OPNsense Forum

Archive => 18.1 Legacy Series => Topic started by: nivek1612 on January 05, 2018, 08:50:06 pm

Title: Testing the latest versions
Post by: nivek1612 on January 05, 2018, 08:50:06 pm
Quick question is OPNsense 18.1.r_11 now the latest version for testing

Want to ensure I have upgraded correctly

Also is will this lock me on the latest 18.1 and install FreedBSD 11.1 on top ?

# opnsense-update -bkgr 18.1.b -n "snapshots\/beta"
# opnsense-update -L
# /usr/local/etc/rc.reboot
Title: Re: Testing the latest versions
Post by: phoenix on January 05, 2018, 08:56:22 pm
Yes, is the answer to all your questions. :)
Title: Re: Testing the latest versions
Post by: nivek1612 on January 05, 2018, 09:00:27 pm
Thanks

Title: Re: Testing the latest versions
Post by: mais_um on January 08, 2018, 05:42:08 pm
Can't have the OPNsense 18.1.r! still in OPNsense 18.1.b.
Title: Re: Testing the latest versions
Post by: phoenix on January 08, 2018, 06:36:02 pm
Can't have the OPNsense 18.1.r! still in OPNsense 18.1.b.
He didn't say he was on 18.1.r1 he asked if those commands would update to the latest beta with the 11.1 kernel and it does.
Title: Re: Testing the latest versions
Post by: franco on January 08, 2018, 07:04:07 pm
By the end of the week there will be the official 18.1.r1 with images and all.... :)


Cheers,
Franco
Title: Re: Testing the latest versions
Post by: nivek1612 on January 08, 2018, 07:07:08 pm
LIKE :-)
Title: Re: Testing the latest versions
Post by: mais_um on January 08, 2018, 08:01:08 pm
Can't have the OPNsense 18.1.r! still in OPNsense 18.1.b.
He didn't say he was on 18.1.r1 he asked if those commands would update to the latest beta with the 11.1 kernel and it does.
I did't say he said. I see packages on the repository with 18.1r and and I thought i was doing something wrong.

But thanks for let me know everything is right.
Title: Re: Testing the latest versions
Post by: franco on January 08, 2018, 09:47:45 pm
Hi guys,

It's not final, but if you have opnsense-devel installed you can upgrade...

# opnsense-update -sn "18.1\/test"
# opnsense-update -ur 18.1.r1 -N OpenSSL
# /usr/local/etc/rc.reboot

The repo looks fine, OpenSSL-only at this point, but latest FreeBSD 11.1 for both i386 and amd64. Images are still being tested and release notes half-written.

If you feel like wanting to go back to the actual 18.1.r1 release (not opnsense-devel) the GUI will automatically take you there now during check + update as there is a new release type setting.


Enjoy,
Franco
Title: Re: Testing the latest versions
Post by: Julien on January 09, 2018, 12:24:35 pm
Hi guys,

It's not final, but if you have opnsense-devel installed you can upgrade...

# opnsense-update -sn "18.1\/test"
# opnsense-update -ur 18.1.r1 -N OpenSSL
# /usr/local/etc/rc.reboot

The repo looks fine, OpenSSL-only at this point, but latest FreeBSD 11.1 for both i386 and amd64. Images are still being tested and release notes half-written.

If you feel like wanting to go back to the actual 18.1.r1 release (not opnsense-devel) the GUI will automatically take you there now during check + update as there is a new release type setting.


Enjoy,
Franco
Hi Franco,
tried the update to r1 however its said the kernel is locked on the b.

Code: [Select]
Kernel locked at 18.1.b-amd64, skipping.
Base locked at 18.1.b-amd64, skipping.
Title: Re: Testing the latest versions
Post by: phoenix on January 09, 2018, 12:58:07 pm
Hi Franco,
tried the update to r1 however its said the kernel is locked on the b.

Then just unlock it with:

Code: [Select]
opnsense-update -U
Title: Re: Testing the latest versions
Post by: Julien on January 09, 2018, 04:52:54 pm
Hi Franco,
tried the update to r1 however its said the kernel is locked on the b.

Then just unlock it with:

Code: [Select]
opnsense-update -U
Thank you Bill,
its unlocked using U and now its error out
Code: [Select]
Fetching packages-18.1.r1-OpenSSL-amd64.tar: .............No trusted fingerprint found matching file's                                   certificate
 failed
Title: Re: Testing the latest versions
Post by: franco on January 09, 2018, 07:59:55 pm
Hi Julien,

You're not allowed to upgrade from 17.7.x yet, only 18.1.x works (opnsense-devel).

And I thought I specifically remember adding update overrides for the locks to avoid bricking the system a while back...

https://github.com/opnsense/update/commit/bd9640b6

Tested this twice today. From the latest version on opnsense-devel everything works as expected. Phew!

In any case, when the update fingerprint for 18.1 hits 17.7.x it'll all work out fine. :D


Cheers,
Franco
Title: Re: Testing the latest versions
Post by: Julien on January 09, 2018, 11:10:23 pm
Hi Julien,

You're not allowed to upgrade from 17.7.x yet, only 18.1.x works (opnsense-devel).

And I thought I specifically remember adding update overrides for the locks to avoid bricking the system a while back...

https://github.com/opnsense/update/commit/bd9640b6

Tested this twice today. From the latest version on opnsense-devel everything works as expected. Phew!

In any case, when the update fingerprint for 18.1 hits 17.7.x it'll all work out fine. :D


Cheers,
Franco
Thank you Franco,
i'll update first to 18.1 and try it again.
i'll post the result while I tried it.
Title: Re: Testing the latest versions
Post by: DanMc85 on January 10, 2018, 05:17:21 pm
I updated to this build as well using the command line. Now I cannot access the management interface from an external web browser outside my network. Not sure if a SSL configuration changed for the Cipher with the new build or if it is a bug.

Google Chrome: ERR_SSL_PROTOCOL_ERROR

IE: This might be because the site uses outdated or unsafe TLS security settings. If this keeps happening, try contacting the website’s owner.
Title: Re: Testing the latest versions
Post by: tillsense on January 10, 2018, 07:19:56 pm
Hi Franco,

upgrade test:
Code: [Select]
# opnsense-update -U
# opnsense-update -sn "18.1\/test"
# opnsense-update -ur 18.1.r1 -N OpenSSL
# /usr/local/etc/rc.reboot

output on GUI:(no SSL Line)
Code: [Select]
OPNsense 18.1.r_31-amd64
FreeBSD 11.1-RELEASE-p6

...
If you feel like wanting to go back to the actual 18.1.r1 release (not opnsense-devel) the GUI will automatically take you there now during check + update as there is a new release type setting.
...
this is not offered here or the output confuses me..

Release Type = Development (GUI Settings) + Check --> Current Version: 18.1.r1 New Version: 17.7.10 (base + kernel upgrade)
Release Type = Production  (GUI Settings) + Check --> Current Version: N/A     New Version: 17.7.11 (opsense upgrade)

next test:
Code: [Select]
# opnsense-code core
# make upgrade
make: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[1]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[1]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[2]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/core/+POST_INSTALL -> /usr/core/work/src/+POST_INSTALL
/usr/core/+PRE_DEINSTALL -> /usr/core/work/src/+PRE_DEINSTALL
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[2]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[2]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
/usr/local/bin/openssl: Shared object has no run-time symbol table
make[1]: "/usr/core/Makefile" line 50: warning: "if [ -f /usr/local/bin/openssl ]; then /usr/local/bin/openssl version; fi" returned non-zero status
....SNIP (next looks ok and build)


cheers till
Title: Re: Testing the latest versions
Post by: franco on January 10, 2018, 10:42:43 pm
There is something missing...

OPNsense 18.1.r_31-amd64

means you fiddled with core.git, probably

# opnsense-update -M

shows "..../17.1" which is dangerous...

# cd /usr/core
# make upgrade CORE_ABI=18.1
# pkg upgrade -f


Cheers,
Franco

Title: Re: Testing the latest versions
Post by: tillsense on January 12, 2018, 07:02:58 pm
...means you fiddled with core.git, probably...

yes, the mix with "opnsense-code core" is probably not compatible. but ok that brought me back. Many thanks!

cheers till
Title: Re: Testing the latest versions
Post by: franco on January 12, 2018, 08:02:53 pm
Hey Till,

Glad to hear!

master is a bit of a twilight zone right now, but stable/17.7 and stable/18.1 are safe to use as always... :)


Cheers,
Franco