***GOT REQUEST TO UPDATE***
Currently running OPNsense 26.1.3 (amd64) at Fri Mar 6 19:59:05 MSK 2026
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
Fetching meta.conf: . done
SunnyValley repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
Fetching meta.conf: . done
SunnyValley repository is up to date.
All repositories are up to date.
Checking for upgrades (259 candidates): .......... done
Processing candidates (259 candidates): . done
The following 1 package(s) will be affected (of 0 checked):
Installed packages to be REINSTALLED:
opnsense-26.1.3 [OPNsense] (Vital flag changed: 'true' -> 'false')
Number of packages to be reinstalled: 1
6 MiB to be downloaded.
[1/1] Fetching opnsense-26.1.3: .......... done
Checking integrity... done (0 conflicting)
[1/1] Reinstalling opnsense-26.1.3...
[1/1] Extracting opnsense-26.1.3: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh.sh'
Flushing all caches...done.
Writing firmware settings: FreeBSD OPNsense SunnyValley
Writing trust files...done.
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
certctl: No changes to trust store were made.
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring cron...done.
Configuring system logging...done.
Stuck completely ..... while Internet connection still working after reboot.
Exactly same thing happened to me. I rebooted after that and it was fine.
EDIT: actually no. check for updates reports a segmentation fault for one of the packages.
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.1.3 (amd64) at Fri Mar 6 12:52:54 EST 2026
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data: ....... done
Processing entries: .......... done
OPNsense repository update completed. 931 packages processed.
Updating SunnyValley repository catalogue...
Fetching meta.conf: . done
Fetching data: .. done
Processing entries: .. done
SunnyValley repository update completed. 15 packages processed.
All repositories are up to date.
Child process pid=88379 terminated abnormally: Segmentation fault
Upgrading package manager from version '2.5.1' to '2.3.1_1'
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
OPNsense is up to date.
Checking integrity... done (0 conflicting)
Your packages are up to date.
Child process pid=99031 terminated abnormally: Segmentation fault
Checking for upgrades (198 candidates): .......... done
Processing candidates (198 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***
You installed the FreeBSD package manager version, which isn't good.
> opnsense-26.1.3 [OPNsense] (Vital flag changed: 'true' -> 'false')
This looks like a weird database bug. Vital flag is never removed.
Try this first...
# opnsense-revert pkg
Cheers,
Franco
Quote from: franco on March 06, 2026, 06:57:40 PMYou installed the FreeBSD package manager version, which isn't good.
> opnsense-26.1.3 [OPNsense] (Vital flag changed: 'true' -> 'false')
This looks like a weird database bug. Vital flag is never removed.
Try this first...
# opnsense-revert pkg
Cheers,
Franco
Did not work.
Had to:
# cd /tmp
# curl "https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/MINT/26.1.3/latest/All/pkg-2.3.1_1.pkg" --output pkg-2.3.1_1.pkg
# pkg install pkg-2.3.1_1.pkg
# opnsense-revert pkg
How do we fix the "Vital" flag now?
# opnsense-revert opnsense
Cheers,
Franco
Quote from: ezhik on March 06, 2026, 06:46:24 PMExactly same thing happened to me. I rebooted after that and it was fine.
EDIT: actually no. check for updates reports a segmentation fault for one of the packages.
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.1.3 (amd64) at Fri Mar 6 12:52:54 EST 2026
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data: ....... done
Processing entries: .......... done
OPNsense repository update completed. 931 packages processed.
Updating SunnyValley repository catalogue...
Fetching meta.conf: . done
Fetching data: .. done
Processing entries: .. done
SunnyValley repository update completed. 15 packages processed.
All repositories are up to date.
Child process pid=88379 terminated abnormally: Segmentation fault
Upgrading package manager from version '2.5.1' to '2.3.1_1'
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
OPNsense is up to date.
Checking integrity... done (0 conflicting)
Your packages are up to date.
Child process pid=99031 terminated abnormally: Segmentation fault
Checking for upgrades (198 candidates): .......... done
Processing candidates (198 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***
Yes, this is the real problem, maybe try to update from console ?
Quote from: franco on March 06, 2026, 06:57:40 PMYou installed the FreeBSD package manager version, which isn't good.
> opnsense-26.1.3 [OPNsense] (Vital flag changed: 'true' -> 'false')
This looks like a weird database bug. Vital flag is never removed.
Try this first...
# opnsense-revert pkg
Cheers,
Franco
There was an error about Segmentation Fault first, red popup.
Quote from: franco on March 06, 2026, 08:03:29 PM# opnsense-revert opnsense
Cheers,
Franco
What is expected here? Doesn't look like it worked as expected either:
root@opnsense:~ # opnsense-revert opnsense
pkg-static: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
pkg-static: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
Fetching meta.conf: 100% 179 B 0.2kB/s 00:01
SunnyValley repository is up to date.
All repositories are up to date.
pkg-static: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
The following packages will be fetched:
New packages to be FETCHED:
opnsense: 26.1.3 (6 MiB: 100.00% of the 6 MiB to download)
Number of packages to be fetched: 1
The process will require 6 MiB more space.
6 MiB to be downloaded.
Fetching opnsense-26.1.3.pkg: 100% 6 MiB 6.1MB/s 00:01
pkg-static: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
opnsense-26.1.3: already unlocked
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
Fetching meta.conf: 100% 179 B 0.2kB/s 00:01
SunnyValley repository is up to date.
All repositories are up to date.
pkg-static: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking integrity... done (0 conflicting)
The following 1 package(s) will be affected (of 0 checked):
Installed packages to be REINSTALLED:
opnsense-26.1.3 [OPNsense]
Number of packages to be reinstalled: 1
[1/1] Reinstalling opnsense-26.1.3...
[1/1] Extracting opnsense-26.1.3: 100%
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh.sh'
Flushing all caches...done.
Writing firmware settings: FreeBSD OPNsense SunnyValley
Writing trust files...done.
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
certctl: No changes to trust store were made.
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring cron...done.
Configuring system logging...done.
=====
Message from opnsense-26.1.3:
--
One step ahead, one step behind it, now you gotta run to get even
pkg-static: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
This update is a bit rough for many, hopefully there is an update to patch things up.
> This update is a bit rough for many, hopefully there is an update to patch things up.
Yes, but we did establish it's rough because the wrong package manager ended up installing which is a manual complication we neither test nor can control.
Cheers,
Franco
Quote from: ezhik on March 06, 2026, 10:41:15 PMOne step ahead, one step behind it, now you gotta run to get even
That's it, too much Van Halen broke the system. :D
Right now, I thought we were in a different conversation. ;)
Cheers,
Franco
Quote from: franco on March 09, 2026, 08:57:28 PM> This update is a bit rough for many, hopefully there is an update to patch things up.
Yes, but we did establish it's rough because the wrong package manager ended up installing which is a manual complication we neither test nor can control.
Cheers,
Franco
What do you mean a manual complication? I did not install it manually. I run vanilla OPNSense.
Quote from: ezhik on March 10, 2026, 01:01:44 AMWhat do you mean a manual complication? I did not install it manually. I run vanilla OPNSense.
OPNsense has extensive check to make sure the FreeBSD repos are disabled.
The fact you ended up with pkg from FreeBSD instead of the one from OPN means that the system was modified on purpose by "something" which in turn pulled packages from FreeBSD. This is why you're seeing the db version mismatch after you reverted pkg to the one in OPN.
The db warning is not catastrophic to my knowledge so you can continue to use the system as is.
More importantly though it may be possible to have there other packages from other repos that may cause trouble in the future.
For now it would be best to post here an audit so we can get a better understanding of where you're at.
Quote from: newsense on March 10, 2026, 01:29:35 AMQuote from: ezhik on March 10, 2026, 01:01:44 AMWhat do you mean a manual complication? I did not install it manually. I run vanilla OPNSense.
OPNsense has extensive check to make sure the FreeBSD repos are disabled.
The fact you ended up with pkg from FreeBSD instead of the one from OPN means that the system was modified on purpose by "something" which in turn pulled packages from FreeBSD. This is why you're seeing the db version mismatch after you reverted pkg to the one in OPN.
The db warning is not catastrophic to my knowledge so you can continue to use the system as is.
More importantly though it may be possible to have there other packages from other repos that may cause trouble in the future.
For now it would be best to post here an audit so we can get a better understanding of where you're at.
It is weird indeed...
Attaching "audit: health"
***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 26.1.3 (amd64) at Mon Mar 9 21:05:23 EDT 2026
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 26.1.3 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 26.1.3 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
SunnyValley (Priority: 7)
>>> Check installed plugins
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
os-ddclient 1.30
os-isc-dhcp 1.0_4
os-qemu-guest-agent 1.3
os-sensei 2.4.1
os-sensei-agent 2.4
os-sensei-updater 1.18
os-sunnyvalley 1.5_2
os-theme-cicada 1.41
os-theme-rebellion 1.9.4
os-theme-tukan 1.31
os-theme-vicuna 1.51
>>> Check locked packages
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
>>> Check for missing package dependencies
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking all packages: .......... done
>>> Check for missing or altered package files
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking all packages:
elasticsearch8-8.11.3: checksum mismatch for /usr/local/lib/elasticsearch/lib/jna-0.0.0.jar
Checking all packages............. done
>>> Check for core packages consistency
Core package "opnsense" at 26.1.3 has 67 dependencies to check.
Checking packages: .................................................................... done
***DONE***
Reinstall elastic with
# pkg install -f elasticsearch8
The rest looks good.
Quote from: newsense on March 10, 2026, 02:25:36 AMReinstall elastic with
# pkg install -f elasticsearch8
The rest looks good.
DONE:
***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 26.1.3 (amd64) at Mon Mar 9 21:46:57 EDT 2026
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 26.1.3 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 26.1.3 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
SunnyValley (Priority: 7)
>>> Check installed plugins
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
os-ddclient 1.30
os-isc-dhcp 1.0_4
os-qemu-guest-agent 1.3
os-sensei 2.4.1
os-sensei-agent 2.4
os-sensei-updater 1.18
os-sunnyvalley 1.5_2
os-theme-cicada 1.41
os-theme-rebellion 1.9.4
os-theme-tukan 1.31
os-theme-vicuna 1.51
>>> Check locked packages
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
>>> Check for missing package dependencies
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking all packages: .......... done
>>> Check for missing or altered package files
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 26.1.3 has 67 dependencies to check.
Checking packages: .................................................................... done
***DONE***
As good as it gets. The warning will go away eventually whenever a newer pkg is ready.
Experiencing the same issue, standard upgrade, have not installed any packages, had to reboot and getting a secgemnt vault error now in the update.
One extra thing I noticed is plugins are all showing as (Orphaned), not sure what this means or if its an issue.
os-acme-client (orphaned) 4.16_1 821KiB 4 OPNsense ACME Client
os-isc-dhcp (orphaned) 1.0_4 280KiB 4 OPNsense ISC DHCPv4/v6 server
os-ntopng (orphaned) 1.3 20.6KiB 4 OPNsense Traffic Analysis and Flow Collection
os-redis (orphaned) 1.1_4 68.8KiB 4 OPNsense Redis DB
os-sensei (orphaned) 2.5 274MiB 4 SunnyValley Zenarmor is an Enterprise SASE & SSE platform (NGFW, SWG, CASB, ZTNA, SD-WAN)
os-sensei-agent (orphaned) 2.5 129MiB 4 SunnyValley Cloud Connectivity Agent for Zenarmor - Enterprise SASE & SSE platform
os-sensei-updater (orphaned) 2.0 3.75KiB 4 SunnyValley OPNsense ZENARMOR Plugin Updater
os-sunnyvalley (orphaned) 1.5_2 2.43KiB 4 OPNsense Vendor Repository for Zenarmor - Enterprise SASE & SSE platform (NGFW, SWG, CASB, ZTNA, SD-WAN)
os-tailscale (orphaned) 1.4 46.9KiB 4 OPNsense VPN mesh securely connecting clients using WireGuard
Would really appreciate any help or advice
Dave
Orphaned means it coundn't load the remote repository for whatever reason. The check for update log would be much more conclusive.
Cheers,
Franco
Quote from: franco on May 22, 2026, 05:48:58 PMOrphaned means it coundn't load the remote repository for whatever reason. The check for update log would be much more conclusive.
Cheers,
Franco
Thanks Franco, I am pretty new to Opnsense so appreciate the help. I will have a look at that log
Hello,
I can reproduce a pkg segmentation fault on OPNsense 26.1.10.
System:
* OPNsense 26.1.10
* pkg 2.6.2_1
* os-sensei 2.6
* os-sensei-agent 2.6
* os-sensei-updater 2.0
* os-sunnyvalley 1.5_2
The firewall itself appears completely stable. Routing, services and package integrity checks are working normally.
The segmentation fault occurs consistently after successful completion of pkg operations:
pkg update
Result:
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.
Child process pid=xxxxx terminated abnormally: Segmentation fault
The same happens with:
* pkg version
* pkg upgrade -n
Additional diagnostics:
pkg check -Ba
→ Checking all packages: 100%
pkg audit -F
→ completed successfully
No package conflicts reported.
Repositories update successfully.
The segmentation fault occurs only after the operation has already completed successfully.
Kernel log contains repeated entries like:
(pid xxxx) (pkg) exited on signal 11 (no core dump - bad address)
Can provide additional diagnostics if required.
Regards,
Michael
There is no need to post in two locations. https://forum.opnsense.org/index.php?topic=52139.msg269023#msg269023