SG-2100: 25.11.1 to 26.03.1 or straight to 26.07?
-
Hi all,
I wish to update my 2100, currently 25.11.1, to a newer version. I am hesitant to go straight to the latest version (26.07) so 26.03.1 seems like a good and safe option.
Per the upgrade guide, it is recommended to delete all packages before upgrading. However, if I upgrade to 26.03.1, which isn't the latest version, will I risk running into package version havoc? Or will the package manager download and install the package versions that are compatible with the pfsense version installed, i.e. 26.03.1?
Alternatively, is it preferred to jump directly to 26.07 from 25.11.1? The System/update dialog appears to allow it.
Thanks.
-
You can go straight to 26.07, we test upgrades from the previous 2 versions so including that.
You can also safely go to 26.03.1. The previous issues pfSense used to hit with repos getting auto set to latest no longer exist.
If you have a lot of large packages you might remove or disable them before upgrading but it shouldn't be required. I tested some worst case style scenarios on a 2100 without issues.
-
@stephenw10 said in SG-2100: 25.11.1 to 26.03.1 or straight to 26.07?:
You can go straight to 26.07, we test upgrades from the previous 2 versions so including that.
Then that is what i’ll do
If you have a lot of large packages you might remove or disable them before upgrading but it shouldn't be required. I tested some worst case style scenarios on a 2100 without issues.
I’ve never checked their sizes really but it’s a fairly basic setup with acme HAProxy pfblocker. I’ll just go ahead and hit update then. The hardest part, as always, is finding a time frame where the family will let me
-
@stephenw10 Come to think of it, I also have an SG-1100 to update. Given the mere 1GB of ram, would you recommend, per the upgrade guide, “For the best chance of success in these cases, temporarily disable any non-critical services before starting the upgrade.” ?
Those could be
- Arpwatch
- Avahi
- haproxy
- IPsec VPN
- openvpn
- pfBlockerNG
Or would you even recommend actually removing packages in case of the sg-1100?
-
I would disable HAProxy and pfBlocker. Those both have pretty large memory footprints and that can be an issue at upgrade. Also be sure to reboot after doing that before upgrading to ensure maximum free memory available on the 1100.
-
@stephenw10 Thanks Steve for your advice. Will update accordingly as soon as I get on site.
The SG-2100 updated to 26.07 via the GUI, no issues yet. You did a good job!
Privacy Policy · Cookie Policy