check_upgrade: "Updating repositories metadata" returned error code 1

[tinfoilmatt]

@morreale said in check_upgrade: "Updating repositories metadata" returned error code 1:

also how do i change my signature? or please delete it - very old

Home / morreale / Edit

[stephenw10]

@morreale said in check_upgrade: "Updating repositories metadata" returned error code 1:

Messages:
Your TAC Subscription expired on 2025-11-01 00:00:00. Please renew your TAC Subscription or purchase a pfSense+ subscription

That is the expected response if your Plus subscription expired. The Plus pkg repos won't be accessible until it's renewed.

You can always reinstall as CE and import the config.

[morreale]

@tinfoilmatt nope - i think it limited now

[tinfoilmatt]

@morreale Any browser extensions in use?

[stephenw10]

I think you need some reputation to see it. Try again now

[morreale]

@stephenw10 thanks

[pfpv]

I want to add that I had this problem when I updated to 2.8.0 and changed DHCP server to KEA, and I switched from the DNS Forwarder to DNS Resolver.

I switched from the DNS Forwarder to DNS Resolver only because the new KEA settings state: "DNS Registration. When checked, DHCP leases will automatically be registered with the DNS Resolver." So, I thought if I kept using the DNS Forwarder I'd lose DHCP lease registration. I wanted to use KEA but didn't want to lose DHCP lease registration and I wanted to use my pi-holes on my LAN that run unbound anyway. I used the forward-zone:
setting in pfSense's unbound to forward all DNS queries to my pi-hole(s).

With this setup I had the aforementioned error frequently. I have to say that I had had it before I made the changes in the unbound settings, i.e., when unbound was running without predefined upstream resolver.

When I realized that my DHCP leases will still be registered when I use the DNS Forwarder I switched to it and haven't seen this error ever since. So,

1. This error has something to do with unbound. I think the culprit has already been found (some kind of a race condition).
2. Please change the description in the DHCP Server settings from "When checked, DHCP leases will automatically be registered with the DNS Resolver" to "When checked, DHCP leases will automatically be registered with the DNS Resolver or Forwarder."

[stephenw10]

Hmm, so you hit it even using Unbound in forwarding mode?

[pfpv]

@stephenw10 Yes, that is correct. I thought maybe because I pointed to IPs on my LAN but it should work.

[Gertjan]

@pfpv

The recent kea DHCP server supported fully automated DNS hist name integration into local pfSense DNS system, 'unbound'.
This is a new solution to a very old problem.
New solutions are often most not perfect the first time, so ... why do you want to deal with the issues known to 2.8.0 when the way better 2.8.1 is available (since a couple of months now) ? My advise : easy : get the latest version.
I'm using myself the 2.8.1 equivalent, 25.07.1, and it works fine for me.

"unbound" is by nature a resolver, but you can tell it to 'forward'. That will be like doing your daily shoppings with a Ferrari, but why not, you decide ^^ And I get it, you have another 'DNS' device, the pi-hole.

You can also consider disabling unbound, and activate the original 'ancient' forwarder that came with pfSense, also called dnsmasq :

and forward this forwader to your LAN pi-hilo.
This forwarder can't do 'DHCP host name integration' though ...