OPNsense Forum
Archive => 22.1 Legacy Series => Topic started by: PotatoCarl on April 08, 2022, 11:55:23 am
-
Hi
the update today from 22.1.4 -> 22.1.5 removes all Host-aliases in Unbound!
How can I reinstall them?
How can I unencrypt the cloud saved version?
Thank you.
-
Short version: it doesn't. We are looking into the issue. For now you can:
# opnsense-revert -r 22.1.4 opnsense
Cheers,
Franco
-
Ok.
2nd time in a row that an update has problems.
Just have sent an error report additionally as it seems there is more than this problem.
Instead of going back to 1.5 I'll try to ride this out and see if it will work (spent some hours getting the aliases back into the system)
-
I've had to revert after finding most of my services not starting, the console would never finish loading so no direct access even the serial console, the GUI was running and I was able to start most services but Unbound just refused no matter what.
Fortunately I was still able to SSH into the firewall, added 8.8.8.8 to resolv.conf and reverted to 22.1.4_1 - all is well again
-
Hi
the update today from 22.1.4 -> 22.1.5 removes all Host-aliases in Unbound!
How can I reinstall them?
How can I unencrypt the cloud saved version?
Thank you.
Prior to the update did you take a local backup of the configuration?, if so then you should be able to recover the unbound configuration.
-
I'll say it again: configuration isn't gone, but unusable on 22.1.5 in the current state. Revert to 22.1.4, it works as confirmed by others who also gave their configuration in support. We do appreciate this a lot and I see none of it here.
This year in particular we seem to have nobody running development versions who could report on these issues that have been there for weeks up front. It's unfortunate but it's our reality as much as everyone else's.
We decided some major versions ago that we would bundle changes in development systems for at least one release cycle or more so consumers of the development version could report issues if they arise.
The PPPoE IPv6 issue in 22.1.4 was on development version, the Unbound migration was there too. Nobody saw it and we do have A LOT of active installations out in the wild...
Cheers,
Franco
-
Dear all, may I was lucky.
My Alias are still there, updated today from 22.1.4_1 to 22.1.5
br
-
My aliases are available, however they are not apparent on the unbound page which has a changed layout.
They are also in the json file produced prior to the upgrade, so all is not (unless you have no local backups)
-
This year in particular we seem to have nobody running development versions who could report on these issues that have been there for weeks up front. It's unfortunate but it's our reality as much as everyone else's.
We decided some major versions ago that we would bundle changes in development systems for at least one release cycle or more so consumers of the development version could report issues if they arise.
The PPPoE IPv6 issue in 22.1.4 was on development version, the Unbound migration was there too. Nobody saw it and we do have A LOT of active installations out in the wild...
Cheers,
Franco
I am not really aware of dev. versions and I think it is pretty intrasparent also to find them upfront especially for new users because it seems not to be write anywhere really.
The dev. versions are just available for already installed versions of Opnsense, right ?
There are no dev. iso images upfront or daily snapshots like pfsense did ?
Form my understanding and based on your strategy the current version was always considered as community edition which may could make issues due it's beeing ....and for more critical setups the business edition ?
-
System -> Firmware -> Settings -> Type -> Development
;-)
-
An open secret. ;)
Much of this is sticky information on the latest release forum since 2016: https://forum.opnsense.org/index.php?topic=2084.0
I'll make sure to update it for 2022 and make things more explicit. But I accept that people run development, community or business for their very own reasons. All we have to do is offer all of them to choose from.
Cheers,
Franco
-
Short version: it doesn't. We are looking into the issue. For now you can:
# opnsense-revert -r 22.1.4 opnsense
Before I did a revert because of this issue I took a moment to play with the 'new' GUI.
I noticed that using the "Domain Form" in 22.1.5 does have the 'old' help text "To use a nondefault port for communication, append an '@' with the port number." but fails to validate the input (No valid IPv4/IPv6 address).
So something like "127.0.0.1@53530" couldn't be configured/validated in the new form.
-
Yes, this is https://github.com/opnsense/core/commit/ff11cde38e8 and we will be issuing 22.1.6 this week to address the Unbound issues in 22.1.5.
Cheers,
Franco
-
...and we will be issuing 22.1.6 this week to address the Unbound issues in 22.1.5.
Woeha! Missed that fix, I need to learn using "is:issue is:closed unbound" @ GitHub. Didn't realize you're even squashing bugs at weekends :-)
-
i had done opnsense-revert -r 22.1.4 opnsense, then to 22.13, then to 22.1.2, tried different settings backup, there is no case. unboun DNS is not starting.
I had to change the dhcp DNS server to google's ones, because the router IP is not working since updated to 22.1.5
-
I wonder if the unbound alias dissapearance is the same as what I saw when I was testing a dev version back in feb. Same issue? Or just the same symptoms?
https://forum.opnsense.org/index.php?topic=26700.msg132051#msg132051
-
Well, same component, different issue.
Cheers,
Franco
-
Hi, I was on 22.1.5 and aliases were visible. After upgrade to 22.1.6 (and restart) they are gone. Still present in XML in unboundplus section and DNS resolution is ok.
-
Check configuration history, but in general this doesn't match how the migration works... it works from 22.1.4 to 22.1.5 and 22.1.6 changes nothing about that fact.
Cheers,
Franco
-
2.1.6 - downloaded running config and records are there
Aliases page - No results found!
I think it is purely GUI bug.
If I call this API /api/unbound/settings/searchHostAlias/ aliases are returned ok in json.
But when they are called by page, response is {"rows":[],"rowCount":0,"total":0,"current":1}
This is what I see in browser debug-network. Private mode did not helped.
-
Maybe I found error.
When I compare request to /api/unbound/settings/searchHostOverride/ and subsequent /api/unbound/settings/searchHostAlias/ only difference is that first has this request payload current=1&rowCount=7&searchPhrase= and second current=1&rowCount=7&searchPhrase=&host=__not_found__
If I remove &host=__not_found__ and run request, data are returned back successfully.
-
Ah, I think I found new logic - but dont know if it is logic or bug :))
I have to select Host on top to see alias in bottom?
That's terribly counter intuitive - when I want to find alias, I need to click on 50 hosts if some of them have aliases to be displayed.
When nothing is selected on top, all aliases should be displayed.
Even when selecting, there is something wrong. When selected, 2 requests are generated in browser, first is immediately canceled and second pass.
-
Can you try a different browser to see if it's not a cache issue?
Cheers,
Franco
-
Tried MS Edge and Firefox - same.
Updated 5 Opnsense firewalls and all behave same :/
-
When page is loaded
1) first request with host=__not_found__ is send to server
2) second request with host=GUID of first host is selected in hosts table by default
That's why it is filtering aliases in alias table and all aliases cant be displayed.
-
https://forum.opnsense.org/index.php?topic=28161.0
https://forum.opnsense.org/index.php?topic=27861.0
should it be fixed with 22.1.6?
or is it maybe a problem that the users didn't realize and have to migrate like stated in https://github.com/opnsense/core/commit/ff11cde38e8 ?