Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Problem after upgrading to 24.11-RC

    Scheduled Pinned Locked Moved General pfSense Questions
    44 Posts 6 Posters 3.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      m.d.frederiksen @stephenw10
      last edited by

      @stephenw10

      My assumption too currently - a “false flag” thing.

      I will now revert to the version installed by the USB-installer, and refrain from upgrading, and go directly on to restoring my Backup-XML, and check wether issue also exists in that version ..

      I’ll be back 🤓

      1 Reply Last reply Reply Quote 1
      • M
        m.d.frederiksen @stephenw10
        last edited by

        @stephenw10

        Without the upgrade to current 24.11-RC my issue is the same.

        pfSense 24.03.jpg

        I am now 98% convinced that its my saved XML-config that gives rise to the problem.
        I absolutely hate that :-)

        Will re-upgrade to a clean 24.11-RC installation, and rebuild setup manually.

        If I end up same place again (with the issue), you will hear about it.
        if I end up with the issue permanently gone (after proper testing), you will also hear about it.

        1 Reply Last reply Reply Quote 0
        • M
          m.d.frederiksen @stephenw10
          last edited by m.d.frederiksen

          This post is deleted!
          1 Reply Last reply Reply Quote 0
          • M
            m.d.frederiksen @stephenw10
            last edited by

            @stephenw10

            So far all roads lead to Rome .. My best end case scenario is on 24.11-RC with all packages installed and functional (as far as I can determine), but with the "artifact" present.

            I would like to try a CLEAN install of 24.11-RC from an USB-device, such that I can eliminate the first update-round up to 24.11-RC .. This would eliminate any "spill over" from the older 24.03-STABLE (only ISO I have).

            Could you possibly provide a "newest" ISO ?

            A M 2 Replies Last reply Reply Quote 0
            • A
              Antibiotic @m.d.frederiksen
              last edited by Antibiotic

              @m-d-frederiksen
              Could you possibly provide a "newest" ISO ?
              netgate-installer-v1.0-RC-amd64-20240919-1435.img

              https://docs.netgate.com/pfsense/en/latest/install/download-installer-image.html

              pfSense plus 24.11 on Topton mini PC
              CPU: Intel N100
              NIC: Intel i-226v 4 pcs
              RAM : 16 GB DDR5
              Disk: 128 GB NVMe
              Brgds, Archi

              1 Reply Last reply Reply Quote 1
              • M
                m.d.frederiksen @m.d.frederiksen
                last edited by m.d.frederiksen

                @stephenw10

                Using netgate-installer-v1.0-RC-amd64-20240919-1435.img (Thanks @Antibiotic), - I end up exactly same place .. Everything working as expected (AFAIK), but "artifact" is still present.

                Either my fairly new NetGate 4200 is developing a very local problem, or some issue exists in the XML-file exported by the version prior the new 24.11-RC

                Or my combo of packages trigger some very hidden bug, when the combo includes pfBlockerNG and Zeke .. And once the bug was triggered, and fixed (by removing Zeke and pfBlockerNG), NO other package may be installed, or the bug will return, even if Zeke and pfBlockerNG remains un-installed .. Wierd science.

                This will take a better man than me. I will ignore the issue until another update release tempts me :-)

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  About the only thing I could imagine being an issue in the config is the pkg branch setting.

                  However in the new dynamic repo system the firewall cannot pull in older pkgs. The reo tree presented to 24.11-RC systems does not have the older branches available.

                  And when we checked your pkgs they all looked like the correct versions... 🤔

                  M 2 Replies Last reply Reply Quote 0
                  • M
                    m.d.frederiksen @stephenw10
                    last edited by

                    @stephenw10

                    Remote access for your tech staff is offered (again).

                    I am pretty positive one of the devs (wizards) could trace into the failing "pkg info" command, and tell us whats up in 90 seconds flat :-)

                    In any case .. I am stuck as of now.

                    stephenw10S 1 Reply Last reply Reply Quote 0
                    • M
                      m.d.frederiksen @stephenw10
                      last edited by m.d.frederiksen

                      @stephenw10

                      A thought has struck me ..

                      Remember at the beginning of this thread, that I tested the offending command without the "2>&1" redirect,
                      and it complets with NO errors, and correctly generates the expected list directly to the console ..

                      But it fails when the redirect is present ..

                      Suppose this problem is not sourcing the list, but rather that target denies "entry" ?
                      A priviledge-issue, insufficient rights to some ressource (the redirect target) ?

                      Tried this in CLI:

                      pkg clean -y
                      pkg upgrade -f

                      No change .. :-)

                      stephenw10S 1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator @m.d.frederiksen
                        last edited by

                        @m-d-frederiksen said in Problem after upgrading to 24.11-RC:

                        Remote access for your tech staff is offered (again).

                        Yes, thank you. I believe they plan to do so on Monday if you're able to do that.

                        M 1 Reply Last reply Reply Quote 0
                        • M
                          m.d.frederiksen @stephenw10
                          last edited by

                          @stephenw10

                          BRILLIANT !

                          Please instruct me on what environment you need / expect ?

                          Do you need a workstation running specific host-software on LAN, .. and so on.

                          Thanks in advance.

                          cmcdonaldC 1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator @m.d.frederiksen
                            last edited by

                            @m-d-frederiksen said in Problem after upgrading to 24.11-RC:

                            Suppose this problem is not sourcing the list, but rather that target denies "entry" ?
                            A priviledge-issue, insufficient rights to some ressource (the redirect target) ?

                            Are you not logged in as admin/root when you tried this?

                            The redirect is not expected to work at the CLI directly but it should work fine when called by repoc.

                            M 1 Reply Last reply Reply Quote 0
                            • M
                              m.d.frederiksen @stephenw10
                              last edited by m.d.frederiksen

                              @stephenw10

                              Yes, in my simple attempt to fathom the issue, I claim that the "2>&1" is the part that is the culprit.
                              The recieving end is unable to parse the generated list.
                              The same list that looks perfectly valid when NOT redirected, - in the console.

                              And yes, I am root ..

                              pfSense 24.03_root.jpg

                              M 1 Reply Last reply Reply Quote 0
                              • M
                                m.d.frederiksen @m.d.frederiksen
                                last edited by

                                UPDATE:

                                Zeek has left the equation .. apparently felt the heat.
                                Now pfBlockerNG alone is keeping up the shenanigans.

                                D 1 Reply Last reply Reply Quote 1
                                • cmcdonaldC
                                  cmcdonald Netgate Developer @m.d.frederiksen
                                  last edited by

                                  @m-d-frederiksen send me an email cmcdonald<at>netgate.com so we can setup a remote access session. Thanks

                                  Need help fast? https://www.netgate.com/support

                                  M 1 Reply Last reply Reply Quote 2
                                  • M
                                    m.d.frederiksen @cmcdonald
                                    last edited by m.d.frederiksen

                                    @cmcdonald

                                    Mail has been sent. Thank you.

                                    cmcdonaldC 1 Reply Last reply Reply Quote 0
                                    • cmcdonaldC
                                      cmcdonald Netgate Developer @m.d.frederiksen
                                      last edited by

                                      We've worked it out, root cause identified and a fix proposed. Unsure yet how this will impact the 24.11-RELEASE.

                                      If you are impacted by this, make sure to uninstall any packages that you are not actively using.

                                      Need help fast? https://www.netgate.com/support

                                      cmcdonaldC 1 Reply Last reply Reply Quote 2
                                      • cmcdonaldC
                                        cmcdonald Netgate Developer @cmcdonald
                                        last edited by

                                        The fix will land in 24.11 after all :)

                                        Need help fast? https://www.netgate.com/support

                                        1 Reply Last reply Reply Quote 3
                                        • D
                                          Draco @m.d.frederiksen
                                          last edited by

                                          @m-d-frederiksen Thank you for preserving and helping Netgate track this bug down. You've helped make pfSense better for all of us!!

                                          1 Reply Last reply Reply Quote 1
                                          • W
                                            williamrolison
                                            last edited by

                                            I hit this with 24.11 final build.

                                            Everything seemed to go fine until the reboot. 1.5 hours later system still offline. Had to power cycle to get back up then saw upgrade didn't happen.

                                            Ended up having to remove 4 packages before update would work:

                                            pfBlockerNG
                                            WireGuard
                                            Zeek
                                            Ntopng

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.