OPNsense Forum

Archive => 21.7 Legacy Series => Topic started by: jimjohn on December 12, 2021, 12:29:42 pm

Title: Update Error
Post by: jimjohn on December 12, 2021, 12:29:42 pm

Hi, got an error when updating my OPNsense. It seems stuck somewhere between 21.7.4 and 21.7.6. I suppose it happened due to an aborted update.

When updating, it tries to update the "base" and "kernel" packages, everything else seems to be the newest version available. It declares "no signature found" while / after fetching the packages and does not proceed with updating as a consequence of that. What can I do?

Versions:

Code: [Select]

base 21.7.4
kernel 21.7.4
Update output:

Code: [Select]

***GOT REQUEST TO UPDATE***
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (1 candidates): . done
Processing candidates (1 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
/var/cache/pkg/wpa_supplicant-2.9_11~d6fe3dca64.txz
/var/cache/pkg/unbound-1.13.2~c2781a1635.txz
/var/cache/pkg/wpa_supplicant-2.9_11.txz
/var/cache/pkg/syslog-ng-3.34.1.txz
/var/cache/pkg/unbound-1.13.2.txz
/var/cache/pkg/syslog-ng-3.34.1~f2a9b4d4db.txz
/var/cache/pkg/strongswan-5.9.4~3776e982e1.txz
/var/cache/pkg/squid-4.15~6ec79a5499.txz
/var/cache/pkg/strongswan-5.9.4.txz
/var/cache/pkg/squid-4.15.txz
/var/cache/pkg/python38-3.8.12_1~aa001528c2.txz
/var/cache/pkg/python38-3.8.12_1.txz
The cleanup will free 23 MiB
Deleting files: .......... done
All done
Nothing to do.
Starting web GUI...done.
Generating RRD graphs...done.
Fetching base-21.7.5-amd64.txz: ... done
Fetching kernel-21.7.5-amd64.txz: ............................................................ failed, no signature found
***DONE***
Health output:

Code: [Select]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 21.7.6 (amd64/OpenSSL) at Sun Dec 12 12:06:10 CET 2021
>>> Check installed kernel version
Version 21.7.4 is incorrect, expected: 21.7.5
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 21.7.4 is incorrect, expected: 21.7.5
>>> Check for missing or altered base files
No problems detected.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 66 dependencies to check.
Checking packages: .................................................................... done
***DONE***

Title: Re: Update Error
Post by: franco on December 12, 2021, 01:50:01 pm

Try to prefer IPv4 (System: Settings: General) and/or switch the mirror to let this complete correctly.


Cheers,
Franco

Title: Re: Update Error
Post by: jimjohn on December 12, 2021, 04:09:04 pm

Hi Franco, IPv6 is globally deactivated. Changing the mirror and / or the flavor (LibreSSL / OpenSSL) does not help unfortunately.

Title: Re: Update Error
Post by: franco on December 12, 2021, 08:46:56 pm

It's very likely a local issue so let's take a closer look:

# fetch -v https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/kernel-21.7.5-amd64.txz.sig

Can you post the output?


Cheers,
Franco

Title: Re: Update Error
Post by: jimjohn on December 12, 2021, 09:29:50 pm

Quote from: franco on December 12, 2021, 08:46:56 pm

It's very likely a local issue so let's take a closer look:

# fetch -v https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/kernel-21.7.5-amd64.txz.sig

Can you post the output?


Cheers,
Franco

Code: [Select]

root@OPNsense:~ # fetch -v https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/kernel-21.7.5-amd64.txz.sig
resolving server address: pkg.opnsense.org:443
SSL options: 82004854
Peer verification enabled
Using CA cert file: /usr/local/etc/ssl/cert.pem
Verify hostname
TLSv1.2 connection established using ECDHE-RSA-CHACHA20-POLY1305
Certificate subject: /CN=*.opnsense.org
Certificate issuer: /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
requesting https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/kernel-21.7.5-amd64.txz.sig
remote size / mtime: 1332 / 1636618308
kernel-21.7.5-amd64.txz.sig                           1332  B 3326 kBps    00s

Title: Re: Update Error
Post by: jimjohn on December 12, 2021, 09:56:13 pm

OK, so hitting "12" in the SSH menu (update from console) made it somehow with the still changed mirror. I have no idea why this happened.

Now I got a 21.7.5 base and kernel although I am on 21.7.6. Is this expected?

Code: [Select]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 21.7.6 (amd64/OpenSSL) at Sun Dec 12 21:49:21 CET 2021
>>> Check installed kernel version
Version 21.7.5 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 21.7.5 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 66 dependencies to check.
Checking packages: ...............................................
php74-sqlite3-7.4.25 has no upstream equivalent
Checking packages: .
php74-xml-7.4.25 has no upstream equivalent
Checking packages: .
php74-zlib-7.4.25 has no upstream equivalent
Checking packages: .
pkg-1.16.3 has no upstream equivalent
Checking packages: .
py38-Jinja2-3.0.1 has no upstream equivalent
Checking packages: .
py38-dnspython2-2.1.0 has no upstream equivalent
Checking packages: .
py38-netaddr-0.8.0 has no upstream equivalent
Checking packages: .
py38-requests-2.25.1 has no upstream equivalent
Checking packages: .
py38-sqlite3-3.8.12_7 has no upstream equivalent
Checking packages: .
py38-ujson-4.0.2 has no upstream equivalent
Checking packages: .
radvd-2.19_1 has no upstream equivalent
Checking packages: .
rrdtool-1.7.2_4 has no upstream equivalent
Checking packages: .
samplicator-1.3.8.r1_1 has no upstream equivalent
Checking packages: .
squid-4.15 has no upstream equivalent
Checking packages: .
strongswan-5.9.4 has no upstream equivalent
Checking packages: .
sudo-1.9.8p2 has no upstream equivalent
Checking packages: .
suricata-6.0.4 has no upstream equivalent
Checking packages: .
syslog-ng-3.34.1 has no upstream equivalent
Checking packages: .
syslogd-12.1 has no upstream equivalent
Checking packages: .
unbound-1.13.2 has no upstream equivalent
Checking packages: .
wpa_supplicant-2.9_11 has no upstream equivalent
Checking packages: .
zip-3.0_1 has no upstream equivalent
***DONE***

Title: Re: Update Error
Post by: almodovaris on December 13, 2021, 06:43:55 am

Yeah, 21.7.6 was a smaller update, which did not include its own kernel.

Title: Re: Update Error
Post by: franco on December 13, 2021, 07:06:15 am

Correct, latest kernel is 21.7.5 and next one will be 21.7.7.


Cheers,
Franco

Title: Re: Update Error
Post by: jimjohn on December 13, 2021, 07:48:04 am

OK, then this is resolved. We will never know how and why.  :D

Title: Re: Update Error
Post by: jimjohn on December 26, 2021, 01:13:23 pm

On another OPNsense I am updating now I get another error when updating ... fetching the package "base-21.7.7-amd64.txz" just takes forever. Speedtest on OPNsense is showing the same speed than the router, so there should not be a problem with the connection speed. What could that be?

Same behavior when SSH'ing into the menu and updating with "12".

Code: [Select]

Fetching base-21.7.7-amd64.txz: ...