Project

General

Profile

Actions
Copy link

Bug #10646

closed

Reinstall package process stalls at pfBlockerNG when restoring a config

Added by Steve Wheeler almost 3 years ago. Updated about 2 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Christian McDonald
Category:
pfBlockerNG
Target version:
pfSense - 2.7.0
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
23.01
Affected Version:
Affected Plus Version:
Affected Architecture:
All

Description

The package install process for pfBlockerNG completes but the processes do not close out preventing subsequent packages being installed:

root    90074   0.0  1.9 103252 38972 u0- I    17:11    0:00.37 |-- /usr/local/bin/php-cgi -f /etc/rc.package_reinstall_all
root    41960   0.0  0.3  10632  5192  -  I    17:12    0:00.00 | `-- /usr/local/sbin/pkg-static install -y -f pfSense-pkg-pfBlockerNG-devel
root    42288   0.0  0.9  24968 17220  -  I    17:12    0:00.53 |   `-- /usr/local/sbin/pkg-static install -y -f pfSense-pkg-pfBlockerNG-devel
root    18639   0.0  0.0      0     0  -  Z    17:13    0:00.02 |     |-- <defunct>
root    21643   0.0  0.1   4644  2092  -  S    17:13    0:00.00 |     |-- /usr/local/sbin/clog_pfb -f /var/log/filter.log
root    21653   0.0  1.9  51972 37560  -  S    17:13    0:00.93 |     |-- /usr/local/bin/php_pfb -f /usr/local/pkg/pfblockerng/pfblockerng.inc filterlog
root    52514   0.0  0.0      0     0  -  Z    17:12    0:32.12 |     |-- <defunct>
root    54546   0.0  0.0      0     0  -  Z    17:12    0:00.02 |     |-- <defunct>
root    58078   0.0  0.0      0     0  -  Z    17:12    0:00.00 |     |-- <defunct>
root    58300   0.0  0.0      0     0  -  Z    17:12    0:00.28 |     |-- <defunct>
root    58374   0.0  0.0      0     0  -  Z    17:12    0:00.03 |     |-- <defunct>
root    60793   0.0  0.0      0     0  -  Z    17:12    0:00.00 |     |-- <defunct>
root    61062   0.0  0.3  10500  6504  -  S    17:12    0:00.01 |     |-- /usr/local/sbin/lighttpd_pfb -f /var/unbound/pfb_dnsbl_lighty.conf
root    61126   0.0  1.8  51908 36260  -  I    17:12    0:00.12 |     | |-- /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc dnsbl
root    61176   0.0  1.8  51908 36260  -  I    17:12    0:00.12 |     | `-- /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc index
root    61396   0.0  1.9  51908 37896  -  S    17:12    0:00.30 |     `-- /usr/local/bin/php -f /usr/local/pkg/pfblockerng/pfblockerng.inc queries

Killing those processes manually allows the re-install package process to continue.

Likely the same cause as: https://redmine.pfsense.org/issues/10610

Actions
Copy link
 #1

Updated by Renato Botelho over 2 years ago

  • Status changed from New to Duplicate

Duplicate of #10610

Actions
Copy link
 #2

Updated by Christian McDonald 3 months ago

  • Status changed from Duplicate to Feedback
  • Assignee set to Christian McDonald
  • Target version changed from 2.5.0 to 2.7.0
  • Plus Target Version set to 23.01
  • Affected Version deleted (2.4.x)

Issue here has to do with pkg(8) hardening that prevents it from spawning long-lived processes. pkg(8) uses procctl to change the default process repear from init to itself, which means any processes that pkg starts are not going to be adopted by init which is standard operating procedure for daemons.

I have patched pkg in our ports tree to work around this limitation while we continue to investigate a better service management solution.

Actions
Copy link
 #3

Updated by Jim Pingle about 2 months ago

  • Status changed from Feedback to Resolved
  • Start date deleted (06/09/2020)
  • % Done changed from 0 to 100

This has been working since the fix went in.

Actions
Copy link

Also available in: Atom PDF