Quick question is OPNsense 18.1.r_11 now the latest version for testing
Want to ensure I have upgraded correctly
Also is will this lock me on the latest 18.1 and install FreedBSD 11.1 on top ?
# opnsense-update -bkgr 18.1.b -n "snapshots\/beta"
# opnsense-update -L
# /usr/local/etc/rc.reboot
Yes, is the answer to all your questions. :)
Thanks
Can't have the OPNsense 18.1.r! still in OPNsense 18.1.b.
Quote from: mais_um on January 08, 2018, 05:42:08 PM
Can't have the OPNsense 18.1.r! still in OPNsense 18.1.b.
He didn't say he was on 18.1.r1 he asked if those commands would update to the latest beta with the 11.1 kernel and it does.
By the end of the week there will be the official 18.1.r1 with images and all.... :)
Cheers,
Franco
LIKE :-)
Quote from: phoenix on January 08, 2018, 06:36:02 PM
Quote from: mais_um on January 08, 2018, 05:42:08 PM
Can't have the OPNsense 18.1.r! still in OPNsense 18.1.b.
He didn't say he was on 18.1.r1 he asked if those commands would update to the latest beta with the 11.1 kernel and it does.
I did't say he said. I see packages on the repository with 18.1r and and I thought i was doing something wrong.
But thanks for let me know everything is right.
Hi guys,
It's not final, but if you have opnsense-devel installed you can upgrade...
# opnsense-update -sn "18.1\/test"
# opnsense-update -ur 18.1.r1 -N OpenSSL
# /usr/local/etc/rc.reboot
The repo looks fine, OpenSSL-only at this point, but latest FreeBSD 11.1 for both i386 and amd64. Images are still being tested and release notes half-written.
If you feel like wanting to go back to the actual 18.1.r1 release (not opnsense-devel) the GUI will automatically take you there now during check + update as there is a new release type setting.
Enjoy,
Franco
Quote from: franco on January 08, 2018, 09:47:45 PM
Hi guys,
It's not final, but if you have opnsense-devel installed you can upgrade...
# opnsense-update -sn "18.1\/test"
# opnsense-update -ur 18.1.r1 -N OpenSSL
# /usr/local/etc/rc.reboot
The repo looks fine, OpenSSL-only at this point, but latest FreeBSD 11.1 for both i386 and amd64. Images are still being tested and release notes half-written.
If you feel like wanting to go back to the actual 18.1.r1 release (not opnsense-devel) the GUI will automatically take you there now during check + update as there is a new release type setting.
Enjoy,
Franco
Hi Franco,
tried the update to r1 however its said the kernel is locked on the b.
Kernel locked at 18.1.b-amd64, skipping.
Base locked at 18.1.b-amd64, skipping.
Quote from: Julien on January 09, 2018, 12:24:35 PMHi Franco,
tried the update to r1 however its said the kernel is locked on the b.
Then just unlock it with:
opnsense-update -U
Quote from: phoenix on January 09, 2018, 12:58:07 PM
Quote from: Julien on January 09, 2018, 12:24:35 PMHi Franco,
tried the update to r1 however its said the kernel is locked on the b.
Then just unlock it with:
opnsense-update -U
Thank you Bill,
its unlocked using U and now its error out
Fetching packages-18.1.r1-OpenSSL-amd64.tar: .............No trusted fingerprint found matching file's certificate
failed
Hi Julien,
You're not allowed to upgrade from 17.7.x yet, only 18.1.x works (opnsense-devel).
And I thought I specifically remember adding update overrides for the locks to avoid bricking the system a while back...
https://github.com/opnsense/update/commit/bd9640b6
Tested this twice today. From the latest version on opnsense-devel everything works as expected. Phew!
In any case, when the update fingerprint for 18.1 hits 17.7.x it'll all work out fine. :D
Cheers,
Franco
Quote from: franco on January 09, 2018, 07:59:55 PM
Hi Julien,
You're not allowed to upgrade from 17.7.x yet, only 18.1.x works (opnsense-devel).
And I thought I specifically remember adding update overrides for the locks to avoid bricking the system a while back...
https://github.com/opnsense/update/commit/bd9640b6
Tested this twice today. From the latest version on opnsense-devel everything works as expected. Phew!
In any case, when the update fingerprint for 18.1 hits 17.7.x it'll all work out fine. :D
Cheers,
Franco
Thank you Franco,
i'll update first to 18.1 and try it again.
i'll post the result while I tried it.
I updated to this build as well using the command line. Now I cannot access the management interface from an external web browser outside my network. Not sure if a SSL configuration changed for the Cipher with the new build or if it is a bug.
Google Chrome: ERR_SSL_PROTOCOL_ERROR
IE: This might be because the site uses outdated or unsafe TLS security settings. If this keeps happening, try contacting the website's owner.
Hi Franco,
upgrade test:
# opnsense-update -U
# opnsense-update -sn "18.1\/test"
# opnsense-update -ur 18.1.r1 -N OpenSSL
# /usr/local/etc/rc.reboot
output on GUI:(no SSL Line)
OPNsense 18.1.r_31-amd64
FreeBSD 11.1-RELEASE-p6
Quote from: franco on January 08, 2018, 09:47:45 PM
...
If you feel like wanting to go back to the actual 18.1.r1 release (not opnsense-devel) the GUI will automatically take you there now during check + update as there is a new release type setting.
...
this is not offered here or the output confuses me..
Release Type = Development (GUI Settings) + Check --> Current Version: 18.1.r1 New Version: 17.7.10 (base + kernel upgrade)
Release Type = Production (GUI Settings) + Check --> Current Version: N/A New Version: 17.7.11 (opsense upgrade)
next test:
# opnsense-code core
# make upgrade
make: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[1]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[1]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[2]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/core/+POST_INSTALL -> /usr/core/work/src/+POST_INSTALL
/usr/core/+PRE_DEINSTALL -> /usr/core/work/src/+PRE_DEINSTALL
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[2]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[2]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[1]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
....SNIP (next looks ok and build)
cheers till
There is something missing...
OPNsense 18.1.r_31-amd64
means you fiddled with core.git, probably
# opnsense-update -M
shows "..../17.1" which is dangerous...
# cd /usr/core
# make upgrade CORE_ABI=18.1
# pkg upgrade -f
Cheers,
Franco
Quote from: franco on January 10, 2018, 10:42:43 PM
...means you fiddled with core.git, probably...
yes, the mix with "opnsense-code core" is probably not compatible. but ok that brought me back. Many thanks!
cheers till
Hey Till,
Glad to hear!
master is a bit of a twilight zone right now, but stable/17.7 and stable/18.1 are safe to use as always... :)
Cheers,
Franco