Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    25.07 failed install

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    15 Posts 2 Posters 213 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M Offline
      michmoor LAYER 8 Rebel Alliance
      last edited by michmoor

      SG-1100
      OS: 24.11

      Trying to upgrade to the latest version and receiving the following error. I rebooted the 1100 prior to starting the upgrade process to clear up any lingering issues as it had an uptime of 240 days.

      [68/73] Fetching libssh2-1.11.1,3.pkg: ... done
      [69/73] Fetching php83-bcmath-8.3.19.pkg: . done
      [70/73] Fetching pftop-0.13.pkg: . done
      [71/73] Fetching php83-sysvsem-8.3.19.pkg: . done
      [72/73] Fetching expat-2.7.1.pkg: . done
      [73/73] Fetching py311-libzfs-1.1.2023020700_3.pkg: .... done
      Checking integrity... done (0 conflicting)
      [1/73] Upgrading python311 from 3.11.10 to 3.11.11...
      Failed

      Full log

      >>> Updating repositories metadata...
      Updating pfSense-core repository catalogue...
      Fetching meta.conf: . done
      Fetching data.pkg: . done
      Processing entries: . done
      pfSense-core repository update completed. 5 packages processed.
      Updating pfSense repository catalogue...
      Fetching meta.conf: . done
      Fetching data.pkg: ......... done
      Processing entries: 
      Processing entries............. done
      pfSense repository update completed. 707 packages processed.
      All repositories are up to date.
      >>> Setting vital flag on pkg...done.
      >>> Setting vital flag on pfSense...done.
      >>> Renaming current boot environment from default to default_20251029110259...done.
      >>> Cloning current boot environment default_20251029110259...done.
      >>> Removing vital flag from php83...done.
      >>> Downloading Netgate Nexus...
      The following packages will be fetched:
      
      New packages to be FETCHED:
      	pfSense-pkg-Nexus: 25.07.1_1 (40 MiB: 100.00% of the 40 MiB to download)
      
      Number of packages to be fetched: 1
      
      The process will require 40 MiB more space.
      40 MiB to be downloaded.
      Fetching pfSense-pkg-Nexus-25.07.1_1.pkg: .......... done
      >>> Upgrading packages in cloned boot environment default...
      Updating pfSense-core repository catalogue...
      pfSense-core repository is up to date.
      Updating pfSense repository catalogue...
      pfSense repository is up to date.
      All repositories are up to date.
      Checking for upgrades (71 candidates): .......... done
      Processing candidates (71 candidates): .......... done
      The following 73 package(s) will be affected (of 0 checked):
      
      New packages to be INSTALLED:
      	brotli: 1.1.0,1 [pfSense]
      	if_pppoe-kmod: 25.07.1.1500029 [pfSense]
      
      Installed packages to be UPGRADED:
      	bind-tools: 9.20.2 -> 9.20.6 [pfSense]
      	boost-libs: 1.85.0 -> 1.86.0 [pfSense]
      	ca_root_nss: 3.104 -> 3.104_1 [pfSense]
      	curl: 8.10.1 -> 8.11.0_1 [pfSense]
      	dhcpcd: 10.1.0 -> 10.2.0 [pfSense]
      	dnsmasq: 2.90_2,1 -> 2.90_4,1 [pfSense]
      	expat: 2.6.3 -> 2.7.1 [pfSense]
      	glib: 2.80.5,2 -> 2.80.5_1,2 [pfSense]
      	kea: 2.6.1_1 -> 2.6.2 [pfSense]
      	libnghttp2: 1.63.0 -> 1.64.0 [pfSense]
      	libpfctl: 0.13 -> 0.15 [pfSense]
      	libssh2: 1.11.0_1,3 -> 1.11.1,3 [pfSense]
      	libuv: 1.49.1 -> 1.49.2 [pfSense]
      	luajit-openresty: 2.1.20240815 -> 2.1.20241104 [pfSense]
      	miniupnpd: 2.3.7,1 -> 2.3.7_1,1 [pfSense]
      	nginx: 1.26.2_6,3 -> 1.26.3,3 [pfSense]
      	ntp: 4.2.8p18_1 -> 4.2.8p18_5 [pfSense]
      	openldap26-client: 2.6.8 -> 2.6.9 [pfSense]
      	opensc: 0.25.1 -> 0.26.0 [pfSense]
      	openvpn: 2.6.12 -> 2.6.14 [pfSense]
      	pfSense: 24.11 -> 25.07.1 [pfSense]
      	pfSense-base: 24.11 -> 25.07.1 [pfSense-core]
      	pfSense-boot: 24.11 -> 25.07.1 [pfSense-core]
      	pfSense-composer-deps: 0.1 -> 0.3 [pfSense]
      	pfSense-default-config-serial: 24.11 -> 25.07.1 [pfSense]
      	pfSense-kernel-pfSense: 24.11 -> 25.07.1 [pfSense-core]
      	pfSense-repo: 24.11 -> 25.07.1 [pfSense]
      	pftop: 0.10_1 -> 0.13 [pfSense]
      	php83: 8.3.12 -> 8.3.19 [pfSense]
      	php83-bcmath: 8.3.12 -> 8.3.19 [pfSense]
      	php83-bz2: 8.3.12 -> 8.3.19 [pfSense]
      	php83-ctype: 8.3.12 -> 8.3.19 [pfSense]
      	php83-curl: 8.3.12 -> 8.3.19 [pfSense]
      	php83-dom: 8.3.12 -> 8.3.19 [pfSense]
      	php83-filter: 8.3.12 -> 8.3.19 [pfSense]
      	php83-ftp: 8.3.12 -> 8.3.19 [pfSense]
      	php83-gettext: 8.3.12 -> 8.3.19 [pfSense]
      	php83-gmp: 8.3.12 -> 8.3.19 [pfSense]
      	php83-intl: 8.3.12 -> 8.3.19 [pfSense]
      	php83-ldap: 8.3.12 -> 8.3.19 [pfSense]
      	php83-mbstring: 8.3.12 -> 8.3.19 [pfSense]
      	php83-opcache: 8.3.12 -> 8.3.19 [pfSense]
      	php83-pcntl: 8.3.12 -> 8.3.19 [pfSense]
      	php83-pdo: 8.3.12 -> 8.3.19 [pfSense]
      	php83-pdo_sqlite: 8.3.12 -> 8.3.19 [pfSense]
      	php83-pfSense-module: 0.99 -> 0.105 [pfSense]
      	php83-posix: 8.3.12 -> 8.3.19 [pfSense]
      	php83-readline: 8.3.12 -> 8.3.19 [pfSense]
      	php83-session: 8.3.12 -> 8.3.19 [pfSense]
      	php83-shmop: 8.3.12 -> 8.3.19 [pfSense]
      	php83-simplexml: 8.3.12 -> 8.3.19 [pfSense]
      	php83-sockets: 8.3.12 -> 8.3.19 [pfSense]
      	php83-sqlite3: 8.3.12 -> 8.3.19 [pfSense]
      	php83-sysvmsg: 8.3.12 -> 8.3.19 [pfSense]
      	php83-sysvsem: 8.3.12 -> 8.3.19 [pfSense]
      	php83-sysvshm: 8.3.12 -> 8.3.19 [pfSense]
      	php83-tokenizer: 8.3.12 -> 8.3.19 [pfSense]
      	php83-xml: 8.3.12 -> 8.3.19 [pfSense]
      	php83-xmlreader: 8.3.12 -> 8.3.19 [pfSense]
      	php83-xmlwriter: 8.3.12 -> 8.3.19 [pfSense]
      	php83-zlib: 8.3.12 -> 8.3.19 [pfSense]
      	protobuf: 28.2,1 -> 28.3,1 [pfSense]
      	protobuf-c: 1.4.1_6 -> 1.4.1_7 [pfSense]
      	py311-libzfs: 1.1.2023020700_2 -> 1.1.2023020700_3 [pfSense]
      	py311-packaging: 24.1 -> 24.2 [pfSense]
      	python311: 3.11.10 -> 3.11.11 [pfSense]
      	radvd: 2.19_4 -> 2.20 [pfSense]
      	socat: 1.8.0.1 -> 1.8.0.2 [pfSense]
      	sudo: 1.9.16 -> 1.9.16p2 [pfSense]
      	tailscale: 1.76.1 -> 1.82.5 [pfSense]
      	unbound: 1.22.0 -> 1.24.1 [pfSense]
      
      Number of packages to be installed: 2
      Number of packages to be upgraded: 71
      
      The operation will free 20 MiB.
      294 MiB to be downloaded.
      [1/73] Fetching unbound-1.24.1.pkg: .......... done
      [2/73] Fetching nginx-1.26.3,3.pkg: ...... done
      [3/73] Fetching pfSense-base-25.07.1.pkg: .......... done
      [4/73] Fetching php83-filter-8.3.19.pkg: .. done
      [5/73] Fetching php83-pdo_sqlite-8.3.19.pkg: . done
      [6/73] Fetching php83-curl-8.3.19.pkg: ... done
      [7/73] Fetching libuv-1.49.2.pkg: ... done
      [8/73] Fetching boost-libs-1.86.0.pkg: .......... done
      [9/73] Fetching php83-gmp-8.3.19.pkg: . done
      [10/73] Fetching php83-ldap-8.3.19.pkg: .. done
      [11/73] Fetching tailscale-1.82.5.pkg: .......... done
      [12/73] Fetching openvpn-2.6.14.pkg: ......... done
      [13/73] Fetching libnghttp2-1.64.0.pkg: .. done
      [14/73] Fetching php83-xmlwriter-8.3.19.pkg: . done
      [15/73] Fetching dnsmasq-2.90_4,1.pkg: ...... done
      [16/73] Fetching bind-tools-9.20.6.pkg: .......... done
      [17/73] Fetching py311-packaging-24.2.pkg: ........ done
      [18/73] Fetching php83-simplexml-8.3.19.pkg: . done
      [19/73] Fetching php83-pdo-8.3.19.pkg: .. done
      [20/73] Fetching php83-ftp-8.3.19.pkg: . done
      [21/73] Fetching pfSense-25.07.1.pkg: .......... done
      [22/73] Fetching radvd-2.20.pkg: ... done
      [23/73] Fetching ntp-4.2.8p18_5.pkg: ........ done
      [24/73] Fetching php83-opcache-8.3.19.pkg: . done
      [25/73] Fetching php83-bz2-8.3.19.pkg: . done
      [26/73] Fetching php83-sockets-8.3.19.pkg: . done
      [27/73] Fetching if_pppoe-kmod-25.07.1.1500029.pkg: . done
      [28/73] Fetching php83-pfSense-module-0.105.pkg: . done
      [29/73] Fetching opensc-0.26.0.pkg: .......... done
      [30/73] Fetching protobuf-c-1.4.1_7.pkg: . done
      [31/73] Fetching php83-sysvshm-8.3.19.pkg: . done
      [32/73] Fetching php83-posix-8.3.19.pkg: .. done
      [33/73] Fetching php83-pcntl-8.3.19.pkg: . done
      [34/73] Fetching pfSense-boot-25.07.1.pkg: .......... done
      [35/73] Fetching php83-xmlreader-8.3.19.pkg: . done
      [36/73] Fetching php83-readline-8.3.19.pkg: . done
      [37/73] Fetching miniupnpd-2.3.7_1,1.pkg: ... done
      [38/73] Fetching ca_root_nss-3.104_1.pkg: .... done
      [39/73] Fetching php83-sqlite3-8.3.19.pkg: . done
      [40/73] Fetching python311-3.11.11.pkg: .......... done
      [41/73] Fetching pfSense-repo-25.07.1.pkg: . done
      [42/73] Fetching pfSense-default-config-serial-25.07.1.pkg: . done
      [43/73] Fetching php83-session-8.3.19.pkg: .. done
      [44/73] Fetching kea-2.6.2.pkg: .......... done
      [45/73] Fetching dhcpcd-10.2.0.pkg: ....... done
      [46/73] Fetching php83-mbstring-8.3.19.pkg: ......... done
      [47/73] Fetching pfSense-composer-deps-0.3.pkg: ........ done
      [48/73] Fetching php83-gettext-8.3.19.pkg: . done
      [49/73] Fetching php83-zlib-8.3.19.pkg: . done
      [50/73] Fetching pfSense-kernel-pfSense-25.07.1.pkg: .......... done
      [51/73] Fetching socat-1.8.0.2.pkg: ..... done
      [52/73] Fetching php83-ctype-8.3.19.pkg: . done
      [53/73] Fetching brotli-1.1.0,1.pkg: ......... done
      [54/73] Fetching curl-8.11.0_1.pkg: .......... done
      [55/73] Fetching php83-tokenizer-8.3.19.pkg: . done
      [56/73] Fetching php83-8.3.19.pkg: .......... done
      [57/73] Fetching libpfctl-0.15.pkg: .. done
      [58/73] Fetching php83-xml-8.3.19.pkg: .. done
      [59/73] Fetching php83-dom-8.3.19.pkg: ... done
      [60/73] Fetching php83-intl-8.3.19.pkg: ... done
      [61/73] Fetching php83-sysvmsg-8.3.19.pkg: . done
      [62/73] Fetching openldap26-client-2.6.9.pkg: ......... done
      [63/73] Fetching protobuf-28.3,1.pkg: .......... done
      [64/73] Fetching glib-2.80.5_1,2.pkg: .......... done
      [65/73] Fetching luajit-openresty-2.1.20241104.pkg: .......... done
      [66/73] Fetching php83-shmop-8.3.19.pkg: . done
      [67/73] Fetching sudo-1.9.16p2.pkg: .......... done
      [68/73] Fetching libssh2-1.11.1,3.pkg: ... done
      [69/73] Fetching php83-bcmath-8.3.19.pkg: . done
      [70/73] Fetching pftop-0.13.pkg: . done
      [71/73] Fetching php83-sysvsem-8.3.19.pkg: . done
      [72/73] Fetching expat-2.7.1.pkg: . done
      [73/73] Fetching py311-libzfs-1.1.2023020700_3.pkg: .... done
      Checking integrity... done (0 conflicting)
      [1/73] Upgrading python311 from 3.11.10 to 3.11.11...
      Failed
      
      

      EDIT: From the system log

      Standard input code: New alert found: pkg: "Upgrading packages in cloned boot environment default" returned error code 137
      

      Checking the forum for similar issues i see that BE size could be a factor but not in my case.

      38edbf02-3b28-42cd-a5a9-6a962b7f6128-image.png

      Firewall: NetGate,Palo Alto-VM,Juniper SRX
      Routing: Juniper, Arista, Cisco
      Switching: Juniper, Arista, Cisco
      Wireless: Unifi, Aruba IAP
      JNCIP,CCNP Enterprise

      1 Reply Last reply Reply Quote 0
      • stephenw10S Offline
        stephenw10 Netgate Administrator
        last edited by

        What does your memory usage look like?

        Other than exhausting drive space the next suspect on the 1100 is RAM exhaustion. You may need to disable or remove any large packages during the upgrade.

        M 1 Reply Last reply Reply Quote 0
        • M Offline
          michmoor LAYER 8 Rebel Alliance @stephenw10
          last edited by

          @stephenw10 You know whats funny...After i posted this i wanted to do a google search for the error i was seeing.

          First link for me is this: https://forum.netgate.com/topic/195313/sg1100-to-24-11-issues

          Turns out, i had this issue before. And was the same reason before. SNMP needed to be disabled.

          Firewall: NetGate,Palo Alto-VM,Juniper SRX
          Routing: Juniper, Arista, Cisco
          Switching: Juniper, Arista, Cisco
          Wireless: Unifi, Aruba IAP
          JNCIP,CCNP Enterprise

          1 Reply Last reply Reply Quote 0
          • stephenw10S Offline
            stephenw10 Netgate Administrator
            last edited by

            Hmm, that's just the included snmp not the net-snmp package?

            M 1 Reply Last reply Reply Quote 0
            • M Offline
              michmoor LAYER 8 Rebel Alliance @stephenw10
              last edited by

              @stephenw10 yep. the default installation of SNMP package.

              Firewall: NetGate,Palo Alto-VM,Juniper SRX
              Routing: Juniper, Arista, Cisco
              Switching: Juniper, Arista, Cisco
              Wireless: Unifi, Aruba IAP
              JNCIP,CCNP Enterprise

              1 Reply Last reply Reply Quote 0
              • stephenw10S Offline
                stephenw10 Netgate Administrator
                last edited by

                OK I'll try to replicate it.

                M 1 Reply Last reply Reply Quote 1
                • M Offline
                  michmoor LAYER 8 Rebel Alliance @stephenw10
                  last edited by

                  @stephenw10 Let me know if you want to review my Oxidized diffs. It will show that prior to the disable of SNMP (i didnt know that was the problem at first) i removed Tailscale package. Thats where the first failure occured. Then i disabled SNMP like i did last year and it works.

                  Wasnt there an issue with a memory leak? Maybe im misremembering things..

                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                  Routing: Juniper, Arista, Cisco
                  Switching: Juniper, Arista, Cisco
                  Wireless: Unifi, Aruba IAP
                  JNCIP,CCNP Enterprise

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S Offline
                    stephenw10 Netgate Administrator
                    last edited by

                    One user reported a leak but we have never managed to replicate it. However that would only really apply to a device that had been up for some time. A reboot before upgrade would have removed it.

                    M 1 Reply Last reply Reply Quote 0
                    • M Offline
                      michmoor LAYER 8 Rebel Alliance @stephenw10
                      last edited by

                      @stephenw10

                      Prior to reboot i did have an uptime of 231 days. I dont remember how long the uptime was for the 24.11 issue but this firewall doesnt get rebooted often.

                      3778438a-a191-4ce1-b1a5-9a2ff7db59cf-image.png

                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                      Routing: Juniper, Arista, Cisco
                      Switching: Juniper, Arista, Cisco
                      Wireless: Unifi, Aruba IAP
                      JNCIP,CCNP Enterprise

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S Offline
                        stephenw10 Netgate Administrator
                        last edited by

                        Check the memory RRD graphs. If there was a leak it should be pretty obvious.

                        M 1 Reply Last reply Reply Quote 0
                        • M Offline
                          michmoor LAYER 8 Rebel Alliance @stephenw10
                          last edited by

                          @stephenw10

                          I dont know specifically what to look for but do you see anything unusual?

                          d8f052b8-1fb8-426b-8e14-d44d8cf74c88-image.png

                          Firewall: NetGate,Palo Alto-VM,Juniper SRX
                          Routing: Juniper, Arista, Cisco
                          Switching: Juniper, Arista, Cisco
                          Wireless: Unifi, Aruba IAP
                          JNCIP,CCNP Enterprise

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S Offline
                            stephenw10 Netgate Administrator
                            last edited by

                            You would at least see free memory decreasing over time. Check a longer date range that includes up to the upgrade.

                            M 1 Reply Last reply Reply Quote 0
                            • M Offline
                              michmoor LAYER 8 Rebel Alliance @stephenw10
                              last edited by

                              @stephenw10 Here is 3 months. Besides the very strange drop in September it seems...normal?

                              44a6a469-75a3-4ce8-983a-f3a3680d7341-image.png

                              Firewall: NetGate,Palo Alto-VM,Juniper SRX
                              Routing: Juniper, Arista, Cisco
                              Switching: Juniper, Arista, Cisco
                              Wireless: Unifi, Aruba IAP
                              JNCIP,CCNP Enterprise

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S Offline
                                stephenw10 Netgate Administrator
                                last edited by

                                Yeah no obvious leaks there.

                                M 1 Reply Last reply Reply Quote 0
                                • M Offline
                                  michmoor LAYER 8 Rebel Alliance @stephenw10
                                  last edited by

                                  @stephenw10 curious as to what your testing will reveal. keep me posted!

                                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                                  Routing: Juniper, Arista, Cisco
                                  Switching: Juniper, Arista, Cisco
                                  Wireless: Unifi, Aruba IAP
                                  JNCIP,CCNP Enterprise

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.