Upgrading from 25.1.12 (system running fine since install ing 25.1 earlier this year) to 25.7
GUI appeared to download all packages and install everything without any errors as far as could tell & system went on to reboot but never came back up.
Hooked up a monitor and rebooted to get the following
(the following is manually typed from a photograph of the screen using mobile phone so there could be some typo's in there but I think it's correct.)
>>> Invoking import script 'importer'
Configuring crash dump device: /dev/ada0p3
swapon: adding /var/ada0p3 as swap device
.ELF ldconfig path /lib /usr/lib /usr/lib/compact /usr/local/lib /usr/localpsec /usr/local/lib/perl5/5.40 mach/core
32-bit compatability ldconfig path:
done.
chown: /var/run/booting: No such file or directory
>>> Invoking early script 'upgrade'
>>> Invoking early script 'configd'
Generating configuration configd socket missing <@var/run/configd.socket>
>>> Error in early script '15-templates'
>>> Invoking early script 'backup'
>>> Invoking backup script 'captiverportal'
>>> Invoking backup script 'dhcplease'
>>> Invoking backup script 'duid'
>>> Invoking backup script 'netflow'
>>> Invoking backup script 'rrd'
>>> Invoking backup script 'carp'
CARP event system: configd socket missing <@var/run/configd.socket>
>>> Error in early script '90-carp'
Launching init sysm...done.
Initalizing................done.
(system hangs at this point. Hitting Ctrl C gives)
Enter full pathname of shell or RETURN for /bin/sh:
root@:/ #
power cycling still gave the same issue.
As a result I have used "bectl activate snapshot_name" to revert to a previous snapshot and everything is running fine.
Can anyone shed any light on what the problem may be please?
Do you have a microcode plugin installed? Some people had similar issues with it (especially with Intel hardware).
Cheers,
Franco
I think I do I have this
"os-cpu-microcode-intel (installed)" listed under plugins is that the one you are referring to. I can't remember why I installed it?
Do you suggest disabling / uninstalling it and trying the update again?
sorry should have said it is intel
"Intel(R) Celeron(R) J4125 CPU @ 2.00GHz (4 cores, 4 threads)"
What is the solution to mitigate this issue?
Shall we uninstall the os-cpu-microcode-intel plugin? I haven't updated yet and my firewall is headless. It's rather complicated to connect it to a monitor and keyboard, thus I'd like to avoid having to do so.
What about after the upgrade? Is it safe to install the os-cpu-microcode-intel plugin again, or will it hang after the next reboot? There must have been a reason why I installed the plugin. I believe it was franco's suggestion to do so at one point.
Since it depends on the hardware and there is no list of "known bad Intel hardware with microcode version xyz" I can make no useful suggestion.
Deinstall microcode, get the latest BIOS flashed (which hopefully has the latest version) and then update.
Cheers,
Franco
Thanks for the reply.
Well, I guess this will be more problematic than I thought. I am using one of these mini PCs (see attachment) and I have no idea how to actually get an update for the BIOS in this thing. I bought it 4 years ago and I've never touched it again since the initial install. I've always just upgraded OPNsense remotely. But hearing that the upgrade might hang made me a bit nervous. I guess I will have to find a way to connect it to a monitor and keyboard after all.
P.S.: miniPC QOTOM Q330G4, i3-4010U CPU, AES-NI, 4 Intel LAN (I211-AT 10/100/1000 GbE)
If it helps anyone, I've successfully upgraded:
A CWWK N100, AliExpress jobber with os-cpu-microcode-intel installed
Numerous R86S N100's with os-cpu-microcode-intel installed
So far, all have upgraded with no issues. (3 done so far, 1 to go)
My Protectli NUC upgraded with no issues - I have os-cpu-microcode-intel installed
Uninstalled the os-cpu-microcode-intel microcode & rebooted to make sure it took effect.
Ran the upgrade to 25.7 device hung, power cycled it and it came up OK so removing the microcode did improve the situation. Unfortunately I'm running this router headless so could not see any errors on screen - I have to take it out of the rack to attach a monitor to it.
I'm going to continue running it without the microcode installed and see how it goes. Following on from Franco said earlier I will look it there is a BIOS update available, it's a small fan less PC so may need to do some research to find it.
PS big thank you to Franco for you extremely rapid and helpful suggestion, I love this community.
Sure thing! :)
I have same issue. Device with CWWK with N-305 with microcode plugin installed. Started 25.7 upgrade and then it hangs. It is headless, so I dont have clue what happened, need to go there and check what is on console. I dont understand why uninstalling microcode could help and if it is just with this upgrade or any other later, or general with boot process itself.
I don't know why but I have had problems with major upgrades from gui. For me this is the first that had no problems. Upgrading to 25.1 I had to do a fresh install and import settings on install. If you continue to have issues that may be the way to go.
My experience:
Qotom Q355G4 ugrade to 25.7 with microcode installed, upgrade hung on reload firwmare.
Reinstalled 25.1, reload backup and other settings/plugins/etc, updated to last version, unistalled microcode plugin, reboot, upgrade to 25.7, reinstalled microcode, reboot.
Upgrade went well,
however i've some problem of packet loss on the gateway of wireguard vpn.
Unistalled microcode plugin, no more "loss" on wireguard vpn gateway.
Thanks @nbca2
This info certainly helps a lot. Thus I'll uninstall the microcode plugin before the upgrade and won't install it afterwards.
P.S.: I don't know how to mention a user in this forum.
Quote from: tessus on July 25, 2025, 09:10:24 AMThanks @nbca2
This info certainly helps a lot. Thus I'll uninstall the microcode plugin before the upgrade and won't install it afterwards.
P.S.: I don't know how to mention a user in this forum.
remember i'm not a tech guy, but a tech enthusiast
i don't understand if microcode is necessary for system security.
I have the concept of the microcode update and why I installed it.
However, I don't know why it conflicts with this version of opnsense and I don't know what it means by uninstalling the plugin (in addition to not have the CPU microcode updated).
Similar situation, hooked up an Monitor and it appeared that the SSD was bad, stating when 25.7 was installed that it needed to recover clusters etc. then eventually would not boot. Uninstalled 25.7 and reinstalled 25.1.12 and no issues 2 days and counting. May try removing the Intel Microcode later and trying to install 25.7 again, spent an entire day troubleshooting. I am running the Glovary Mini PC with N100 Alder Lake CPU
Quote from: vk2him on July 24, 2025, 11:20:27 AMMy Protectli NUC upgraded with no issues - I have os-cpu-microcode-intel installed
What model do you have? I have a VP2420 and plan to upgrade during the weekend.
Thanks for your feedback, I dont have microcode plugin installed, but reading this experiences, i will wait till see how this issue progress. I´m also based in intel,snfd I don´t want to restore the installation at all.
I've got a Minisforum UN100D that's based on the N100 Intel processor that is normally headless, and a bit of a chore to hook up to monitor and keyboard, and it has the microcode plugin installed.
Based on this I think I'll wait to upgrade, and I'll monitor here for people's experience.
I appreciate the forum all the more, thank you.
There's a risk that we'll never know what the trigger is or that this "bug" will never be found/fixed (especially if it's a vendor issue).
FWIW, I had success on two Protectli units (a V1410 and a VP2410) both with the intel-microcode package installed prior to upgrade. They both are running coreboot rather than the stock AMI UEFI, in case that makes a difference.
Quote from: JDabbs on July 24, 2025, 11:45:01 AMUninstalled the os-cpu-microcode-intel microcode & rebooted to make sure it took effect.
Ran the upgrade to 25.7 device hung, power cycled it and it came up OK so removing the microcode did improve the situation. Unfortunately I'm running this router headless so could not see any errors on screen - I have to take it out of the rack to attach a monitor to it.
I'm going to continue running it without the microcode installed and see how it goes. Following on from Franco said earlier I will look it there is a BIOS update available, it's a small fan less PC so may need to do some research to find it.
PS big thank you to Franco for you extremely rapid and helpful suggestion, I love this community.
I highly recommend using a PIKVM for this type of situation. I also run my servers headless but still need console from time to time. Works flawlessly.