{"id":947,"date":"2016-04-15T06:06:27","date_gmt":"2016-04-15T13:06:27","guid":{"rendered":"http:\/\/blog.ls-al.com\/?p=947"},"modified":"2016-04-15T08:03:11","modified_gmt":"2016-04-15T15:03:11","slug":"pfsense-2-3-upgrade-on-alix","status":"publish","type":"post","link":"https:\/\/blog.ls-al.com\/pfsense-2-3-upgrade-on-alix\/","title":{"rendered":"pfsense 2.3 upgrade on Alix"},"content":{"rendered":"<p>I have been running pfsense on an Alix tiny computer for a long time. Pretty much have not touched it for years apart from occasional firewall rule change and pfsense auto upgrades. Recently I wanted to upgrade to pfsense 2.3 and had nothing but trouble. I am still not sure if this is a problem with the Alix specs, bad compact flash, unclean power down or the pfsense upgrade procedure.<\/p>\n<p>I document here what I found but note I ended up backing up the configuration, flashing the same 4G compact flash and restoring configuration. So far it is working for me with the caveat I am still looking why the web interface bombed a few times. I think it is because you need to disable the updates available auto check on the System Info page but not sure. This issue did not affect the firewall functions so not a big deal for me right now.<\/p>\n<p><strong>Symptom<\/strong><br \/>\nThe upgrade will run for a very long time after downloading and stating upgrade started. When I say long I mean long. Finally I would get to a point like below.<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\nApr 13 19:16:04\tphp: config.inc: New alert found: Something went wrong when trying to update the fstab entry. Aborting upgrade.\r\n<\/pre>\n<p>You can check the full upgrade log under Diagnostics -&gt; NanoBSD. Also worth nothing my first upgrade left me in a not booting state. I fished out a null modem cable and on the serial console pressed some keys and after that I could get back to previous version.<\/p>\n<p><strong>For reference here are some log snippets:<\/strong><\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n&#x5B;2.2.4-RELEASE]&#x5B;admin@fw.local.domain]\r\nBroadcast Message from root@fw.local.domain                              \r\n        (no tty) at 8:39 CDT...                                                \r\nNanoBSD Firmware upgrade in progress...                                        \r\n                                                                            \r\nInstalling \/root\/latest.tgz.                  \r\nNanoBSD upgrade starting\r\n\r\n&#x5B;..]\r\n\r\nInstalling \/root\/latest.tgz.\r\nSLICE         2\r\nOLDSLICE      1\r\nTOFLASH       ada0s2\r\nCOMPLETE_PATH ada0s2a\r\nGLABEL_SLICE  pfSense1\r\nWed Apr 13 19:08:58 CDT 2016\r\n\r\n&#x5B;..]\r\n\r\ndd if=\/dev\/zero of=\/dev\/ada0s2 bs=1m count=1\r\n1+0 records in\r\n1+0 records out\r\n1048576 bytes transferred in 0.257870 secs (4066298 bytes\/sec)\r\n\r\n\/usr\/bin\/gzip -dc \/root\/latest.tgz | \/bin\/dd of=\/dev\/ada0s2 obs=64k\r\n1890945+0 records in\r\n14773+1 records out\r\n968163840 bytes transferred in 311.756151 secs (3105516 bytes\/sec)\r\nAfter upgrade fdisk\/bsdlabel\r\n<\/pre>\n<p>This looks to me like things starting to go wrong should not be unclean file system.<\/p>\n<pre class=\"brush: bash; title: ; notranslate\" title=\"\">\r\n\/sbin\/fsck_ufs -y \/dev\/ada0s2a\r\n** \/dev\/ada0s2a\r\n** Last Mounted on \/builder\/pfSense-230\/tmp\/pfSense\/_.mnt\r\n** Phase 1 - Check Blocks and Sizes\r\n\r\nCANNOT READ BLK: 1485136\r\nCONTINUE? yes\r\n\r\nTHE FOLLOWING DISK SECTORS COULD NOT BE READ: 1485136,\r\nPARTIALLY TRUNCATED INODE I=93161\r\nSALVAGE? yes\r\n\r\n&#x5B;..]\r\n\r\n15850 files, 866146 used, 993212 free (1932 frags, 123910 blocks, 0.1% fragmentation)\r\n\r\n***** FILE SYSTEM MARKED DIRTY *****\r\n\r\n***** FILE SYSTEM WAS MODIFIED *****\r\n\r\n***** PLEASE RERUN FSCK *****\r\n\r\n\/sbin\/tunefs -L pfSense1 \/dev\/ada0s2a\r\nChecking for post_upgrade_command...\r\n\r\n&#x5B;..]\r\n\r\nfdisk: invalid fdisk partition table found\r\nbsdlabel: \/dev\/ada0s3: no valid label found\r\nbsdlabel: \/dev\/ada0s3: no valid label found\r\nmount: \/dev\/ufs\/pfSense1: R\/W mount of \/builder\/pfSense-230\/tmp\/pfSense\/_.mnt denied. Filesystem is not clean - run fsck.: Operation not permitted\r\ncp: \/tmp\/pfSense1\/etc\/fstab: No such file or directory\r\nsed: \/tmp\/pfSense1\/etc\/fstab: No such file or directory\r\numount: \/tmp\/pfSense1: not a file system root directory\r\n\r\nfdisk\/bsdlabel log:\r\n\r\n<\/pre>\n<p><strong>Just a few references below.<\/strong><\/p>\n<p>Alix board specs here.<br \/>\nhttp:\/\/www.pcengines.ch\/alix2d3.htm<\/p>\n<p>For pfsense 2.3 it sounds like Alix bios need to be 99f.<br \/>\nhttps:\/\/doc.pfsense.org\/index.php\/ALIX_BIOS_Update_Procedure<\/p>\n<p>This user describes a similar issue and re-image worked.<br \/>\nhttps:\/\/forum.pfsense.org\/index.php?topic=71760.0<\/p>\n<p>General.<br \/>\nhttps:\/\/doc.pfsense.org\/index.php\/Installing_pfSense<br \/>\nhttps:\/\/doc.pfsense.org\/index.php\/Writing_Disk_Images<br \/>\n<a href=\"https:\/\/sgoodger.wordpress.com\/2011\/03\/20\/installing-pfsense-on-a-compact-flash-card\/\">Installing pfSense on a Compact Flash&nbsp;card<\/a><br \/>\nhttps:\/\/www.get-virtual.net\/2014\/09\/16\/build-firewall-appliance\/<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I have been running pfsense on an Alix tiny computer for a long time. Pretty much have not touched it<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[64,63],"tags":[],"class_list":["post-947","post","type-post","status-publish","format-standard","hentry","category-alix","category-pfsense"],"_links":{"self":[{"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/posts\/947","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/comments?post=947"}],"version-history":[{"count":0,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/posts\/947\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/media?parent=947"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/categories?post=947"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ls-al.com\/wp-json\/wp\/v2\/tags?post=947"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}