Can't get packages to update

hypnosis4u2nv

25.11-RELEASE

I cant update pfBlocker develop from 3.2.13 to 3.2.13_1.

Upgrading pfSense-pkg-pfBlockerNG-devel...

Updating pfSense-core repository catalogue...

repository pfSense-core has no meta file, using default settings

Unable to update repository pfSense-core

Updating pfSense repository catalogue...

repository pfSense has no meta file, using default settings

Unable to update repository pfSense

Error updating repositories!

Failed

host -t srv _https._tcp.packages-beta.netgate.com command gives the following:

_https._tcp.packages-beta.netgate.com has SRV record 10 10 443 pkg01-atx.netgate.com.
_https._tcp.packages-beta.netgate.com has SRV record 10 10 443 pkg00-atx.netgate.com.

Is this a problem with the pfBlocker package or package manager?

Gertjan

@hypnosis4u2nv said in Can't get packages to update:

packages-beta

25.11 has been released.
So, I would suggestion : no more 'beta' ?!

Make sure you've set :

( no Beta there anymore ^^ )
Then retry.

hypnosis4u2nv

@Gertjan

Thats the funny thing, I am on 25.11 Stable and they're already set.

Got these errors along with it.

Upgrade
check_upgrade: "Updating repositories metadata" returned error code 1 @ 2025-12-17 23:30:26
check_upgrade: "Updating repositories metadata" returned error code 1 @ 2025-12-18 04:43:05

Gertjan

@hypnosis4u2nv

Check your 'repos' file :

/usr/local/etc/pkg/repos/pfSense.conf whioch is a linked to this file /usr/local/etc/pfSense/pkg/repos/pfSense-repo-0000.conf and should contain :

FreeBSD: { enabled: no }

pfSense-core: {
    url: "pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_11_amd64-core",
    mirror_type: "srv",
    signature_type: "fingerprints",
    fingerprints: "/usr/local/share/pfSense/keys/pkg",
    enabled: yes
}

pfSense: {
    url: "pkg+https://pfsense-plus-pkg.netgate.com/pfSense_plus-v25_11_amd64-pfSense_plus_v25_11",
    mirror_type: "srv",
    signature_type: "fingerprints",
    fingerprints: "/usr/local/share/pfSense/keys/pkg",
    enabled: yes
}

( edit : just a wild guess. I'm not sure where the 'packages' URL comes from. Error code '1' would be a classic 'file not found' => 'URL doesn't exist' error )

hypnosis4u2nv

@Gertjan

The only thing that I changed before this issue appeared was tick off Hardware TCP Segmentation Offloading and Hardware Large Receive Offloading as I was getting a suricata alert to turn those settings off in order for it to work properly.

So I did an experiment. I went back to my clean and working 25.07.1 boot environment. Created a clone and booted into that. I ticked off Hardware TCP Segmentation Offloading and Hardware Large Receive Offloading. Rebooted. Then I upgraded again to 25.11. After that reboot, new error but looks related. I can no longer check for version information.

Retrieving Unable to check for updates

Upgrade
check_upgrade: "Upgrading pkg" returned error code 3 @ 2025-12-18 05:41:16
check_upgrade: "Upgrading pkg" returned error code 3 @ 2025-12-18 05:41:22
check_upgrade: "Upgrading pkg" returned error code 3 @ 2025-12-18 05:41:29
check_upgrade: "Upgrading pkg" returned error code 3 @ 2025-12-18 05:41:52

hypnosis4u2nv

So I ticked those two offloading settings back on and rebooted, and no errors appeared. So the issue is definitely related to one or both of them.

Here's the suricata notice that I get that prompted me to change the setting.

WARNING! Suricata now requires that Hardware Checksum Offloading, Hardware TCP Segmentation Offloading and Hardware Large Receive Offloading all be disabled for proper operation. This firewall currently has one or more of these Offloading settings NOT disabled. Visit the System > Advanced > Networking tab and ensure all three of these Offloading settings are disabled.

Any netgate developer help with this?

hypnosis4u2nv

So the problem definitely lies in Hardware TCP Segmentation Offloading as I was able to disable Hardware Large Receive Offloading without the issue occurring.