Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Update Clarity

    Scheduled Pinned Locked Moved General pfSense Questions
    13 Posts 3 Posters 221 Views 3 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • zoqaskZ Offline
      zoqask
      last edited by zoqask

      I have had a search around but couldn't find the exact answer. Been using pfsense for many years. And updates appeared and rolled out flawlessly.

      My dashboard says

      fc81c4e3-89cc-4aa2-b3ed-d89282b46ed2-image.png

      And my update area show this.

      d1d49139-fe98-4152-87c3-a81ee6ef8013-image.png

      Question should I be running on 2.7.2? If so how do I go about initiating the upgrade or do I have to update to 2.7.1 first? Some advice would be great thanks. As I sy this has been seemless before and we have this little quirk.

      Advice appreciated thanks.

      this is community edition. yes it appears outdated I know. But it didn't raise an alarm for being out of date.

      Q\ Will running update from console at console pull the latest version automatically?

      S 2 Replies Last reply Reply Quote 0
      • S Offline
        SteveITS Rebel Alliance @zoqask
        last edited by

        @zoqask If offered there, you can skip versions.

        Also see https://docs.netgate.com/pfsense/en/latest/releases/2-7-1.html#troubleshooting

        Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
        Upvote 👍 helpful posts!

        1 Reply Last reply Reply Quote 0
        • S Offline
          SteveITS Rebel Alliance @zoqask
          last edited by

          @zoqask re: console, you still need to set the branch. That’s required going forward instead of leaving it at “current.”

          Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
          When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
          Upvote 👍 helpful posts!

          1 Reply Last reply Reply Quote 0
          • zoqaskZ Offline
            zoqask
            last edited by zoqask

            Thanks for that so selecting 2.7.2 and running a console update should do the trick then by the sounds of it.

            I have an identical hardware box sitting in the corner. gave it a wan and it seemed to progress through the updates right up to 2.8 using the command console.

            finger crossed for this box although I can export the config over to this other box for test knowing it would actually upgrade is it should helps.

            1 Reply Last reply Reply Quote 0
            • stephenw10S Offline
              stephenw10 Netgate Administrator
              last edited by

              Yup you can go straight to 2.7.2. Then you will see 2.8.0 and can upgrade to that. Or wait for 2.8.1 real-soon-now.

              1 Reply Last reply Reply Quote 0
              • zoqaskZ Offline
                zoqask
                last edited by

                Thanks all.

                I tried it from command line and I get this t then just exits.

                *Question* Any ideas what command I can run in the shell to pull the 2.7.2? Really not sure. For some reason I think the update has borked somewhere hence the lack of dashboard notifications.

                d29760bd-c40b-4cf7-950a-e008d1da72ae-image.png

                My gui settings are

                20917ea4-6c45-4f67-90bc-edda9a5f1fff-image.png

                1 Reply Last reply Reply Quote 0
                • stephenw10S Offline
                  stephenw10 Netgate Administrator
                  last edited by

                  Run at the command line: certctl rehash
                  Then try again.

                  1 Reply Last reply Reply Quote 0
                  • zoqaskZ Offline
                    zoqask
                    last edited by

                    Thanks for that. In reality and from my screenshots previous what do you think has happened to cause this?. I know you don't have a crystal ball but identifying why these updates didn't register / notify would be good the know.

                    e90ad95d-5664-4a1d-9fba-b225d559b11c-image.png

                    S 1 Reply Last reply Reply Quote 0
                    • S Offline
                      SteveITS Rebel Alliance @zoqask
                      last edited by

                      @zoqask Well per the link I posted above, "Due to changes in pkg, the new version of pkg may not be able to properly locate and use the CA trust store when running on the previous version before upgrading." A lot of (all) people had to run that command to be able to update.

                      Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
                      When upgrading, allow 10-15 minutes to reboot, or more depending on packages, and device or disk speed.
                      Upvote 👍 helpful posts!

                      1 Reply Last reply Reply Quote 0
                      • zoqaskZ Offline
                        zoqask
                        last edited by

                        Ok understood. I will try it out of hours and see if it gets a result.

                        Thanks in advance to both of you if t does🤝.

                        If it doesn't work I will post a screenshot. Hopefully if this is a common issue indeed its tried / tested and a recurring theme is the past (As you say). Having had others wipe the sweat from their brow hopefully I can as well.

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S Offline
                          stephenw10 Netgate Administrator
                          last edited by

                          Yup it was a known bug in 2.7.0. It's fixed in 2.7.2 forward.

                          1 Reply Last reply Reply Quote 0
                          • zoqaskZ Offline
                            zoqask
                            last edited by

                            Ran certctl rehash

                            44e7036e-7ebe-4964-a2f2-a0c3ff18a0f9-image.png

                            I now get update request. So its a case of waiting for the right time out of hours now and trying it out.

                            59062c4a-75e5-403a-be28-939acb2740ec-image.png

                            Out of interest, when you progress in the command line and is says saving old kernel etc. If the install fails for some reason how do you revert back to the previous version. This may be an incredibly overly simplified question but some sort of command line fu would be helpful for those of us that aren't clocking into these appliances every day.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S Offline
                              stephenw10 Netgate Administrator
                              last edited by

                              You can choose to boot the old kernel at the bootloader menu. But that's only the kernel, it will still fail to boot if the rest of the system is broken.

                              In ZFS you can create a snapshot boot environment before upgrading you can roll back to. Plus does that automatically.

                              1 Reply Last reply Reply Quote 0
                              • First post
                                Last post
                              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.