pfSense

I just upgraded a firewall from 1.2.3 to todays snapshot, using pfSense-2.0-RC1-4g-i386-20110415-1518-nanobsd-upgrade.img.gz. After the upgrade, my PPPoE uplink was broken (cf. bug 1439 and an upcoming bug report). I decided to switch back to 1.2.3 on the other slice. The system switched the slices, rebooted and broke down. After some investigation via the serial shell I found out that the config in /cf/conf was overwritten with the new version, essentially breaking the old pfsense.

Maybe this was to be expected and I understood the multi-slice feature wrong. But I had hoped that this wouldn't happen (renders this feature pretty useless IMO). (I now hosed the system completely by trying to switch back to the other slice and have to re-flash so I can't debug anymore apart from the stuff written up to here.)

See bug 1439 for the upgrade log and below the output of the booting 1.2.3:

Consoles: serial port
BIOS drive C: is disk0
BIOS drive D: is disk1
BIOS 637kB/2086784kB available memory

FreeBSD/i386 bootstrap loader, Revision 1.1
(sullrich@FreeBSD_7.2_pfSense_1.2.3_snaps.pfsense.org, Mon Dec 7 19:59:55 EST 2009)
Loading /boot/defaults/loader.conf
/boot/kernel/kernel text=0x739788 data=0x13cf6c+0x51c80 /
\
Hit [Enter] to boot immediately, or any other key for command prompt.
Booting [/boot/kernel/kernel]...
Copyright (c) 1992-2009 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 7.2-RELEASE-p5 #0: Mon Dec 7 20:20:43 EST 2009
sullrich@FreeBSD_7.2_pfSense_1.2.3_snaps.pfsense.org:/usr/obj.pfSense/usr/pfSensesrc/src/sys/pfSense_wrap.7.i386
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Intel(R) Pentium(R) Dual CPU E2220 @ 2.40GHz (2394.01-MHz 686-class CPU)
Origin = "GenuineIntel" Id = 0x6fd Stepping = 13
Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
Features2=0xe39d<SSE3,DTES64,MON,DS_CPL,EST,TM2,SSSE3,CX16,xTPR,PDCM>
AMD Features=0x20100000<NX,LM>
AMD Features2=0x1<LAHF>
Cores per package: 2
real memory = 2137915392 (2038 MB)
avail memory = 2082713600 (1986 MB)
ACPI APIC Table: <IntelR AWRDACPI>
ioapic0: Changing APIC ID to 4
ioapic0 <Version 2.0> irqs 0-23 on motherboard
wlan: mac acl policy registered
cryptosoft0: <software crypto> on motherboard
padlock0: No ACE support.
acpi0: <IntelR AWRDACPI> on motherboard
acpi0: [ITHREAD]
acpi0: Power Button (fixed)
acpi0: reservation of 0, a0000 (3) failed
acpi0: reservation of 100000, 7f5e0000 (3) failed
Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
acpi_button0: <Power Button> on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
pcib1: <PCI-PCI bridge> irq 16 at device 1.0 on pci0
pci1: <PCI bus> on pcib1
em0: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0x6000-0x601f mem 0xd0000000-0xd001ffff irq 16 at device 0.0 on pci1
em0: Using MSI interrupt
em0: [FILTER]
em0: Ethernet address: 00:60:e0:48:0f:28
vgapci0: <VGA-compatible display> port 0xdb00-0xdb07 mem 0xd0700000-0xd077ffff,0xc0000000-0xcfffffff,0xd0780000-0xd07bffff irq 16 at device 2.0 on pci0
pcib2: <ACPI PCI-PCI bridge> irq 16 at device 28.0 on pci0
pci2: <ACPI PCI bus> on pcib2
em1: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0x7000-0x701f mem 0xd0100000-0xd011ffff irq 16 at device 0.0 on pci2
em1: Using MSI interrupt
em1: [FILTER]
em1: Ethernet address: 00:60:e0:48:0f:29
pcib3: <ACPI PCI-PCI bridge> irq 17 at device 28.1 on pci0
pci3: <ACPI PCI bus> on pcib3
em2: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0x8000-0x801f mem 0xd0200000-0xd021ffff irq 17 at device 0.0 on pci3
em2: Using MSI interrupt
em2: [FILTER]
em2: Ethernet address: 00:60:e0:48:0f:2a
pcib4: <ACPI PCI-PCI bridge> irq 18 at device 28.2 on pci0
pci4: <ACPI PCI bus> on pcib4
em3: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0x9000-0x901f mem 0xd0300000-0xd031ffff irq 18 at device 0.0 on pci4
em3: Using MSI interrupt
em3: [FILTER]
em3: Ethernet address: 00:60:e0:48:0f:2b
pcib5: <ACPI PCI-PCI bridge> irq 19 at device 28.3 on pci0
pci5: <ACPI PCI bus> on pcib5
em4: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0xa000-0xa01f mem 0xd0400000-0xd041ffff irq 19 at device 0.0 on pci5
em4: Using MSI interrupt
em4: [FILTER]
em4: Ethernet address: 00:60:e0:48:0f:2c
pcib6: <ACPI PCI-PCI bridge> irq 16 at device 28.4 on pci0
pci6: <ACPI PCI bus> on pcib6
em5: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0xb000-0xb01f mem 0xd0500000-0xd051ffff irq 16 at device 0.0 on pci6
em5: Using MSI interrupt
em5: [FILTER]
em5: Ethernet address: 00:60:e0:48:0f:2d
pcib7: <ACPI PCI-PCI bridge> irq 17 at device 28.5 on pci0
pci7: <ACPI PCI bus> on pcib7
em6: <Intel(R) PRO/1000 Network Connection 6.9.6> port 0xc000-0xc01f mem 0xd0600000-0xd061ffff irq 17 at device 0.0 on pci7
em6: Using MSI interrupt
em6: [FILTER]
em6: Ethernet address: 00:60:e0:48:0f:2e
uhci0: <UHCI (generic) USB controller> port 0xdd00-0xdd1f irq 23 at device 29.0 on pci0
uhci0: [GIANT-LOCKED]
uhci0: [ITHREAD]
usb0: <UHCI (generic) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb0
uhub0: 2 ports with 2 removable, self powered
uhci1: <UHCI (generic) USB controller> port 0xd800-0xd81f irq 19 at device 29.1 on pci0
uhci1: [GIANT-LOCKED]
uhci1: [ITHREAD]
usb1: <UHCI (generic) USB controller> on uhci1
usb1: USB revision 1.0
uhub1: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb1
uhub1: 2 ports with 2 removable, self powered
uhci2: <UHCI (generic) USB controller> port 0xd900-0xd91f irq 18 at device 29.2 on pci0
uhci2: [GIANT-LOCKED]
uhci2: [ITHREAD]
usb2: <UHCI (generic) USB controller> on uhci2
usb2: USB revision 1.0
uhub2: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb2
uhub2: 2 ports with 2 removable, self powered
uhci3: <UHCI (generic) USB controller> port 0xda00-0xda1f irq 16 at device 29.3 on pci0
uhci3: [GIANT-LOCKED]
uhci3: [ITHREAD]
usb3: <UHCI (generic) USB controller> on uhci3
usb3: USB revision 1.0
uhub3: <Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1> on usb3
uhub3: 2 ports with 2 removable, self powered
ehci0: <Intel 82801GB/R (ICH7) USB 2.0 controller> mem 0xd07c0000-0xd07c03ff irq 23 at device 29.7 on pci0
ehci0: [GIANT-LOCKED]
ehci0: [ITHREAD]
usb4: EHCI version 1.0
usb4: companion controllers, 2 ports each: usb0 usb1 usb2 usb3
usb4: <Intel 82801GB/R (ICH7) USB 2.0 controller> on ehci0
usb4: USB revision 2.0
uhub4: <Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1> on usb4
uhub4: 8 ports with 8 removable, self powered
pcib8: <ACPI PCI-PCI bridge> at device 30.0 on pci0
pci8: <ACPI PCI bus> on pcib8
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel ICH7 SATA300 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf000-0xf00f at device 31.2 on pci0
ata0: <ATA channel 0> on atapci0
ata0: [ITHREAD]
ata1: <ATA channel 1> on atapci0
ata1: [ITHREAD]
pci0: <serial bus, SMBus> at device 31.3 (no driver attached)
acpi_tz0: <Thermal Zone> on acpi0
speaker0: <PC speaker> port 0x61 on acpi0
sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
sio0: type 16550A, console
sio0: [FILTER]
sio1: <16550A-compatible COM port> port 0x2f8-0x2ff irq 3 on acpi0
sio1: type 16550A
sio1: [FILTER]
cpu0: <ACPI CPU> on acpi0
ppc0: parallel port not found.
Timecounter "TSC" frequency 2394010632 Hz quality 800
Timecounters tick every 10.000 msec
IPsec: Initialized Security Association Processing.
ad1: 152627MB <FUJITSU MJA2160BH G2 00000018> at ata0-slave SATA150
ad2: 15279MB <TRANSCEND 20091215> at ata1-master PIO4
WARNING: Expected rawoffset 0, found 63
Trying to mount root from ufs:/dev/ufs/pfsense0
Setting up embedded specific environment... done.

 _/ WAf \
/ p \__/ SRNense
IN__/   \
      \___/G:
 R/W mount of /cache denied.  Filesystem is not clean - run fsck

Welcome to pfSense 1.2.3-RELEASE...

Mounting filesystems...mount: /dev/ad1s1d : Operation not permitted
done.
Creating symlinks......done.
Launching the init system... done.
Initializing...............XML error: GATEWAY_ITEM at line 1060 cannot occur more than once
Starting CRON... done.
XML error: GATEWAY_ITEM at line 1060 cannot occur more than once
Executing rc.d items...
Starting /usr/local/etc/rc.d/darkstat.sh...done.
Starting /usr/local/etc/rc.d/denyhosts.sh...done.
Starting /usr/local/etc/rc.d/nrpe2.sh...done.
appending output to nohup.out
rm: /tmp/config.cache: No such file or directory
XML error: GATEWAY_ITEM at line 1060 cannot occur more than once
Bootup complete

FreeBSD/i386 (Amnesiac) (console)

XML error: GATEWAY_ITEM at line 1060 cannot occur more than once *******************
0) Logout (SSH only)
1) Assign Interfaces
2) Set LAN IP address
3) Reset webConfigurator password
4) Reset to factory defaults
5) Reboot system
6) Halt system
7) Ping host
8) Shell
9) PFtop
10) Filter Logs
11) Restart webConfigurator
12) pfSense Developer Shell
13) Upgrade from console
14) Enable Secure Shell (sshd)

pfSense console setup

Enter an option: