSTALLED: pfSense-pkg-pfBlockerNG: 3.2.0_8 [pfSense] Number of packages to be installed: 1 The process will require 7 MiB more space. 2 MiB to be downloaded. Proceed with this action? [y/N]: y [1/1] Fetching pfSense-pkg-pfBlockerNG-3.2.0_8.pkg: 100% 2 MiB 2.1MB/s 00:01 Checking integrity... done (1 conflicting) - pfSense-pkg-pfBlockerNG-3.2.0_8 [pfSense] conflicts with pfSense-pkg-pfBlockerNG-devel-3.2.0_15 [installed] on /etc/inc/priv/pfblockerng.priv.inc Checking integrity... done (0 conflicting) Conflicts with the existing packages have been found. One more solver iteration is needed to resolve them. The following 2 package(s) will be affected (of 0 checked): Installed packages to be REMOVED: pfSense-pkg-pfBlockerNG-devel: 3.2.0_15 New packages to be INSTALLED: pfSense-pkg-pfBlockerNG: 3.2.0_8 [pfSense] Number of packages to be removed: 1 Number of packages to be installed: 1 The process will require 1 MiB more space. Proceed with this action? [y/N]: y [1/2] Deinstalling pfSense-pkg-pfBlockerNG-devel-3.2.0_15... Removing pfBlockerNG-devel components... Menu items... done. Services... done. Loading package instructions...
It also hangs there. In another terminal kill the stuck process:
USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND root 99141 0.0 0.1 13204 2824 u0 Is 27Jul24 0:00.01 login [pam] (login) root 896 0.0 0.2 13320 3200 u0 I 27Jul24 0:00.01 - -sh (sh) root 37739 0.0 0.2 13320 2928 u0 I+ 27Jul24 0:00.00 `-- /bin/sh /etc/rc.initial root 98197 0.0 0.1 13204 2832 v0 Is 27Jul24 0:00.01 login [pam] (login) root 2303 0.0 0.2 13320 3196 v0 I 27Jul24 0:00.02 - -sh (sh) root 4905 0.0 0.2 13320 2924 v0 I+ 27Jul24 0:00.00 `-- /bin/sh /etc/rc.initial root 98282 0.0 0.1 12788 2248 v1 Is+ 27Jul24 0:00.00 /usr/libexec/getty Pc ttyv1 root 98300 0.0 0.1 12788 2248 v2 Is+ 27Jul24 0:00.00 /usr/libexec/getty Pc ttyv2 root 98341 0.0 0.1 12788 2248 v3 Is+ 27Jul24 0:00.02 /usr/libexec/getty Pc ttyv3 root 98507 0.0 0.1 12788 2252 v4 Is+ 27Jul24 0:00.00 /usr/libexec/getty Pc ttyv4 root 98752 0.0 0.1 12788 2244 v5 Is+ 27Jul24 0:00.00 /usr/libexec/getty Pc ttyv5 root 98885 0.0 0.1 12788 2252 v6 Is+ 27Jul24 0:00.00 /usr/libexec/getty Pc ttyv6 root 98886 0.0 0.1 12788 2252 v7 Is+ 27Jul24 0:00.00 /usr/libexec/getty Pc ttyv7 root 66619 0.0 0.2 13320 2940 0 Is 11:47 0:00.01 /bin/sh /etc/rc.initial root 70940 0.0 0.3 16352 5176 0 I 11:47 0:00.08 - /bin/tcsh root 16321 0.0 0.4 19568 7300 0 I+ 11:59 0:00.00 `-- pkg-static install pfSense-pkg-pfBlockerNG root 16500 0.0 1.5 59988 29392 0 S+ 11:59 0:01.00 `-- pkg-static install pfSense-pkg-pfBlockerNG root 42185 69.1 2.5 70404 49340 0 R+ 11:59 0:40.13 `-- /usr/local/bin/php -f /etc/rc.packages pfSense-pkg-pfBlockerNG-devel DEINSTALL root 56040 0.0 0.2 13320 2940 1 Is 12:00 0:00.01 /bin/sh /etc/rc.initial root 60610 0.0 0.2 13792 4556 1 S 12:00 0:00.06 - /bin/tcsh root 74022 0.0 0.2 13388 3176 1 R+ 12:01 0:00.00 `-- ps -auwwd [2.7.2-RELEASE][admin@t70.stevew.lan]/root: kill 42185
The pkg then finishes installing and access is restored:
[1/2] Deleting files for pfSense-pkg-pfBlockerNG-devel-3.2.0_15: 100% Removing pfBlockerNG-devel components... Configuration... done. [2/2] Installing pfSense-pkg-pfBlockerNG-3.2.0_8... [2/2] Extracting pfSense-pkg-pfBlockerNG-3.2.0_8: 100% Saving updated package information... done. Loading package configuration... done. Configuring package components... Loading package instructions... Custom commands... Executing custom_php_install_command()... Rebuilding GeoIP tabs... done. Creating Firewall filter service... done. Renew Firewall filter executables... done. Starting Firewall filter Service... done. Creating DNSBL service... done. Renew DNSBL lighttpd executable... done. Creating DNSBL web server config ... done. Creating DNSBL Certificate... done. Starting DNSBL Service... done. Upgrading previous settings: Adv. Inbound firewall rule settings... no changes required ... done. OpenVPN/IPSec interface selections... no changes required ... done. Proofpoint/ET IQRisk settings... no changes required ... done. General Tab -> IP Tab settings... no changes required ... done. pfBlockerNGSuppress Alias -> IPv4 Suppression Customlist... no changes required ... done. Upgrading previous EasyLists to new format... no changes required ... done. Upgrading previous Firefox DoH to new format... no changes required ... done. MaxMind License Key configuration setting... no changes required ... done. Validating Widget cron settings... no changes required ... done. Upgrading... done Custom commands completed ... done. Executing custom_php_resync_config_command()...done. Menu items... done. Services... done. Writing configuration... done. pkg-static: Package database is busy while closing!
Or wait for a pkg update that fixes this.
Steve
-
-
@stephenw10 You, Sir, are a lifesaver
-
@stephenw10 What's the difference between the normal version 3.2.09 and the devel version 3.2.0_15 ?
Lucky running pfSense as a VM I have a backup before the update mess.
-
Thank you!
@stephenw10 -
It's a good thing I found your suggestion here @stephenw10!
My box was running hot for the past few hours!
-
What I'm asking myself right now is the reason why that package remains there for update.
It needs to be pulled out asap.. -
Hmmm....
Seeing PHP using up a lot of CPU usage still...
PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND
97521 root 1 135 0 69M 46M CPU1 1 80:11 100.16% php
93401 root 1 135 0 69M 46M CPU2 2 140:02 100.16% php
80957 root 1 135 0 69M 46M CPU0 0 111:35 99.82% php
19662 root 1 21 0 146M 55M accept 2 0:16 0.32% php-fpm
44487 root 1 20 0 14M 3812K CPU3 3 0:00 0.08% topI will try a reboot...
-
I had to reboot. pfBlocker cron job was stuck at 100% before that.
-
@stephenw10 the pfsense box upon reboot is stuck on this line:
[fib_algo] inet.0 (bsearch4#20) rebuild_fd_flm: switching algo to radix4_lockless
line. ie not able to get into terminal - is this expected from this bug or is the box suffering from some other issue before this pfblockerng issue?
May require a complete reinstall of pfsense???
-
Nope that looks like something different. That line is not actually an error, that's always shown.
Try hitting
ctl+t
and see if it responds with whatever process is stuck. -
@stephenw10 Thank you for this! What an unmitigated clusterfornication this has been. Well, that's not true, you've helped mitigate it! But wow.
-
Mmm, this is the devel package where new code is added for testing. So normally this should not affect that many people but in pfBlocker the dev pkg has almost become the default so.....
We are working on it....
-
@stephenw10 Definitely understood and appreciated! The whole situation with the "devel" and "normal" packages becoming (to my knowledge) equivalent was always confusing. Much credit for addressing this and getting help out incredibly rapidly!
-
@stephenw10 indeed, after a netflix episode it is back to the interface list / numbered menu again...
but how do i do the uninstall per above screen cap - given can't get into the GUI now? is there a CL command to uninstall as you described above?