Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem after upgrading to 24.11-RC

    General pfSense Questions
    6
    44
    3.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      m.d.frederiksen @stephenw10
      last edited by m.d.frederiksen

      @stephenw10

      What other log ?

      Specifics (cli commands) ?

      Can it be my XML-backup that corrupts the system somehow when restoring it ?
      I would really hate to have to re-build my setup from scratch :-(

      Oh .. and an interesting observation is, that removal of both fpBlockerNG and Zeek fixes the problem.

      But .. if ANY other package is installed at a later point - the error returns.

      stephenw10S 1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator @m.d.frederiksen
        last edited by

        @m-d-frederiksen said in Problem after upgrading to 24.11-RC:

        if ANY other package is installed at a later point - the error returns.

        Hmm, that's interesting.

        By logs I mean in the main system logs when that command is run. Or when you install a pkg etc.

        M 1 Reply Last reply Reply Quote 0
        • M
          m.d.frederiksen @stephenw10
          last edited by m.d.frederiksen

          @stephenw10

          Have looked through all logs available under Status-> System Logs

          Nothing pertaining to the issue was found.

          And absolutely no malfunctions found anywhere.
          Its almost like a “false flag” error-status - if it was an antivirus-product, if you know what I mean ..

          EXCEPT .. Checking for updates from CLI (13) fails while error-status is present.

          This might be an issue 🤣🤣

          Thanks for your time.

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Oh how does it fail with menu option 13?

            M 1 Reply Last reply Reply Quote 0
            • M
              m.d.frederiksen @stephenw10
              last edited by

              @stephenw10

              IMG_4907.jpeg

              I imagine it will have a hard time upgrading packages it cannot retrieve a list for ?!

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                Not really, that shouldn't prevent it updating. It should still report you are up to date below that?

                It's only failing to compile the list of installed packages for repoc. pkg itself should still work fine.

                When we saw this before it was just an ugly artifact. It looks like it is here too.

                M 4 Replies Last reply Reply Quote 0
                • M
                  m.d.frederiksen @stephenw10
                  last edited by

                  @stephenw10

                  My assumption too currently - a “false flag” thing.

                  I will now revert to the version installed by the USB-installer, and refrain from upgrading, and go directly on to restoring my Backup-XML, and check wether issue also exists in that version ..

                  I’ll be back 🤓

                  1 Reply Last reply Reply Quote 1
                  • M
                    m.d.frederiksen @stephenw10
                    last edited by

                    @stephenw10

                    Without the upgrade to current 24.11-RC my issue is the same.

                    pfSense 24.03.jpg

                    I am now 98% convinced that its my saved XML-config that gives rise to the problem.
                    I absolutely hate that :-)

                    Will re-upgrade to a clean 24.11-RC installation, and rebuild setup manually.

                    If I end up same place again (with the issue), you will hear about it.
                    if I end up with the issue permanently gone (after proper testing), you will also hear about it.

                    1 Reply Last reply Reply Quote 0
                    • M
                      m.d.frederiksen @stephenw10
                      last edited by m.d.frederiksen

                      This post is deleted!
                      1 Reply Last reply Reply Quote 0
                      • M
                        m.d.frederiksen @stephenw10
                        last edited by

                        @stephenw10

                        So far all roads lead to Rome .. My best end case scenario is on 24.11-RC with all packages installed and functional (as far as I can determine), but with the "artifact" present.

                        I would like to try a CLEAN install of 24.11-RC from an USB-device, such that I can eliminate the first update-round up to 24.11-RC .. This would eliminate any "spill over" from the older 24.03-STABLE (only ISO I have).

                        Could you possibly provide a "newest" ISO ?

                        A M 2 Replies Last reply Reply Quote 0
                        • A
                          Antibiotic @m.d.frederiksen
                          last edited by Antibiotic

                          @m-d-frederiksen
                          Could you possibly provide a "newest" ISO ?
                          netgate-installer-v1.0-RC-amd64-20240919-1435.img

                          https://docs.netgate.com/pfsense/en/latest/install/download-installer-image.html

                          pfSense plus 24.11 on Topton mini PC
                          CPU: Intel N100
                          NIC: Intel i-226v 4 pcs
                          RAM : 16 GB DDR5
                          Disk: 128 GB NVMe
                          Brgds, Archi

                          1 Reply Last reply Reply Quote 1
                          • M
                            m.d.frederiksen @m.d.frederiksen
                            last edited by m.d.frederiksen

                            @stephenw10

                            Using netgate-installer-v1.0-RC-amd64-20240919-1435.img (Thanks @Antibiotic), - I end up exactly same place .. Everything working as expected (AFAIK), but "artifact" is still present.

                            Either my fairly new NetGate 4200 is developing a very local problem, or some issue exists in the XML-file exported by the version prior the new 24.11-RC

                            Or my combo of packages trigger some very hidden bug, when the combo includes pfBlockerNG and Zeke .. And once the bug was triggered, and fixed (by removing Zeke and pfBlockerNG), NO other package may be installed, or the bug will return, even if Zeke and pfBlockerNG remains un-installed .. Wierd science.

                            This will take a better man than me. I will ignore the issue until another update release tempts me :-)

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              About the only thing I could imagine being an issue in the config is the pkg branch setting.

                              However in the new dynamic repo system the firewall cannot pull in older pkgs. The reo tree presented to 24.11-RC systems does not have the older branches available.

                              And when we checked your pkgs they all looked like the correct versions... 🤔

                              M 2 Replies Last reply Reply Quote 0
                              • M
                                m.d.frederiksen @stephenw10
                                last edited by

                                @stephenw10

                                Remote access for your tech staff is offered (again).

                                I am pretty positive one of the devs (wizards) could trace into the failing "pkg info" command, and tell us whats up in 90 seconds flat :-)

                                In any case .. I am stuck as of now.

                                stephenw10S 1 Reply Last reply Reply Quote 0
                                • M
                                  m.d.frederiksen @stephenw10
                                  last edited by m.d.frederiksen

                                  @stephenw10

                                  A thought has struck me ..

                                  Remember at the beginning of this thread, that I tested the offending command without the "2>&1" redirect,
                                  and it complets with NO errors, and correctly generates the expected list directly to the console ..

                                  But it fails when the redirect is present ..

                                  Suppose this problem is not sourcing the list, but rather that target denies "entry" ?
                                  A priviledge-issue, insufficient rights to some ressource (the redirect target) ?

                                  Tried this in CLI:

                                  pkg clean -y
                                  pkg upgrade -f

                                  No change .. :-)

                                  stephenw10S 1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator @m.d.frederiksen
                                    last edited by

                                    @m-d-frederiksen said in Problem after upgrading to 24.11-RC:

                                    Remote access for your tech staff is offered (again).

                                    Yes, thank you. I believe they plan to do so on Monday if you're able to do that.

                                    M 1 Reply Last reply Reply Quote 0
                                    • M
                                      m.d.frederiksen @stephenw10
                                      last edited by

                                      @stephenw10

                                      BRILLIANT !

                                      Please instruct me on what environment you need / expect ?

                                      Do you need a workstation running specific host-software on LAN, .. and so on.

                                      Thanks in advance.

                                      cmcdonaldC 1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator @m.d.frederiksen
                                        last edited by

                                        @m-d-frederiksen said in Problem after upgrading to 24.11-RC:

                                        Suppose this problem is not sourcing the list, but rather that target denies "entry" ?
                                        A priviledge-issue, insufficient rights to some ressource (the redirect target) ?

                                        Are you not logged in as admin/root when you tried this?

                                        The redirect is not expected to work at the CLI directly but it should work fine when called by repoc.

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          m.d.frederiksen @stephenw10
                                          last edited by m.d.frederiksen

                                          @stephenw10

                                          Yes, in my simple attempt to fathom the issue, I claim that the "2>&1" is the part that is the culprit.
                                          The recieving end is unable to parse the generated list.
                                          The same list that looks perfectly valid when NOT redirected, - in the console.

                                          And yes, I am root ..

                                          pfSense 24.03_root.jpg

                                          M 1 Reply Last reply Reply Quote 0
                                          • M
                                            m.d.frederiksen @m.d.frederiksen
                                            last edited by

                                            UPDATE:

                                            Zeek has left the equation .. apparently felt the heat.
                                            Now pfBlockerNG alone is keeping up the shenanigans.

                                            D 1 Reply Last reply Reply Quote 1
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.