pfSenseをアップデート 2.3.2_1→2.3.3

pfSenseをアップデートした記録 2.3.2_1→2.3.3

アップデート内容確認

2.3.2_1(2.3.2 Update 1)から2.3.3にアップデートします

変更点を確認
2.3.3 New Features and Changes – PFSenseDocs
https://doc.pfsense.org/index.php/2.3.3_New_Features_and_Changes

全体的に不具合修正がメインです
目立つところはパッケージにTFTP Serverが追加されたのと
Status→Traffic Graphの表示がd3.js採用により今風になったことですかね

上が2.3.2_1までの表示で下が2.3.3での表示
流れる方向も逆になってます

Traffic Graph 2.3.2_1と2.3.3比較

アップデート後、数日間使った感じでは安定して使えてます

アップデートの手順

事前に設定のバックアップをした上で以下の操作でアップデートを実行
手順は前回と同じです

まずダッシュボードのVersionのところにある雲マークか
System→Updateを選択

2.3.2_1から2.3.3へアップデートと表示出てるのを確認して「Confirm」を押す

無事に完了すると自動で再起動開始されます

再起動が終わればダッシュボードで更新されたか確認

最後に2.3.3の状態で設定をバックアップして完了

Update時の処理ログ

>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
>>> Upgrading pkg... done.
>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
Fetching meta.txz: . done
Fetching packagesite.txz: . done
Processing entries: . done
pfSense-core repository update completed. 8 packages processed.
Updating pfSense repository catalogue...
Fetching meta.txz: . done
Fetching packagesite.txz: .......... done
Processing entries: .......... done
pfSense repository update completed. 437 packages processed.
>>> Upgrading pfSense-repo... done.
>>> Updating repositories metadata... 
Updating pfSense-core repository catalogue...
Repository pfSense-core has a wrong packagesite, need to re-create database
Fetching meta.txz: . done
Fetching packagesite.txz: . done
Processing entries: . done
pfSense-core repository update completed. 8 packages processed.
Updating pfSense repository catalogue...
Repository pfSense has a wrong packagesite, need to re-create database
Fetching meta.txz: . done
Fetching packagesite.txz: .......... done
Processing entries: .......... done
pfSense repository update completed. 437 packages processed.
>>> Unlocking package pfSense-kernel-pfSense... done.
>>> Downloading upgrade packages... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
Checking for upgrades (78 candidates): .......... done
Processing candidates (78 candidates): .......... done
The following 83 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
  libnghttp2: 1.18.0 [pfSense]
  openvpn23: 2.3.14 [pfSense]
  norm: 1.5r6 [pfSense]
  libwww: 5.4.0_6 [pfSense]
  json-c: 0.12.1 [pfSense]

Installed packages to be UPGRADED:
  wol: 0.7.1_2 -> 0.7.1_3 [pfSense]
  unbound: 1.5.9 -> 1.6.0 [pfSense]
  uclcmd: 0.1 -> 0.1_1 [pfSense]
  strongswan: 5.5.0 -> 5.5.1 [pfSense]
  sqlite3: 3.13.0 -> 3.15.1_1 [pfSense]
  python27: 2.7.12 -> 2.7.13_1 [pfSense]
  php56-zlib: 5.6.26 -> 5.6.30 [pfSense]
  php56-xmlwriter: 5.6.26 -> 5.6.30 [pfSense]
  php56-xmlreader: 5.6.26 -> 5.6.30 [pfSense]
  php56-xml: 5.6.26 -> 5.6.30 [pfSense]
  php56-tokenizer: 5.6.26 -> 5.6.30 [pfSense]
  php56-sysvshm: 5.6.26 -> 5.6.30 [pfSense]
  php56-sysvsem: 5.6.26 -> 5.6.30 [pfSense]
  php56-sysvmsg: 5.6.26 -> 5.6.30 [pfSense]
  php56-sqlite3: 5.6.26 -> 5.6.30 [pfSense]
  php56-sockets: 5.6.26 -> 5.6.30 [pfSense]
  php56-simplexml: 5.6.26 -> 5.6.30 [pfSense]
  php56-shmop: 5.6.26 -> 5.6.30 [pfSense]
  php56-session: 5.6.26 -> 5.6.30 [pfSense]
  php56-readline: 5.6.26 -> 5.6.30 [pfSense]
  php56-posix: 5.6.26 -> 5.6.30 [pfSense]
  php56-pfSense-module: 0.12 -> 0.13 [pfSense]
  php56-pdo_sqlite: 5.6.26 -> 5.6.30 [pfSense]
  php56-pdo: 5.6.26 -> 5.6.30 [pfSense]
  php56-pcntl: 5.6.26 -> 5.6.30 [pfSense]
  php56-openssl: 5.6.26 -> 5.6.30 [pfSense]
  php56-opcache: 5.6.26_1 -> 5.6.30 [pfSense]
  php56-mcrypt: 5.6.26 -> 5.6.30 [pfSense]
  php56-mbstring: 5.6.26 -> 5.6.30 [pfSense]
  php56-ldap: 5.6.26 -> 5.6.30 [pfSense]
  php56-json: 5.6.26 -> 5.6.30 [pfSense]
  php56-hash: 5.6.26 -> 5.6.30 [pfSense]
  php56-gettext: 5.6.26 -> 5.6.30 [pfSense]
  php56-filter: 5.6.26 -> 5.6.30 [pfSense]
  php56-dom: 5.6.26 -> 5.6.30 [pfSense]
  php56-curl: 5.6.26 -> 5.6.30 [pfSense]
  php56-ctype: 5.6.26 -> 5.6.30 [pfSense]
  php56-bz2: 5.6.26 -> 5.6.30 [pfSense]
  php56-bcmath: 5.6.26 -> 5.6.30 [pfSense]
  php56: 5.6.26 -> 5.6.30 [pfSense]
  php-xdebug: 2.4.0 -> 2.4.1_1 [pfSense]
  php-suhosin: 0.9.38 -> 0.9.38_3 [pfSense]
  pftop: 0.7_6 -> 0.7_7 [pfSense]
  pfSense-rc: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense-kernel-pfSense: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense-default-config: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense-base: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense-Status_Monitoring: 1.4.4_2 -> 1.6.1_3 [pfSense]
  pfSense: 2.3.2_1 -> 2.3.3 [pfSense]
  perl5: 5.20.3_15 -> 5.24.1.r4_1 [pfSense]
  pecl-zmq: 1.1.3_1 -> 1.1.3_2 [pfSense]
  pecl-ssh2: 0.12 -> 0.13 [pfSense]
  pecl-rrd: 1.1.3_3 -> 1.1.3_4 [pfSense]
  pecl-radius: 1.3.0 -> 1.4.0.b1 [pfSense]
  pcre: 8.39 -> 8.39_1 [pfSense]
  ntp: 4.2.8p8 -> 4.2.8p9_1 [pfSense]
  nginx: 1.10.1,2 -> 1.10.2_3,2 [pfSense]
  nettle: 3.2 -> 3.3 [pfSense]
  links: 2.9,1 -> 2.13,1 [pfSense]
  libzmq4: 4.1.4_1 -> 4.1.5 [pfSense]
  libssh2: 1.7.0,2 -> 1.8.0,2 [pfSense]
  libsodium: 1.0.8 -> 1.0.11_1 [pfSense]
  libiconv: 1.14_9 -> 1.14_10 [pfSense]
  isc-dhcp43-server: 4.3.4 -> 4.3.5 [pfSense]
  isc-dhcp43-relay: 4.3.4_1 -> 4.3.5 [pfSense]
  isc-dhcp43-client: 4.3.4 -> 4.3.5 [pfSense]
  indexinfo: 0.2.4 -> 0.2.6 [pfSense]
  idnkit: 1.0_5 -> 1.0_6 [pfSense]
  glib: 2.46.2 -> 2.46.2_4 [pfSense]
  gettext-runtime: 0.19.8.1 -> 0.19.8.1_1 [pfSense]
  expat: 2.1.1_2 -> 2.2.0_1 [pfSense]
  dhcp6: 20080615_7 -> 20080615.1 [pfSense]
  curl: 7.50.3 -> 7.52.1_1 [pfSense]
  ca_root_nss: 3.25 -> 3.28.1 [pfSense]
  bind-tools: 9.10.4P2 -> 9.11.0P3 [pfSense]

Installed packages to be REINSTALLED:
  scponly-4.8.20110526_2 [pfSense] (options changed)
  rrdtool-1.6.0_1 [pfSense] (direct dependency changed: perl5)
  miniupnpd-1.9.20160113,1 [pfSense] (options changed)

Number of packages to be installed: 5
Number of packages to be upgraded: 75
Number of packages to be reinstalled: 3

The process will require 20 MiB more space.
85 MiB to be downloaded.
Fetching wol-0.7.1_3.txz: ... done
Fetching unbound-1.6.0.txz: .......... done
Fetching uclcmd-0.1_1.txz: .. done
Fetching strongswan-5.5.1.txz: .......... done
Fetching sqlite3-3.15.1_1.txz: .......... done
Fetching scponly-4.8.20110526_2.txz: .. done
Fetching rrdtool-1.6.0_1.txz: .......... done
Fetching python27-2.7.13_1.txz: .......... done
Fetching php56-zlib-5.6.30.txz: .. done
Fetching php56-xmlwriter-5.6.30.txz: .. done
Fetching php56-xmlreader-5.6.30.txz: .. done
Fetching php56-xml-5.6.30.txz: .. done
Fetching php56-tokenizer-5.6.30.txz: . done
Fetching php56-sysvshm-5.6.30.txz: . done
Fetching php56-sysvsem-5.6.30.txz: . done
Fetching php56-sysvmsg-5.6.30.txz: . done
Fetching php56-sqlite3-5.6.30.txz: .. done
Fetching php56-sockets-5.6.30.txz: .... done
Fetching php56-simplexml-5.6.30.txz: ... done
Fetching php56-shmop-5.6.30.txz: . done
Fetching php56-session-5.6.30.txz: .... done
Fetching php56-readline-5.6.30.txz: .. done
Fetching php56-posix-5.6.30.txz: .. done
Fetching php56-pfSense-module-0.13.txz: ... done
Fetching php56-pdo_sqlite-5.6.30.txz: .. done
Fetching php56-pdo-5.6.30.txz: ..... done
Fetching php56-pcntl-5.6.30.txz: .. done
Fetching php56-openssl-5.6.30.txz: ..... done
Fetching php56-opcache-5.6.30.txz: ....... done
Fetching php56-mcrypt-5.6.30.txz: .. done
Fetching php56-mbstring-5.6.30.txz: .......... done
Fetching php56-ldap-5.6.30.txz: ... done
Fetching php56-json-5.6.30.txz: .. done
Fetching php56-hash-5.6.30.txz: .......... done
Fetching php56-gettext-5.6.30.txz: . done
Fetching php56-filter-5.6.30.txz: .. done
Fetching php56-dom-5.6.30.txz: ...... done
Fetching php56-curl-5.6.30.txz: ... done
Fetching php56-ctype-5.6.30.txz: . done
Fetching php56-bz2-5.6.30.txz: .. done
Fetching php56-bcmath-5.6.30.txz: .. done
Fetching php56-5.6.30.txz: .......... done
Fetching php-xdebug-2.4.1_1.txz: .......... done
Fetching php-suhosin-0.9.38_3.txz: ...... done
Fetching pftop-0.7_7.txz: ...... done
Fetching pfSense-rc-2.3.3.txz: . done
Fetching pfSense-kernel-pfSense-2.3.3.txz: .......... done
Fetching pfSense-default-config-2.3.3.txz: . done
Fetching pfSense-base-2.3.3.txz: .......... done
Fetching pfSense-Status_Monitoring-1.6.1_3.txz: .. done
Fetching pfSense-2.3.3.txz: . done
Fetching perl5-5.24.1.r4_1.txz: .......... done
Fetching pecl-zmq-1.1.3_2.txz: ... done
Fetching pecl-ssh2-0.13.txz: ... done
Fetching pecl-rrd-1.1.3_4.txz: .. done
Fetching pecl-radius-1.4.0.b1.txz: ... done
Fetching pcre-8.39_1.txz: .......... done
Fetching ntp-4.2.8p9_1.txz: .......... done
Fetching nginx-1.10.2_3,2.txz: .......... done
Fetching nettle-3.3.txz: .......... done
Fetching miniupnpd-1.9.20160113,1.txz: ...... done
Fetching links-2.13,1.txz: .......... done
Fetching libzmq4-4.1.5.txz: .......... done
Fetching libssh2-1.8.0,2.txz: .......... done
Fetching libsodium-1.0.11_1.txz: .......... done
Fetching libiconv-1.14_10.txz: .......... done
Fetching isc-dhcp43-server-4.3.5.txz: .......... done
Fetching isc-dhcp43-relay-4.3.5.txz: .......... done
Fetching isc-dhcp43-client-4.3.5.txz: .......... done
Fetching indexinfo-0.2.6.txz: . done
Fetching idnkit-1.0_6.txz: .......... done
Fetching glib-2.46.2_4.txz: .......... done
Fetching gettext-runtime-0.19.8.1_1.txz: .......... done
Fetching expat-2.2.0_1.txz: .......... done
Fetching dhcp6-20080615.1.txz: .......... done
Fetching curl-7.52.1_1.txz: .......... done
Fetching ca_root_nss-3.28.1.txz: .......... done
Fetching bind-tools-9.11.0P3.txz: .......... done
Fetching libnghttp2-1.18.0.txz: .......... done
Fetching openvpn23-2.3.14.txz: .......... done
Fetching norm-1.5r6.txz: .......... done
Fetching libwww-5.4.0_6.txz: .......... done
Fetching json-c-0.12.1.txz: .... done
Checking integrity... done (1 conflicting)
  - openvpn23-2.3.14 [pfSense] conflicts with openvpn-2.3.11 [installed] on /usr/local/include/openvpn-plugin.h
Checking integrity... done (0 conflicting)
Conflicts with the existing packages have been found.
One more solver iteration is needed to resolve them.
The following 84 package(s) will be affected (of 0 checked):

Installed packages to be REMOVED:
  openvpn-2.3.11

New packages to be INSTALLED:
  libnghttp2: 1.18.0 [pfSense]
  norm: 1.5r6 [pfSense]
  libwww: 5.4.0_6 [pfSense]
  json-c: 0.12.1 [pfSense]
  openvpn23: 2.3.14 [pfSense]

Installed packages to be UPGRADED:
  indexinfo: 0.2.4 -> 0.2.6 [pfSense]
  gettext-runtime: 0.19.8.1 -> 0.19.8.1_1 [pfSense]
  python27: 2.7.12 -> 2.7.13_1 [pfSense]
  perl5: 5.20.3_15 -> 5.24.1.r4_1 [pfSense]
  pcre: 8.39 -> 8.39_1 [pfSense]
  libiconv: 1.14_9 -> 1.14_10 [pfSense]
  glib: 2.46.2 -> 2.46.2_4 [pfSense]
  expat: 2.1.1_2 -> 2.2.0_1 [pfSense]
  ca_root_nss: 3.25 -> 3.28.1 [pfSense]
  unbound: 1.5.9 -> 1.6.0 [pfSense]
  php56: 5.6.26 -> 5.6.30 [pfSense]
  libsodium: 1.0.8 -> 1.0.11_1 [pfSense]
  curl: 7.50.3 -> 7.52.1_1 [pfSense]
  strongswan: 5.5.0 -> 5.5.1 [pfSense]
  sqlite3: 3.13.0 -> 3.15.1_1 [pfSense]
  php56-session: 5.6.26 -> 5.6.30 [pfSense]
  php56-pdo: 5.6.26 -> 5.6.30 [pfSense]
  php56-dom: 5.6.26 -> 5.6.30 [pfSense]
  pecl-rrd: 1.1.3_3 -> 1.1.3_4 [pfSense]
  nettle: 3.2 -> 3.3 [pfSense]
  libzmq4: 4.1.4_1 -> 4.1.5 [pfSense]
  libssh2: 1.7.0,2 -> 1.8.0,2 [pfSense]
  idnkit: 1.0_5 -> 1.0_6 [pfSense]
  wol: 0.7.1_2 -> 0.7.1_3 [pfSense]
  uclcmd: 0.1 -> 0.1_1 [pfSense]
  php56-zlib: 5.6.26 -> 5.6.30 [pfSense]
  php56-xmlwriter: 5.6.26 -> 5.6.30 [pfSense]
  php56-xmlreader: 5.6.26 -> 5.6.30 [pfSense]
  php56-xml: 5.6.26 -> 5.6.30 [pfSense]
  php56-tokenizer: 5.6.26 -> 5.6.30 [pfSense]
  php56-sysvshm: 5.6.26 -> 5.6.30 [pfSense]
  php56-sysvsem: 5.6.26 -> 5.6.30 [pfSense]
  php56-sysvmsg: 5.6.26 -> 5.6.30 [pfSense]
  php56-sqlite3: 5.6.26 -> 5.6.30 [pfSense]
  php56-sockets: 5.6.26 -> 5.6.30 [pfSense]
  php56-simplexml: 5.6.26 -> 5.6.30 [pfSense]
  php56-shmop: 5.6.26 -> 5.6.30 [pfSense]
  php56-readline: 5.6.26 -> 5.6.30 [pfSense]
  php56-posix: 5.6.26 -> 5.6.30 [pfSense]
  php56-pfSense-module: 0.12 -> 0.13 [pfSense]
  php56-pdo_sqlite: 5.6.26 -> 5.6.30 [pfSense]
  php56-pcntl: 5.6.26 -> 5.6.30 [pfSense]
  php56-openssl: 5.6.26 -> 5.6.30 [pfSense]
  php56-opcache: 5.6.26_1 -> 5.6.30 [pfSense]
  php56-mcrypt: 5.6.26 -> 5.6.30 [pfSense]
  php56-mbstring: 5.6.26 -> 5.6.30 [pfSense]
  php56-ldap: 5.6.26 -> 5.6.30 [pfSense]
  php56-json: 5.6.26 -> 5.6.30 [pfSense]
  php56-hash: 5.6.26 -> 5.6.30 [pfSense]
  php56-gettext: 5.6.26 -> 5.6.30 [pfSense]
  php56-filter: 5.6.26 -> 5.6.30 [pfSense]
  php56-curl: 5.6.26 -> 5.6.30 [pfSense]
  php56-ctype: 5.6.26 -> 5.6.30 [pfSense]
  php56-bz2: 5.6.26 -> 5.6.30 [pfSense]
  php56-bcmath: 5.6.26 -> 5.6.30 [pfSense]
  php-xdebug: 2.4.0 -> 2.4.1_1 [pfSense]
  php-suhosin: 0.9.38 -> 0.9.38_3 [pfSense]
  pftop: 0.7_6 -> 0.7_7 [pfSense]
  pfSense-rc: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense-Status_Monitoring: 1.4.4_2 -> 1.6.1_3 [pfSense]
  pecl-zmq: 1.1.3_1 -> 1.1.3_2 [pfSense]
  pecl-ssh2: 0.12 -> 0.13 [pfSense]
  pecl-radius: 1.3.0 -> 1.4.0.b1 [pfSense]
  ntp: 4.2.8p8 -> 4.2.8p9_1 [pfSense]
  nginx: 1.10.1,2 -> 1.10.2_3,2 [pfSense]
  links: 2.9,1 -> 2.13,1 [pfSense]
  isc-dhcp43-server: 4.3.4 -> 4.3.5 [pfSense]
  isc-dhcp43-relay: 4.3.4_1 -> 4.3.5 [pfSense]
  isc-dhcp43-client: 4.3.4 -> 4.3.5 [pfSense]
  dhcp6: 20080615_7 -> 20080615.1 [pfSense]
  bind-tools: 9.10.4P2 -> 9.11.0P3 [pfSense]
  pfSense-kernel-pfSense: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense-default-config: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense-base: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense: 2.3.2_1 -> 2.3.3 [pfSense]

Installed packages to be REINSTALLED:
  rrdtool-1.6.0_1 [pfSense] (direct dependency changed: perl5)
  scponly-4.8.20110526_2 [pfSense] (options changed)
  miniupnpd-1.9.20160113,1 [pfSense] (options changed)

Number of packages to be removed: 1
Number of packages to be installed: 5
Number of packages to be upgraded: 75
Number of packages to be reinstalled: 3

The process will require 19 MiB more space.
>>> Upgrading pfSense kernel... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up-to-date.
Updating pfSense repository catalogue...
pfSense repository is up-to-date.
All repositories are up-to-date.
Checking integrity... done (0 conflicting)
The following 2 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
  pfSense-kernel-pfSense: 2.3.2_1 -> 2.3.3 [pfSense-core]
  pfSense-rc: 2.3.2_1 -> 2.3.3 [pfSense-core]

Number of packages to be upgraded: 2
[1/2] Upgrading pfSense-rc from 2.3.2_1 to 2.3.3...
[1/2] Extracting pfSense-rc-2.3.3: .... done
[2/2] Upgrading pfSense-kernel-pfSense from 2.3.2_1 to 2.3.3...
[2/2] Extracting pfSense-kernel-pfSense-2.3.3: .......... done
===> Keeping a copy of current kernel in /boot/kernel.old
Upgrade is complete.  Rebooting in 10 seconds.
>>> Locking package pfSense-kernel-pfSense... done.
Success

Atom C2000のエラッタについて

2017年2月にCiscoの発表で発覚したIntel Atom C2000シリーズのエラッタについてです
エラッタの内容など詳細はこちらでご覧ください

IntelのAtom C2000シリーズを採用するサーバーが突然死する危険性、Intelは対応中も詳細は公表せず – GIGAZINE
http://gigazine.net/news/20170208-intel-atom-c2000-trouble/
Atom C2000ファミリに18カ月前後の動作で起動できなくなるエラッタ – PC Watch
http://pc.watch.impress.co.jp/docs/news/1045715.html

Atom C2000シリーズというとコードネームだとAvoton / Rangeleyです

主にルータやNASなどのネットワーク機器に使用されているので
CiscoやSynologyなどがエラッタについて発表してます

Clock Signal Component Issue – CISCO
https://www.cisco.com/c/en/us/support/web/clock-signal.html#~faqs,

かなり簡単に解説すると18カ月ぐらい使って運が悪いと起動しなくなるよって話で
現在の情報では故障しても起動中には問題は起こらず
再起動した時にCPUが動かない状態になるようですが
今のところSandyBridgeチップセットみたいにリコールまではしていません

過去記事でも紹介してますが私が現在利用しているのは
pfSenseスポンサーのNetgate社 SG-4860で
Atom C2558(Rangeley)を使用しているので該当機になります

一応NetgateやpfSense Storeで購入した人向けにプレスリリースがあります

Clock Signal Component Issue
https://www.netgate.com/blog/clock-signal-component-issue.html
pfSense Digest » Clock Signal Component Issue
https://blog.pfsense.org/?p=2297

中身はCiscoやSynologyと同じ対応で
問題自体は認識しているが現状はほとんどの製品が正常に使い続けれるとし
念のため該当製品は3年間の保証をするとしてます

ネットワーク機器なので常時稼働がほとんどでしょうし
不具合が出る機器ならば18カ月、つまり1年半~2年もあれば
見つけられるし大丈夫という感じでしょうか
現に該当機でも各社そのまま今も普通に販売してますからね

SG-4860については使用から18か月経ったときにでも経過報告します