Really big problem to go to 2.2.2 from 2.2.1

dr.diesel

It acts like it's sending a serial char out, waiting for a reply, timing out then moving on.

Crescens

Thanks, that's helpful. I think it's the boot_serial line on its own that does it, but have no means of confirming as it seems to be somehow hardware-specific.

Apologies for being mostly BSD illiterate, is there any way that I can grab more (possibly useful) information for you from at least my system?

Knight

My loader.conf (I assume it is the one under /boot) contains more stuff but it has the same serial line…

autoboot_delay="3"
vm.kmem_size="435544320"
vm.kmem_size_max="535544320"
kern.ipc.nmbclusters="0"
boot_serial="YES"
comconsole_speed="9600"
hw.usb.no_pf="1"

Nick

sprior

I ran into the same issue on upgrade from 2.2.1 to 2.2.2. Going into the BIOS and disabling the serial ports got me around it.

ipfftw

Yeah, well serves me right for doing updates the first day they are released…. I had the same problem, and after watching the copyright dates slowly filter through at the rate of 7 seconds per character for 20 minutes, I managed to find an old pfsense 2.0 cd and was able to get online to check the forums.

Disabling the serial port fixed it and i am on 2.2.2 now, with no serial ports.
motherboard is p5Ld2-vm http://www.asus.com/Motherboards/P5LD2VM/

NOYB

So why do y'all have your serial port enabled if you are not using it. Didn't your ma'ma ever teach you to turn off the lights when you leave a room vacant. Less is more.

If it ain't being used put it away, put it into storage, throw it away, turn it off. Get the picture? It's the same sort of philosophy as with security. Only what is needed is permitted, stored/kept, provided, etc.

First thing I did when initially setting up my pfSense machine was go into the BOIS and turn off everything not being used. Like the built in modem (yeah it's that old), printer port, etc.

Less is more.

Some times we people are our own worst enemy.

Knight

@NOYB:

So why do y'all have your serial port enabled if you are not using it.

Why would we turn it off unless we needed the resources (mostly IRQ) for another device or if it was a security risk?

Didn't your ma'ma ever teach you to turn off the lights when you leave a room vacant. Less is more.

I don't think you will save energy by turning it off especially considering that the chip involved do other things as well…

If it ain't being used put it away, put it into storage, throw it away, turn it off. Get the picture?

No, should we?

It's the same sort of philosophy as with security. Only what is needed is permitted, stored/kept, provided, etc.

I agree with you here but here there is actually a good and valid reason to do it…

First thing I did when initially setting up my pfSense machine was go into the BOIS and turn off everything not being used. Like the built in modem (yeah it's that old), printer port, etc.

Built-in modem? What is it, a PCJr? I have had plenty of PCs (and even non PCs like Apple II compatible and Sinclair ZX81) and I don't recall any of them ever had a built-in modem.

Less is more.
Some times we people are our own worst enemy.

If you did not have the number of posts you have here I would have hesitated between thinking this was flame bait or trolling…

I doubt this is the case considering your implication here but this is what it seemed to be at first glance...

Nick

cmb

@Crescens:

Apologies for being mostly BSD illiterate, is there any way that I can grab more (possibly useful) information for you from at least my system?

If you wouldn't mind, if you can try it after removing only the boot_serial line, that would at least verify the exact cause, which is enough we can fix it (by making sure that doesn't get added in that way).

cmb

@Knight:

My loader.conf (I assume it is the one under /boot) contains more stuff but it has the same serial line…

It will, the earlier snippet was just a part of his.

@NOYB:

So why do y'all have your serial port enabled if you are not using it. Didn't your ma'ma ever teach you to turn off the lights when you leave a room vacant. Less is more.

For sound cards, and other potentially more-intrusive hardware, I agree. Remove it if possible, disable it in the BIOS otherwise. Serial ports, prior to now I'd never seen having those enabled be an issue (and it still isn't, really, outside of working around this I still wouldn't bother disabling serial ports).

@Trel:

this is a low risk upgrade

To everyone in this thread. I recommend NEVER playing Russian Roulette.

Good advice. :) For the hardware we test it's low risk at least. I hate that change broke things for some of you. We missed that as it didn't impact anything we sell or test using, and apparently only one person hit it prior to release (which we thought was a one-off issue specific to one person's system since our significant testing didn't show any such issues across a variety of platforms).

cmb

I added a warning to the release announcement on this issue.

djamp42

Wow thanks for posting this, i just worked on my box for 3 hours it's 12:30 in the morning and disabling the serial port in the bios fixed the issue. Full install from 2.2.1 to 2.2.2. I reinstalled from scratch 2.2.2 and it would install and reboot fine, as soon a i reload my backuped 2.2.1 config and it reboots, is when it start printing out slow. I even restored sections of my config and some sections would load fine and a reboot would still work. It would eventually always break though.

NOYB

@Knight:

. . .
Nick

Because cause if it is not being used there is no good that can come from it being enabled. Only bad. KISS and avoid the bad. Like this issue, you never now when it will sneak up and bite.
Disabling things in the BIOS that are not being used is not about saving energy. It's about KISS.
Yes, you should be getting the picture.
There is a good and valid reason to do so here too. Apply the KISS principle to things and life is easier.
Many notebooks back in the dial-up days had built-in modems.

Not a troll. It's a serious message. I really don't get leaving all that junk enabled if it is not being used. Just makes no sense for router appliance that is desired to be as reliable as possible. Less is more.

It's a prudent KISS to turn it off. In the words of Nike. Just do it! And be done with it.

NOYB

Alright. Who gave me my first smite?

Can't believe someone would smite over this.

fakemoth

Som critical info is missing here: when/how will this be solved, will we get an "emergency" update? Should I wait for an update or is this one of such importance that I should go with the update? I don't use IPv6, IPSEC, wireless and the web interface can't be accessed from WAN so I think the openssl vulnerabilities don't apply, please correct me if I am wrong. And I trust my LAN. Any other reasons?

No other problems - only that since 2.2.1 and the other package updates I can't connect with openVPN (network manager) from my openSUSE 13.1; I keep up to date my openSUSE workstation. Works fine from Fedora or Android so I think the openSUSE dudes/updates messed something up, I will investigate.

hameno

Is there any boot option we could use to override the setting thats caused this? My system has no serial port setting in the bios :(

mir

Same problem here.

Hardware: Asrock AMD E350M1
pfSense: Full install
Solution: Disable serial port in BIOS

Will changing boot_serial="YES" to boot_serial="NO" in /boot/loader.conf solve the problem permanently?

heper

@mir:

Will changing boot_serial="YES" to boot_serial="NO" in /boot/loader.conf solve the problem permanently?

sortof. "/boot/loader.conf" gets overwritten every time you update/reinstall pfSense. But the devs are aware of the issue now, so in the next release, they should have a permanent fix for it.

oisteink

@NOYB:

Because cause if it is not being used there is no good that can come from it being enabled. Only bad. KISS and avoid the bad. Like this issue, you never now when it will sneak up and bite.
Disabling things in the BIOS that are not being used is not about saving energy. It's about KISS.
Yes, you should be getting the picture.
There is a good and valid reason to do so here too. Apply the KISS principle to things and life is easier.
Many notebooks back in the dial-up days had built-in modems.

Not a troll. It's a serious message. I really don't get leaving all that junk enabled if it is not being used. Just makes no sense for router appliance that is desired to be as reliable as possible. Less is more.

It's a prudent KISS to turn it off. In the words of Nike. Just do it! And be done with it.

Still not sure if troll or not when you advocate disabling serial on a firewall "to keep it simple". You should rather fix the issue and keep the serial there so you can use it in case of emergency.

Supermule

As I run it in a VM at home with no serial port connected, then no issues.

When I add the port, I get the issue described.

hasangurbuz

@mococanet:

After upgrade the errors come up :

Kdb: debugger backend: ddb

Amd64

Restalling everything right now!!!

Yes, same problem!
I try upgare and fresh install. But same result.

Restart to my Pfsense

Very very slowly write: Kdb: …......................

This is big problem!