Update hangs



  • I repeatedly tried to update my pfsense:

    Current version: 2.1-BETA1
      NanoBSD Size : 4g
        Built On: Wed Apr  3 21:48:58 EDT 2013
        New version: Tue Apr  9 01:33:05 EDT 2013

    It always starts to download and hangs at around 7 or 8 % and never finishes.

    I tried this for the last few days so it shouldn't relate to one specific version of update.
    For sure I also rebooted several times.

    Any trick to somehow reset or clean up to make that work again?

    Thanks, Stefan


  • Rebel Alliance Developer Netgate

    Anything in the system log when it stops?

    I haven't seen it just stop in the middle of an update in quite some time, and usually it's because something happened (gateway went down, states got cleared, etc) and not a problem with the update itself.

    Might also try doing it from the console/ssh using option 13.



  • In "dmesg" I get lots of this:

    pid 15467 (cpustats), uid 0: exited on signal 11 (core dumped)
    pid 29294 (cpustats), uid 0: exited on signal 11 (core dumped)
    pid 43634 (cpustats), uid 0: exited on signal 11 (core dumped)
    pid 58849 (cpustats), uid 0: exited on signal 11 (core dumped)
    pid 73471 (cpustats), uid 0: exited on signal 11 (core dumped)

    Tried manual upload of firmware via browser … super slow, hours for 50%.

    Right now I retry auto-update after rm-ing dozens of "/root/light*" ... the partial uploads, I assume.

    I could try to disable (or even rm) /usr/local/sbin/cpustats to see if that helps.

    Can't check the load either:

    uptime

    5:50PM  up  3:43, 2 users, load averages: f, f, f

    Thanks, Stefan

    EDIT: seems the same as mentioned here:

    http://forum.pfsense.org/index.php/topic,60764.0.html


  • Rebel Alliance Developer Netgate

    yeah, that is related to the snapshot you're on. Though I had no trouble upgrading away from that one myself.

    Try the console update and it may work better.



  • Right now the web-based auto-update runs … it is slow, but it seems to work so far and is at 33% now (after maybe 30 mins). I will see if it works out and consider the shell-based update if not.

    thx, S

    EDIT: I applied one upgrade via shell, after boot it was still the old version, then again via GUI, now I am up to date again.

    Thank you, Stefan



  • Still issues. Auto-update slow again, very slow.

    I see this in the logs:

    Apr 11 09:28:40 check_reload_status: Updating all dyndns
    Apr 11 09:28:40 check_reload_status: Restarting ipsec tunnels
    Apr 11 09:28:40 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 11 09:28:40 check_reload_status: Reloading filter
    Apr 11 09:28:48 php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
    Apr 11 09:29:12 check_reload_status: Updating all dyndns
    Apr 11 09:29:12 check_reload_status: Restarting ipsec tunnels
    Apr 11 09:29:12 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 11 09:29:12 check_reload_status: Reloading filter
    Apr 11 09:29:21 php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
    Apr 11 09:30:32 check_reload_status: Updating all dyndns
    Apr 11 09:30:32 check_reload_status: Restarting ipsec tunnels
    Apr 11 09:30:32 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 11 09:30:32 check_reload_status: Reloading filter
    Apr 11 09:30:43 php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
    Apr 11 09:30:47 check_reload_status: Updating all dyndns
    Apr 11 09:30:47 check_reload_status: Restarting ipsec tunnels
    Apr 11 09:30:47 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 11 09:30:47 check_reload_status: Reloading filter
    Apr 11 09:30:56 php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
    Apr 11 09:31:50 check_reload_status: Updating all dyndns
    Apr 11 09:31:50 check_reload_status: Restarting ipsec tunnels
    Apr 11 09:31:50 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 11 09:31:50 check_reload_status: Reloading filter

    My IPSEC-endpoints for sure didn't change IPs … stopped racoon ... no real difference.
    I upload the latest update (20130410-1823.img) via ssh now to update via shell. The upload is shown with average 260 KB/s ... from my local machine to the ALIX running pfsense. I assume this should be faster ... I know it should.

    I will now try to upgrade and see what happens.



  • Even with latest snapshot I get these repeated reloads … what could I do?


  • Rebel Alliance Developer Netgate

    Is that the full log? Or were there parts in between you removed?

    Usually it would only run those if some other event (e.g. interface down/up, gateway down/up) happened



  • I did not remove any lines inbetween, no.

    Just copied the lines from within the WebGUI as they were.

    Status, System Logs, System/General

    checked again right now:

    Apr 12 07:50:04 check_reload_status: Updating all dyndns
    Apr 12 07:50:04 check_reload_status: Restarting ipsec tunnels
    Apr 12 07:50:04 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 12 07:50:04 check_reload_status: Reloading filter
    Apr 12 09:50:12 php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
    Apr 12 07:50:16 check_reload_status: Updating all dyndns
    Apr 12 07:50:16 check_reload_status: Restarting ipsec tunnels
    Apr 12 07:50:16 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 12 07:50:16 check_reload_status: Reloading filter
    Apr 12 09:50:24 php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
    Apr 12 08:27:00 check_reload_status: Updating all dyndns
    Apr 12 08:27:00 check_reload_status: Restarting ipsec tunnels
    Apr 12 08:27:00 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 12 08:27:00 check_reload_status: Reloading filter
    Apr 12 10:27:08 php: : IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
    Apr 12 08:27:16 check_reload_status: Updating all dyndns
    Apr 12 08:27:16 check_reload_status: Restarting ipsec tunnels
    Apr 12 08:27:16 check_reload_status: Restarting OpenVPN tunnels/interfaces
    Apr 12 08:27:16 check_reload_status: Reloading filter

    Right now I have only 2 IPSEC-Tunnels defined and all the three endpoints (the 2 clients and my own IP) have static IP-adresses.

    Do you see the "timesteps" up there?

    Stuff from 8:27, then one event "10:27:08" then 08:27 again … just a display issue or ... ?

    Right now I am able to use the net OK, the load on the ALIX is low.
    I will see how the next update works.

    Thanks, greets, Stefan

    EDIT:

    today's update went much faster, via webgui. I will check for those restarts later this afternoon (booted right now, nothing visible yet)



  • @jimp:

    yeah, that is related to the snapshot you're on. Though I had no trouble upgrading away from that one myself.

    Try the console update and it may work better.

    I can't manage to get away from this snapshot with upgrade either.
    Even the console upgrade times out after a while of downloading.
    Is there anything I can do to make it work or is the only option to export configuration, reapply full image and then import configuration again?
    thanks!


  • Rebel Alliance Developer Netgate

    Have you tried downloading the firmware to your PC, and then uploading it to the main firmware page? If you are local to the firewall, that would be the fastest way to transfer the firmware file, and it doesn't rely on external connectivity.



  • @jimp:

    Have you tried downloading the firmware to your PC, and then uploading it to the main firmware page? If you are local to the firewall, that would be the fastest way to transfer the firmware file, and it doesn't rely on external connectivity.

    Yes, tried copying it to a local http server and then updating with a local URL.
    Doesn't change anything. The download starts fast and continuously slows down…



  • I just finally managed to update after a two hour long download of the image.
    All is fine now, running latest build.

    thanks!


Log in to reply