pfSenseをアップデートした記録 2.3.2_1→2.3.3
アップデート内容確認
2.3.2_1（2.3.2 Update 1）から2.3.3にアップデートします
変更点を確認
2.3.3 New Features and Changes – PFSenseDocs
https://doc.pfsense.org/index.php/2.3.3_New_Features_and_Changes
全体的に不具合修正がメインです
目立つところはパッケージにTFTP Serverが追加されたのと
Status→Traffic Graphの表示がd3.js採用により今風になったことですかね
上が2.3.2_1までの表示で下が2.3.3での表示
流れる方向も逆になってます
Traffic Graph 2.3.2_1と2.3.3比較
アップデート後、数日間使った感じでは安定して使えてます
アップデートの手順
事前に設定のバックアップをした上で以下の操作でアップデートを実行
手順は前回と同じです
まずダッシュボードのVersionのところにある雲マークか
System→Updateを選択
2.3.2_1から2.3.3へアップデートと表示出てるのを確認して「Confirm」を押す
無事に完了すると自動で再起動開始されます
再起動が終わればダッシュボードで更新されたか確認
最後に2.3.3の状態で設定をバックアップして完了
Update時の処理ログ
>>> Updating repositories metadata... Updating pfSense-core repository catalogue... pfSense-core repository is up-to-date. Updating pfSense repository catalogue... pfSense repository is up-to-date. All repositories are up-to-date. >>> Upgrading pkg... done. >>> Updating repositories metadata... Updating pfSense-core repository catalogue... Fetching meta.txz: . done Fetching packagesite.txz: . done Processing entries: . done pfSense-core repository update completed. 8 packages processed. Updating pfSense repository catalogue... Fetching meta.txz: . done Fetching packagesite.txz: .......... done Processing entries: .......... done pfSense repository update completed. 437 packages processed. >>> Upgrading pfSense-repo... done. >>> Updating repositories metadata... Updating pfSense-core repository catalogue... Repository pfSense-core has a wrong packagesite, need to re-create database Fetching meta.txz: . done Fetching packagesite.txz: . done Processing entries: . done pfSense-core repository update completed. 8 packages processed. Updating pfSense repository catalogue... Repository pfSense has a wrong packagesite, need to re-create database Fetching meta.txz: . done Fetching packagesite.txz: .......... done Processing entries: .......... done pfSense repository update completed. 437 packages processed. >>> Unlocking package pfSense-kernel-pfSense... done. >>> Downloading upgrade packages... Updating pfSense-core repository catalogue... pfSense-core repository is up-to-date. Updating pfSense repository catalogue... pfSense repository is up-to-date. All repositories are up-to-date. Checking for upgrades (78 candidates): .......... done Processing candidates (78 candidates): .......... done The following 83 package(s) will be affected (of 0 checked): New packages to be INSTALLED: libnghttp2: 1.18.0 [pfSense] openvpn23: 2.3.14 [pfSense] norm: 1.5r6 [pfSense] libwww: 5.4.0_6 [pfSense] json-c: 0.12.1 [pfSense] Installed packages to be UPGRADED: wol: 0.7.1_2 -> 0.7.1_3 [pfSense] unbound: 1.5.9 -> 1.6.0 [pfSense] uclcmd: 0.1 -> 0.1_1 [pfSense] strongswan: 5.5.0 -> 5.5.1 [pfSense] sqlite3: 3.13.0 -> 3.15.1_1 [pfSense] python27: 2.7.12 -> 2.7.13_1 [pfSense] php56-zlib: 5.6.26 -> 5.6.30 [pfSense] php56-xmlwriter: 5.6.26 -> 5.6.30 [pfSense] php56-xmlreader: 5.6.26 -> 5.6.30 [pfSense] php56-xml: 5.6.26 -> 5.6.30 [pfSense] php56-tokenizer: 5.6.26 -> 5.6.30 [pfSense] php56-sysvshm: 5.6.26 -> 5.6.30 [pfSense] php56-sysvsem: 5.6.26 -> 5.6.30 [pfSense] php56-sysvmsg: 5.6.26 -> 5.6.30 [pfSense] php56-sqlite3: 5.6.26 -> 5.6.30 [pfSense] php56-sockets: 5.6.26 -> 5.6.30 [pfSense] php56-simplexml: 5.6.26 -> 5.6.30 [pfSense] php56-shmop: 5.6.26 -> 5.6.30 [pfSense] php56-session: 5.6.26 -> 5.6.30 [pfSense] php56-readline: 5.6.26 -> 5.6.30 [pfSense] php56-posix: 5.6.26 -> 5.6.30 [pfSense] php56-pfSense-module: 0.12 -> 0.13 [pfSense] php56-pdo_sqlite: 5.6.26 -> 5.6.30 [pfSense] php56-pdo: 5.6.26 -> 5.6.30 [pfSense] php56-pcntl: 5.6.26 -> 5.6.30 [pfSense] php56-openssl: 5.6.26 -> 5.6.30 [pfSense] php56-opcache: 5.6.26_1 -> 5.6.30 [pfSense] php56-mcrypt: 5.6.26 -> 5.6.30 [pfSense] php56-mbstring: 5.6.26 -> 5.6.30 [pfSense] php56-ldap: 5.6.26 -> 5.6.30 [pfSense] php56-json: 5.6.26 -> 5.6.30 [pfSense] php56-hash: 5.6.26 -> 5.6.30 [pfSense] php56-gettext: 5.6.26 -> 5.6.30 [pfSense] php56-filter: 5.6.26 -> 5.6.30 [pfSense] php56-dom: 5.6.26 -> 5.6.30 [pfSense] php56-curl: 5.6.26 -> 5.6.30 [pfSense] php56-ctype: 5.6.26 -> 5.6.30 [pfSense] php56-bz2: 5.6.26 -> 5.6.30 [pfSense] php56-bcmath: 5.6.26 -> 5.6.30 [pfSense] php56: 5.6.26 -> 5.6.30 [pfSense] php-xdebug: 2.4.0 -> 2.4.1_1 [pfSense] php-suhosin: 0.9.38 -> 0.9.38_3 [pfSense] pftop: 0.7_6 -> 0.7_7 [pfSense] pfSense-rc: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense-kernel-pfSense: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense-default-config: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense-base: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense-Status_Monitoring: 1.4.4_2 -> 1.6.1_3 [pfSense] pfSense: 2.3.2_1 -> 2.3.3 [pfSense] perl5: 5.20.3_15 -> 5.24.1.r4_1 [pfSense] pecl-zmq: 1.1.3_1 -> 1.1.3_2 [pfSense] pecl-ssh2: 0.12 -> 0.13 [pfSense] pecl-rrd: 1.1.3_3 -> 1.1.3_4 [pfSense] pecl-radius: 1.3.0 -> 1.4.0.b1 [pfSense] pcre: 8.39 -> 8.39_1 [pfSense] ntp: 4.2.8p8 -> 4.2.8p9_1 [pfSense] nginx: 1.10.1,2 -> 1.10.2_3,2 [pfSense] nettle: 3.2 -> 3.3 [pfSense] links: 2.9,1 -> 2.13,1 [pfSense] libzmq4: 4.1.4_1 -> 4.1.5 [pfSense] libssh2: 1.7.0,2 -> 1.8.0,2 [pfSense] libsodium: 1.0.8 -> 1.0.11_1 [pfSense] libiconv: 1.14_9 -> 1.14_10 [pfSense] isc-dhcp43-server: 4.3.4 -> 4.3.5 [pfSense] isc-dhcp43-relay: 4.3.4_1 -> 4.3.5 [pfSense] isc-dhcp43-client: 4.3.4 -> 4.3.5 [pfSense] indexinfo: 0.2.4 -> 0.2.6 [pfSense] idnkit: 1.0_5 -> 1.0_6 [pfSense] glib: 2.46.2 -> 2.46.2_4 [pfSense] gettext-runtime: 0.19.8.1 -> 0.19.8.1_1 [pfSense] expat: 2.1.1_2 -> 2.2.0_1 [pfSense] dhcp6: 20080615_7 -> 20080615.1 [pfSense] curl: 7.50.3 -> 7.52.1_1 [pfSense] ca_root_nss: 3.25 -> 3.28.1 [pfSense] bind-tools: 9.10.4P2 -> 9.11.0P3 [pfSense] Installed packages to be REINSTALLED: scponly-4.8.20110526_2 [pfSense] (options changed) rrdtool-1.6.0_1 [pfSense] (direct dependency changed: perl5) miniupnpd-1.9.20160113,1 [pfSense] (options changed) Number of packages to be installed: 5 Number of packages to be upgraded: 75 Number of packages to be reinstalled: 3 The process will require 20 MiB more space. 85 MiB to be downloaded. Fetching wol-0.7.1_3.txz: ... done Fetching unbound-1.6.0.txz: .......... done Fetching uclcmd-0.1_1.txz: .. done Fetching strongswan-5.5.1.txz: .......... done Fetching sqlite3-3.15.1_1.txz: .......... done Fetching scponly-4.8.20110526_2.txz: .. done Fetching rrdtool-1.6.0_1.txz: .......... done Fetching python27-2.7.13_1.txz: .......... done Fetching php56-zlib-5.6.30.txz: .. done Fetching php56-xmlwriter-5.6.30.txz: .. done Fetching php56-xmlreader-5.6.30.txz: .. done Fetching php56-xml-5.6.30.txz: .. done Fetching php56-tokenizer-5.6.30.txz: . done Fetching php56-sysvshm-5.6.30.txz: . done Fetching php56-sysvsem-5.6.30.txz: . done Fetching php56-sysvmsg-5.6.30.txz: . done Fetching php56-sqlite3-5.6.30.txz: .. done Fetching php56-sockets-5.6.30.txz: .... done Fetching php56-simplexml-5.6.30.txz: ... done Fetching php56-shmop-5.6.30.txz: . done Fetching php56-session-5.6.30.txz: .... done Fetching php56-readline-5.6.30.txz: .. done Fetching php56-posix-5.6.30.txz: .. done Fetching php56-pfSense-module-0.13.txz: ... done Fetching php56-pdo_sqlite-5.6.30.txz: .. done Fetching php56-pdo-5.6.30.txz: ..... done Fetching php56-pcntl-5.6.30.txz: .. done Fetching php56-openssl-5.6.30.txz: ..... done Fetching php56-opcache-5.6.30.txz: ....... done Fetching php56-mcrypt-5.6.30.txz: .. done Fetching php56-mbstring-5.6.30.txz: .......... done Fetching php56-ldap-5.6.30.txz: ... done Fetching php56-json-5.6.30.txz: .. done Fetching php56-hash-5.6.30.txz: .......... done Fetching php56-gettext-5.6.30.txz: . done Fetching php56-filter-5.6.30.txz: .. done Fetching php56-dom-5.6.30.txz: ...... done Fetching php56-curl-5.6.30.txz: ... done Fetching php56-ctype-5.6.30.txz: . done Fetching php56-bz2-5.6.30.txz: .. done Fetching php56-bcmath-5.6.30.txz: .. done Fetching php56-5.6.30.txz: .......... done Fetching php-xdebug-2.4.1_1.txz: .......... done Fetching php-suhosin-0.9.38_3.txz: ...... done Fetching pftop-0.7_7.txz: ...... done Fetching pfSense-rc-2.3.3.txz: . done Fetching pfSense-kernel-pfSense-2.3.3.txz: .......... done Fetching pfSense-default-config-2.3.3.txz: . done Fetching pfSense-base-2.3.3.txz: .......... done Fetching pfSense-Status_Monitoring-1.6.1_3.txz: .. done Fetching pfSense-2.3.3.txz: . done Fetching perl5-5.24.1.r4_1.txz: .......... done Fetching pecl-zmq-1.1.3_2.txz: ... done Fetching pecl-ssh2-0.13.txz: ... done Fetching pecl-rrd-1.1.3_4.txz: .. done Fetching pecl-radius-1.4.0.b1.txz: ... done Fetching pcre-8.39_1.txz: .......... done Fetching ntp-4.2.8p9_1.txz: .......... done Fetching nginx-1.10.2_3,2.txz: .......... done Fetching nettle-3.3.txz: .......... done Fetching miniupnpd-1.9.20160113,1.txz: ...... done Fetching links-2.13,1.txz: .......... done Fetching libzmq4-4.1.5.txz: .......... done Fetching libssh2-1.8.0,2.txz: .......... done Fetching libsodium-1.0.11_1.txz: .......... done Fetching libiconv-1.14_10.txz: .......... done Fetching isc-dhcp43-server-4.3.5.txz: .......... done Fetching isc-dhcp43-relay-4.3.5.txz: .......... done Fetching isc-dhcp43-client-4.3.5.txz: .......... done Fetching indexinfo-0.2.6.txz: . done Fetching idnkit-1.0_6.txz: .......... done Fetching glib-2.46.2_4.txz: .......... done Fetching gettext-runtime-0.19.8.1_1.txz: .......... done Fetching expat-2.2.0_1.txz: .......... done Fetching dhcp6-20080615.1.txz: .......... done Fetching curl-7.52.1_1.txz: .......... done Fetching ca_root_nss-3.28.1.txz: .......... done Fetching bind-tools-9.11.0P3.txz: .......... done Fetching libnghttp2-1.18.0.txz: .......... done Fetching openvpn23-2.3.14.txz: .......... done Fetching norm-1.5r6.txz: .......... done Fetching libwww-5.4.0_6.txz: .......... done Fetching json-c-0.12.1.txz: .... done Checking integrity... done (1 conflicting) - openvpn23-2.3.14 [pfSense] conflicts with openvpn-2.3.11 [installed] on /usr/local/include/openvpn-plugin.h Checking integrity... done (0 conflicting) Conflicts with the existing packages have been found. One more solver iteration is needed to resolve them. The following 84 package(s) will be affected (of 0 checked): Installed packages to be REMOVED: openvpn-2.3.11 New packages to be INSTALLED: libnghttp2: 1.18.0 [pfSense] norm: 1.5r6 [pfSense] libwww: 5.4.0_6 [pfSense] json-c: 0.12.1 [pfSense] openvpn23: 2.3.14 [pfSense] Installed packages to be UPGRADED: indexinfo: 0.2.4 -> 0.2.6 [pfSense] gettext-runtime: 0.19.8.1 -> 0.19.8.1_1 [pfSense] python27: 2.7.12 -> 2.7.13_1 [pfSense] perl5: 5.20.3_15 -> 5.24.1.r4_1 [pfSense] pcre: 8.39 -> 8.39_1 [pfSense] libiconv: 1.14_9 -> 1.14_10 [pfSense] glib: 2.46.2 -> 2.46.2_4 [pfSense] expat: 2.1.1_2 -> 2.2.0_1 [pfSense] ca_root_nss: 3.25 -> 3.28.1 [pfSense] unbound: 1.5.9 -> 1.6.0 [pfSense] php56: 5.6.26 -> 5.6.30 [pfSense] libsodium: 1.0.8 -> 1.0.11_1 [pfSense] curl: 7.50.3 -> 7.52.1_1 [pfSense] strongswan: 5.5.0 -> 5.5.1 [pfSense] sqlite3: 3.13.0 -> 3.15.1_1 [pfSense] php56-session: 5.6.26 -> 5.6.30 [pfSense] php56-pdo: 5.6.26 -> 5.6.30 [pfSense] php56-dom: 5.6.26 -> 5.6.30 [pfSense] pecl-rrd: 1.1.3_3 -> 1.1.3_4 [pfSense] nettle: 3.2 -> 3.3 [pfSense] libzmq4: 4.1.4_1 -> 4.1.5 [pfSense] libssh2: 1.7.0,2 -> 1.8.0,2 [pfSense] idnkit: 1.0_5 -> 1.0_6 [pfSense] wol: 0.7.1_2 -> 0.7.1_3 [pfSense] uclcmd: 0.1 -> 0.1_1 [pfSense] php56-zlib: 5.6.26 -> 5.6.30 [pfSense] php56-xmlwriter: 5.6.26 -> 5.6.30 [pfSense] php56-xmlreader: 5.6.26 -> 5.6.30 [pfSense] php56-xml: 5.6.26 -> 5.6.30 [pfSense] php56-tokenizer: 5.6.26 -> 5.6.30 [pfSense] php56-sysvshm: 5.6.26 -> 5.6.30 [pfSense] php56-sysvsem: 5.6.26 -> 5.6.30 [pfSense] php56-sysvmsg: 5.6.26 -> 5.6.30 [pfSense] php56-sqlite3: 5.6.26 -> 5.6.30 [pfSense] php56-sockets: 5.6.26 -> 5.6.30 [pfSense] php56-simplexml: 5.6.26 -> 5.6.30 [pfSense] php56-shmop: 5.6.26 -> 5.6.30 [pfSense] php56-readline: 5.6.26 -> 5.6.30 [pfSense] php56-posix: 5.6.26 -> 5.6.30 [pfSense] php56-pfSense-module: 0.12 -> 0.13 [pfSense] php56-pdo_sqlite: 5.6.26 -> 5.6.30 [pfSense] php56-pcntl: 5.6.26 -> 5.6.30 [pfSense] php56-openssl: 5.6.26 -> 5.6.30 [pfSense] php56-opcache: 5.6.26_1 -> 5.6.30 [pfSense] php56-mcrypt: 5.6.26 -> 5.6.30 [pfSense] php56-mbstring: 5.6.26 -> 5.6.30 [pfSense] php56-ldap: 5.6.26 -> 5.6.30 [pfSense] php56-json: 5.6.26 -> 5.6.30 [pfSense] php56-hash: 5.6.26 -> 5.6.30 [pfSense] php56-gettext: 5.6.26 -> 5.6.30 [pfSense] php56-filter: 5.6.26 -> 5.6.30 [pfSense] php56-curl: 5.6.26 -> 5.6.30 [pfSense] php56-ctype: 5.6.26 -> 5.6.30 [pfSense] php56-bz2: 5.6.26 -> 5.6.30 [pfSense] php56-bcmath: 5.6.26 -> 5.6.30 [pfSense] php-xdebug: 2.4.0 -> 2.4.1_1 [pfSense] php-suhosin: 0.9.38 -> 0.9.38_3 [pfSense] pftop: 0.7_6 -> 0.7_7 [pfSense] pfSense-rc: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense-Status_Monitoring: 1.4.4_2 -> 1.6.1_3 [pfSense] pecl-zmq: 1.1.3_1 -> 1.1.3_2 [pfSense] pecl-ssh2: 0.12 -> 0.13 [pfSense] pecl-radius: 1.3.0 -> 1.4.0.b1 [pfSense] ntp: 4.2.8p8 -> 4.2.8p9_1 [pfSense] nginx: 1.10.1,2 -> 1.10.2_3,2 [pfSense] links: 2.9,1 -> 2.13,1 [pfSense] isc-dhcp43-server: 4.3.4 -> 4.3.5 [pfSense] isc-dhcp43-relay: 4.3.4_1 -> 4.3.5 [pfSense] isc-dhcp43-client: 4.3.4 -> 4.3.5 [pfSense] dhcp6: 20080615_7 -> 20080615.1 [pfSense] bind-tools: 9.10.4P2 -> 9.11.0P3 [pfSense] pfSense-kernel-pfSense: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense-default-config: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense-base: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense: 2.3.2_1 -> 2.3.3 [pfSense] Installed packages to be REINSTALLED: rrdtool-1.6.0_1 [pfSense] (direct dependency changed: perl5) scponly-4.8.20110526_2 [pfSense] (options changed) miniupnpd-1.9.20160113,1 [pfSense] (options changed) Number of packages to be removed: 1 Number of packages to be installed: 5 Number of packages to be upgraded: 75 Number of packages to be reinstalled: 3 The process will require 19 MiB more space. >>> Upgrading pfSense kernel... Updating pfSense-core repository catalogue... pfSense-core repository is up-to-date. Updating pfSense repository catalogue... pfSense repository is up-to-date. All repositories are up-to-date. Checking integrity... done (0 conflicting) The following 2 package(s) will be affected (of 0 checked): Installed packages to be UPGRADED: pfSense-kernel-pfSense: 2.3.2_1 -> 2.3.3 [pfSense-core] pfSense-rc: 2.3.2_1 -> 2.3.3 [pfSense-core] Number of packages to be upgraded: 2 [1/2] Upgrading pfSense-rc from 2.3.2_1 to 2.3.3... [1/2] Extracting pfSense-rc-2.3.3: .... done [2/2] Upgrading pfSense-kernel-pfSense from 2.3.2_1 to 2.3.3... [2/2] Extracting pfSense-kernel-pfSense-2.3.3: .......... done ===> Keeping a copy of current kernel in /boot/kernel.old Upgrade is complete. Rebooting in 10 seconds. >>> Locking package pfSense-kernel-pfSense... done. Success
Atom C2000のエラッタについて
2017年2月にCiscoの発表で発覚したIntel Atom C2000シリーズのエラッタについてです
エラッタの内容など詳細はこちらでご覧ください
IntelのAtom C2000シリーズを採用するサーバーが突然死する危険性、Intelは対応中も詳細は公表せず – GIGAZINE
http://gigazine.net/news/20170208-intel-atom-c2000-trouble/
Atom C2000ファミリに18カ月前後の動作で起動できなくなるエラッタ – PC Watch
http://pc.watch.impress.co.jp/docs/news/1045715.html
Atom C2000シリーズというとコードネームだとAvoton / Rangeleyです
主にルータやNASなどのネットワーク機器に使用されているので
CiscoやSynologyなどがエラッタについて発表してます
Clock Signal Component Issue – CISCO
https://www.cisco.com/c/en/us/support/web/clock-signal.html#~faqs,
かなり簡単に解説すると18カ月ぐらい使って運が悪いと起動しなくなるよって話で
現在の情報では故障しても起動中には問題は起こらず
再起動した時にCPUが動かない状態になるようですが
今のところSandyBridgeチップセットみたいにリコールまではしていません
過去記事でも紹介してますが私が現在利用しているのは
pfSenseスポンサーのNetgate社 SG-4860で
Atom C2558（Rangeley）を使用しているので該当機になります
一応NetgateやpfSense Storeで購入した人向けにプレスリリースがあります
Clock Signal Component Issue
https://www.netgate.com/blog/clock-signal-component-issue.html
pfSense Digest » Clock Signal Component Issue
https://blog.pfsense.org/?p=2297
中身はCiscoやSynologyと同じ対応で
問題自体は認識しているが現状はほとんどの製品が正常に使い続けれるとし
念のため該当製品は3年間の保証をするとしてます
ネットワーク機器なので常時稼働がほとんどでしょうし
不具合が出る機器ならば18カ月、つまり1年半～2年もあれば
見つけられるし大丈夫という感じでしょうか
現に該当機でも各社そのまま今も普通に販売してますからね
SG-4860については使用から18か月経ったときにでも経過報告します
コメント