Messages

Could some one help to get the control scripts and boot time running working, because I am not yet that familiar with the inner workings of OPNsense.

I'm late to this thread but are you referring to this?

https://docs.opnsense.org/development/backend/autorun.html

I'm trying to do the same thing which worked successfully with a much older firmware (at least 2yrs old) I was running with nothing to setup other than install the uPnP plugin.  I have updated the current 22.7.10 firmware on a brand new install and downloads never start on the torrent end.  It's just stuck on downloading metadata for qBittorrent.

Not sure if it was the torrent that was causing issues but I simplified everything and downloaded a new torrent and it's working fine now.

I tried updating from latest 20.1.x to 20.7.0 last night to a remote site and got a call this morning that Internet is not up and running.  I did the same with my setup at a few days before to 20.7.0 -> 20.7.2 and figure it was safe before doing the remote site.

Now I find this thread after I decided to update a brand new image and just restore the config.  After a brand new image of 20.7.0, I did upgrade from console and got stuck

Code Select Expand

[43/44] Extracting os-dyndns-1.23: .......... done
Stopping configd...done
Starting configd.
Reloading plugin configuration
Configuring system logging...done.


So I did a CTRL-C and it brought me back to console.  So I try to upgrade again from shell and got this:

Code Select Expand

process with pid 2754 still holds the lock
process with pid 2754 still holds the lock
process with pid 2754 still holds the lock
process with pid 2754 still holds the lock
process with pid 2754 still holds the lock
process with pid 2754 still holds the lock
pkg-static: Cannot get an advisory lock on a database, it is locked by another process
A firmware update is currently in progress.


After it brings me back to console I try the the shell trick:

Code Select Expand

Enter an option: 8

root@OPNsense:~ # service syslog-ng restart
Stopping syslog_ng.
Waiting for PIDS: 35974.
Starting syslog_ng.
[44/44] Upgrading opnsense from 20.7 to 20.7.3...
root@OPNsense:~ # [44/44] Extracting opnsense-20.7.3: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
Keep version OPNsense\Backup\NextcloudSettings (1.0.0)
Keep version OPNsense\CaptivePortal\CaptivePortal (1.0.0)
Keep version OPNsense\Cron\Cron (1.0.1)
Keep version OPNsense\Diagnostics\Netflow (1.0.1)
Keep version OPNsense\Firewall\Alias (1.0.0)
Keep version OPNsense\IDS\IDS (1.0.5)
Keep version OPNsense\IPsec\IPsec (0.0.0)
Migrated OPNsense\Interfaces\VxLan from 0.0.0 to 1.0.1
Migrated OPNsense\Interfaces\Loopback from 0.0.0 to 1.0.0
Keep version OPNsense\Monit\Monit (1.0.8)
Keep version OPNsense\OpenVPN\Export (0.0.1)
Keep version OPNsense\Proxy\Proxy (1.0.3)
Migrated OPNsense\Routes\Route from 0.0.0 to 1.0.0
Keep version OPNsense\Syslog\Syslog (1.0.0)
Keep version OPNsense\TrafficShaper\TrafficShaper (1.0.3)
Keep version OPNsense\Unboundplus\Miscellaneous (0.0.2)
Keep version OPNsense\Unboundplus\Dnsbl (0.0.1)
Writing firmware setting...done.
Writing trust files...done.
Configuring login behaviour...done.
Configuring system logging...done.
=====
Message from py37-urllib3-1.25.10,1:

--
Since version 1.25 HTTPS connections are now verified by default which is done
via "cert_reqs = 'CERT_REQUIRED'".  While certificate verification can be
disabled via "cert_reqs = 'CERT_NONE'", it's highly recommended to leave it on.

Various consumers of net/py-urllib3 already have implemented routines that
either explicitly enable or disable HTTPS certificate verification (e.g. via
configuration settings, CLI arguments, etc.).

Yet it may happen that there are still some consumers which don't explicitly
enable/disable certificate verification for HTTPS connections which could then
lead to errors (as is often the case with self-signed certificates).

In case of an error one should try first to temporarily disable certificate
verification of the problematic urllib3 consumer to see if that approach will
remedy the issue.
=====
Message from opnsense-20.7.3:

--
The lion sleeps tonight

root@OPNsense:~ # exit


So it looks like it continues and finishes.  It does say 20.7.3 afterwards but no indication that it is going to boot or needs a reboot.  So I try the upgrade again and now it appears to be starting over but this time it completes without actually doing anything and proceeds to reboot

Code Select Expand

Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (60 candidates): .......... done
Processing candidates (60 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
Checking integrity... done (0 conflicting)
Nothing to do.
The following package files will be deleted:
        /var/cache/pkg/pkg-1.15.6-5457c2d69b.txz
        /var/cache/pkg/unbound-1.11.0.txz
        /var/cache/pkg/pkg-1.15.6.txz
        /var/cache/pkg/unbound-1.11.0~ab09f69c09.txz
        /var/cache/pkg/syslog-ng327-3.27.1_2~1ad11b98f9.txz
        /var/cache/pkg/squid-4.13~21f2feca67.txz
        /var/cache/pkg/syslog-ng327-3.27.1_2.txz
        /var/cache/pkg/rrdtool-1.7.2_4.txz
        /var/cache/pkg/squid-4.13.txz
        /var/cache/pkg/sqlite3-3.33.0,1~db80df7f62.txz
        /var/cache/pkg/rate-0.9_2~be0f156945.txz
        /var/cache/pkg/sqlite3-3.33.0,1.txz
        /var/cache/pkg/rrdtool-1.7.2_4~74cbbb5144.txz
        /var/cache/pkg/py37-urllib3-1.25.10,1.txz
        /var/cache/pkg/rate-0.9_2.txz
        /var/cache/pkg/python37-3.7.9~0349942bbf.txz
        /var/cache/pkg/python37-3.7.9.txz
        /var/cache/pkg/py37-urllib3-1.25.10,1~375e46b391.txz
        /var/cache/pkg/py37-sqlite3-3.7.9_7~897bcd2ba6.txz
        /var/cache/pkg/py37-six-1.15.0~935d1cec33.txz
        /var/cache/pkg/py37-sqlite3-3.7.9_7.txz
        /var/cache/pkg/py37-cffi-1.14.3.txz
        /var/cache/pkg/py37-six-1.15.0.txz
        /var/cache/pkg/py37-cffi-1.14.3~07babc08bf.txz
        /var/cache/pkg/php73-zlib-7.3.22~e3f8120e05.txz
        /var/cache/pkg/php73-sqlite3-7.3.22.txz
        /var/cache/pkg/php73-zlib-7.3.22.txz
        /var/cache/pkg/php73-xml-7.3.22~28041d9d2a.txz
        /var/cache/pkg/php73-xml-7.3.22.txz
        /var/cache/pkg/php73-sqlite3-7.3.22~cb38bfeb75.txz
        /var/cache/pkg/php73-sockets-7.3.22~cf97767d45.txz
        /var/cache/pkg/php73-pdo-7.3.22~d885ed2567.txz
        /var/cache/pkg/php73-sockets-7.3.22.txz
        /var/cache/pkg/php73-simplexml-7.3.22~8090f07f1e.txz
        /var/cache/pkg/php73-simplexml-7.3.22.txz
        /var/cache/pkg/php73-session-7.3.22~13f2115548.txz
        /var/cache/pkg/php73-session-7.3.22.txz
        /var/cache/pkg/php73-openssl-7.3.22.txz
        /var/cache/pkg/php73-pdo-7.3.22.txz
        /var/cache/pkg/php73-openssl-7.3.22~23222d476a.txz
        /var/cache/pkg/php73-dom-7.3.22~1673443386.txz
        /var/cache/pkg/php73-ldap-7.3.22~bc625fd252.txz
        /var/cache/pkg/php73-ldap-7.3.22.txz
        /var/cache/pkg/php73-json-7.3.22~85776048d5.txz
        /var/cache/pkg/php73-json-7.3.22.txz
        /var/cache/pkg/php73-hash-7.3.22~54181f600c.txz
        /var/cache/pkg/php73-hash-7.3.22.txz
        /var/cache/pkg/php73-gettext-7.3.22~e9f5f6bdb2.txz
        /var/cache/pkg/php73-gettext-7.3.22.txz
        /var/cache/pkg/php73-filter-7.3.22~ebe1ce9271.txz
        /var/cache/pkg/php73-filter-7.3.22.txz
        /var/cache/pkg/php73-dom-7.3.22.txz
        /var/cache/pkg/php73-curl-7.3.22~36dc4ffb6b.txz
        /var/cache/pkg/php73-ctype-7.3.22~b9f77945fa.txz
        /var/cache/pkg/php73-curl-7.3.22.txz
        /var/cache/pkg/php73-7.3.22~6820b9e298.txz
        /var/cache/pkg/php73-ctype-7.3.22.txz
        /var/cache/pkg/php73-7.3.22.txz
        /var/cache/pkg/perl5-5.32.0~4342008c40.txz
        /var/cache/pkg/perl5-5.32.0.txz
        /var/cache/pkg/os-dyndns-1.23~620a60b0bf.txz
        /var/cache/pkg/os-dyndns-1.23.txz
        /var/cache/pkg/opnsense-update-20.7.3~5c594cd5e9.txz
        /var/cache/pkg/opnsense-20.7.3~974da3e0a0.txz
        /var/cache/pkg/opnsense-update-20.7.3.txz
        /var/cache/pkg/opnsense-20.7.3.txz
        /var/cache/pkg/openldap-sasl-client-2.4.51~bc9d6fb838.txz
        /var/cache/pkg/ntp-4.2.8p15~670cafefb1.txz
        /var/cache/pkg/openldap-sasl-client-2.4.51.txz
        /var/cache/pkg/nss-3.57~af91bd1182.txz
        /var/cache/pkg/ntp-4.2.8p15.txz
        /var/cache/pkg/nss-3.57.txz
        /var/cache/pkg/nspr-4.29~eda6aa6ac3.txz
        /var/cache/pkg/nspr-4.29.txz
        /var/cache/pkg/mpd5-5.9~760378618a.txz
        /var/cache/pkg/mpd5-5.9.txz
        /var/cache/pkg/libffi-3.3_1~49b953d00b.txz
        /var/cache/pkg/libffi-3.3_1.txz
        /var/cache/pkg/json-c-0.15~0283a80580.txz
        /var/cache/pkg/json-c-0.15.txz
        /var/cache/pkg/isc-dhcp44-server-4.4.2_1~1d10fa7f54.txz
        /var/cache/pkg/isc-dhcp44-server-4.4.2_1.txz
        /var/cache/pkg/isc-dhcp44-relay-4.4.2_1~adade75c88.txz
        /var/cache/pkg/gettext-runtime-0.21~28fefd2893.txz
        /var/cache/pkg/isc-dhcp44-relay-4.4.2_1.txz
        /var/cache/pkg/curl-7.72.0~e401be138c.txz
        /var/cache/pkg/gettext-runtime-0.21.txz
        /var/cache/pkg/curl-7.72.0.txz
        /var/cache/pkg/ca_root_nss-3.57~df7fc72e32.txz
        /var/cache/pkg/ca_root_nss-3.57.txz
The cleanup will free 57 MiB
Deleting files: .......... done
All done
Starting web GUI...done.
Generating RRD graphs...done.
Fetching base-20.7.3-amd64.txz: ....................................................... done
Fetching kernel-20.7.3-amd64.txz: .................. done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-20.7.3-amd64.txz... done
Installing base-20.7.3-amd64.txz... done
Please reboot.
>>> Invoking stop script 'beep'
>>> Invoking stop script 'freebsd'
>>> Invoking stop script 'backup'
>>> Invoking backup script 'captiveportal'
>>> Invoking backup script 'dhcpleases'



After I get back in console and try the upgrade again, it says nothing to do and brings me back.  So I think I'll hold off on 20.7.3 on my own firewall and wait for the next upgrade.

Not to threadcrap but I used this guide that got me going with step by step pictures and using OPNsense as the edge device rather than port forwarding as OP example shows.

https://www.thomas-krenn.com/en/wiki/OPNsense_WireGuard_VPN_for_Road_Warrior_configuration

I guess I'll have to retire those devices.  Just ordered another XTM 5 that seems to work fine at home.  No AES-NI but at least 64-bit support and 4x more memory and faster processor.

So I've been trying to upgrade 19.7 production (fresh install) to 19.7.2 without success on a Watchguard x550e.  Yes I know specs are low but it still meets the minimum requirements of 512MB of RAM.  I'm using the 32-bit nanobsd verified checksum to be matching.

Code Select Expand

  0) Logout                              7) Ping host
  1) Assign interfaces                   8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Update from console
  6) Reboot system                      13) Restore a backup

Enter an option: 12

Fetching change log information, please wait... done

This will automatically fetch all available updates, apply them,
and reboot if necessary.

This update requires a reboot.

Proceed with this action? [y/N]: y

Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating database digests format: .......... done
Checking for upgrades (100 candidates): .......... done
Processing candidates (100 candidates): .... done
The following 51 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
        unbound: 1.9.2 -> 1.9.2_1
        syslog-ng: 3.21.1 -> 3.21.1_1
        squid: 4.7_2 -> 4.8_1
        sqlite3: 3.28.0 -> 3.29.0
        python37: 3.7.3_1 -> 3.7.4
        py37-sqlite3: 3.7.3_7 -> 3.7.4_7
        php72-zlib: 7.2.19 -> 7.2.20
        php72-xml: 7.2.19 -> 7.2.20
        php72-sqlite3: 7.2.19 -> 7.2.20
        php72-sockets: 7.2.19 -> 7.2.20
        php72-simplexml: 7.2.19 -> 7.2.20
        php72-session: 7.2.19 -> 7.2.20
        php72-pdo: 7.2.19 -> 7.2.20
        php72-openssl: 7.2.19 -> 7.2.20
        php72-ldap: 7.2.19 -> 7.2.20
        php72-json: 7.2.19 -> 7.2.20
        php72-hash: 7.2.19 -> 7.2.20
        php72-gettext: 7.2.19 -> 7.2.20
        php72-filter: 7.2.19 -> 7.2.20
        php72-dom: 7.2.19 -> 7.2.20
        php72-curl: 7.2.19 -> 7.2.20
        php72-ctype: 7.2.19 -> 7.2.20
        php72: 7.2.19 -> 7.2.20
        pcre: 8.43_1 -> 8.43_2
        opnsense-update: 19.7 -> 19.7.2
        opnsense: 19.7 -> 19.7.2
        openssh-portable: 7.9.p1_1,1 -> 8.0.p1,1
        ntp: 4.2.8p13 -> 4.2.8p13_1
        nettle: 3.5.1 -> 3.5.1_1
        monit: 5.25.3 -> 5.26.0
        libnghttp2: 1.39.1 -> 1.39.1_1
        libevent: 2.1.10 -> 2.1.11
        json-c: 0.13.1 -> 0.13.1_1
        glib: 2.56.3_5,1 -> 2.56.3_6,1
        e2fsprogs-libuuid: 1.45.2 -> 1.45.3
        curl: 7.65.1_1 -> 7.65.3

Installed packages to be REINSTALLED:
        readline-8.0.0
        openssl-1.0.2s,1
        openldap-sasl-client-2.4.47
        libxml2-2.9.9
        libucl-0.8.1
        libiconv-1.14_11
        libffi-3.2.1_3
        libedit-3.1.20190324,1
        libargon2-20190702
        ldns-1.7.0_1
        krb5-1.17_2
        gmp-6.1.2_1
        gettext-runtime-0.20.1
        expat-2.2.6_1
        cyrus-sasl-2.1.27

Number of packages to be upgraded: 36
Number of packages to be reinstalled: 15

42 MiB to be downloaded.
[1/51] Fetching unbound-1.9.2_1.txz: .......... done
[2/51] Fetching syslog-ng-3.21.1_1.txz: .......... done
[3/51] Fetching squid-4.8_1.txz: .......... done
[4/51] Fetching sqlite3-3.29.0.txz: .......... done
[5/51] Fetching readline-8.0.0.txz: .......... done
[6/51] Fetching python37-3.7.4.txz: .......... done
[7/51] Fetching py37-sqlite3-3.7.4_7.txz: .... done
[8/51] Fetching php72-zlib-7.2.20.txz: ... done
[9/51] Fetching php72-xml-7.2.20.txz: ... done
[10/51] Fetching php72-sqlite3-7.2.20.txz: ... done
[11/51] Fetching php72-sockets-7.2.20.txz: ..... done
[12/51] Fetching php72-simplexml-7.2.20.txz: ... done
[13/51] Fetching php72-session-7.2.20.txz: ..... done
[14/51] Fetching php72-pdo-7.2.20.txz: ...... done
[15/51] Fetching php72-openssl-7.2.20.txz: ....... done
[16/51] Fetching php72-ldap-7.2.20.txz: ... done
[17/51] Fetching php72-json-7.2.20.txz: ... done
[18/51] Fetching php72-hash-7.2.20.txz: .......... done
[19/51] Fetching php72-gettext-7.2.20.txz: . done
[20/51] Fetching php72-filter-7.2.20.txz: ... done
[21/51] Fetching php72-dom-7.2.20.txz: ....... done
[22/51] Fetching php72-curl-7.2.20.txz: .... done
[23/51] Fetching php72-ctype-7.2.20.txz: . done
[24/51] Fetching php72-7.2.20.txz: .......... done
[25/51] Fetching pcre-8.43_2.txz: .......... done
[26/51] Fetching opnsense-update-19.7.2.txz: .... done
[27/51] Fetching opnsense-19.7.2.txz: .......... done
[28/51] Fetching openssl-1.0.2s,1.txz: .......... done
[29/51] Fetching openssh-portable-8.0.p1,1.txz: .......... done
[30/51] Fetching openldap-sasl-client-2.4.47.txz: .......... done
[31/51] Fetching ntp-4.2.8p13_1.txz: .......... done
[32/51] Fetching nettle-3.5.1_1.txz: .......... done
[33/51] Fetching monit-5.26.0.txz: .......... done
[34/51] Fetching libxml2-2.9.9.txz: .......... done
[35/51] Fetching libucl-0.8.1.txz: .......... done
[36/51] Fetching libnghttp2-1.39.1_1.txz: .......... done
[37/51] Fetching libiconv-1.14_11.txz: .......... done
[38/51] Fetching libffi-3.2.1_3.txz: .... done
[39/51] Fetching libevent-2.1.11.txz: .......... done
[40/51] Fetching libedit-3.1.20190324,1.txz: .......... done
[41/51] Fetching libargon2-20190702.txz: ........ done
[42/51] Fetching ldns-1.7.0_1.txz: .......... done
[43/51] Fetching krb5-1.17_2.txz: .......... done
[44/51] Fetching json-c-0.13.1_1.txz: ....... done
[45/51] Fetching gmp-6.1.2_1.txz: .......... done
[46/51] Fetching glib-2.56.3_6,1.txz: .......... done
[47/51] Fetching gettext-runtime-0.20.1.txz: .......... done
[48/51] Fetching expat-2.2.6_1.txz: .......... done
[49/51] Fetching e2fsprogs-libuuid-1.45.3.txz: ..... done
[50/51] Fetching cyrus-sasl-2.1.27.txz: .......... done
[51/51] Fetching curl-7.65.3.txz: .......... done
Checking integrity... done (0 conflicting)
[1/51] Reinstalling readline-8.0.0...
[1/51] Extracting readline-8.0.0: .......... done
[2/51] Reinstalling openssl-1.0.2s,1...
[2/51] Extracting openssl-1.0.2s,1: .......... done
[3/51] Reinstalling libffi-3.2.1_3...
[3/51] Extracting libffi-3.2.1_3: .......... done
[4/51] Upgrading python37 from 3.7.3_1 to 3.7.4...
[4/51] Extracting python37-3.7.4: .......... done
[5/51] Upgrading pcre from 8.43_1 to 8.43_2...
[5/51] Extracting pcre-8.43_2: .......... done
[6/51] Reinstalling libxml2-2.9.9...
[6/51] Extracting libxml2-2.9.9: .......... done
[7/51] Reinstalling libargon2-20190702...
[7/51] Extracting libargon2-20190702: .......... done
[8/51] Upgrading php72 from 7.2.19 to 7.2.20...
[8/51] Extracting php72-7.2.20: .......... done
[9/51] Upgrading libnghttp2 from 1.39.1 to 1.39.1_1...
[9/51] Extracting libnghttp2-1.39.1_1: .......... done
[10/51] Reinstalling libiconv-1.14_11...
[10/51] Extracting libiconv-1.14_11: .......... done
[11/51] Reinstalling gmp-6.1.2_1...
[11/51] Extracting gmp-6.1.2_1: .......... done
[12/51] Reinstalling gettext-runtime-0.20.1...
[12/51] Extracting gettext-runtime-0.20.1: .......... done
[13/51] Reinstalling cyrus-sasl-2.1.27...
*** Added group `cyrus' (id 60)
*** Added user `cyrus' (id 60)
[13/51] Extracting cyrus-sasl-2.1.27: .......... done
[14/51] Upgrading sqlite3 from 3.28.0 to 3.29.0...
[14/51] Extracting sqlite3-3.29.0: .......... done
[15/51] Upgrading php72-pdo from 7.2.19 to 7.2.20...
[15/51] Extracting php72-pdo-7.2.20: .......... done
[16/51] Upgrading php72-json from 7.2.19 to 7.2.20...
[16/51] Extracting php72-json-7.2.20: .......... done
[17/51] Upgrading php72-hash from 7.2.19 to 7.2.20...
[17/51] Extracting php72-hash-7.2.20: .......... done
[18/51] Reinstalling openldap-sasl-client-2.4.47...
[18/51] Extracting openldap-sasl-client-2.4.47: .......... done
[19/51] Upgrading nettle from 3.5.1 to 3.5.1_1...
[19/51] Extracting nettle-3.5.1_1: .......... done
[20/51] Reinstalling libucl-0.8.1...
[20/51] Extracting libucl-0.8.1: .......... done
[21/51] Upgrading libevent from 2.1.10 to 2.1.11...
[21/51] Extracting libevent-2.1.11: .......... done
[22/51] Reinstalling libedit-3.1.20190324,1...
[22/51] Extracting libedit-3.1.20190324,1: .......... done
[23/51] Reinstalling ldns-1.7.0_1...
[23/51] Extracting ldns-1.7.0_1: .......... done
[24/51] Reinstalling krb5-1.17_2...
[24/51] Extracting krb5-1.17_2: .......... done
[25/51] Upgrading json-c from 0.13.1 to 0.13.1_1...
[25/51] Extracting json-c-0.13.1_1: .......... done
[26/51] Upgrading glib from 2.56.3_5,1 to 2.56.3_6,1...
[26/51] Extracting glib-2.56.3_6,1: .......... done
No schema files found: doing nothing.
[27/51] Reinstalling expat-2.2.6_1...
[27/51] Extracting expat-2.2.6_1: .......... done
[28/51] Upgrading e2fsprogs-libuuid from 1.45.2 to 1.45.3...
[28/51] Extracting e2fsprogs-libuuid-1.45.3: .......... done
[29/51] Upgrading curl from 7.65.1_1 to 7.65.3...
[29/51] Extracting curl-7.65.3: .......... done
[30/51] Upgrading unbound from 1.9.2 to 1.9.2_1...
===> Creating groups.
Using existing group 'unbound'.
===> Creating users
Using existing user 'unbound'.
[30/51] Extracting unbound-1.9.2_1: .......... done
[31/51] Upgrading syslog-ng from 3.21.1 to 3.21.1_1...
[31/51] Extracting syslog-ng-3.21.1_1: .......... done
You may need to manually remove /usr/local/etc/syslog-ng.conf if it is no longer needed.
[32/51] Upgrading squid from 4.7_2 to 4.8_1...
===> Creating groups.
Using existing group 'squid'.
===> Creating users
Using existing user 'squid'.
===> Pre-installation configuration for squid-4.8_1
[32/51] Extracting squid-4.8_1: .......... done
You may need to manually remove /usr/local/etc/squid/squid.conf if it is no longer needed.
[33/51] Upgrading py37-sqlite3 from 3.7.3_7 to 3.7.4_7...
[33/51] Extracting py37-sqlite3-3.7.4_7: ........ done
[34/51] Upgrading php72-zlib from 7.2.19 to 7.2.20...
[34/51] Extracting php72-zlib-7.2.20: ....... done
[35/51] Upgrading php72-xml from 7.2.19 to 7.2.20...
[35/51] Extracting php72-xml-7.2.20: ........ done
[36/51] Upgrading php72-sqlite3 from 7.2.19 to 7.2.20...
[36/51] Extracting php72-sqlite3-7.2.20: ........ done
[37/51] Upgrading php72-sockets from 7.2.19 to 7.2.20...
[37/51] Extracting php72-sockets-7.2.20: .......... done
[38/51] Upgrading php72-simplexml from 7.2.19 to 7.2.20...
[38/51] Extracting php72-simplexml-7.2.20: ......... done
[39/51] Upgrading php72-session from 7.2.19 to 7.2.20...
[39/51] Extracting php72-session-7.2.20: .......... done
[40/51] Upgrading php72-openssl from 7.2.19 to 7.2.20...
[40/51] Extracting php72-openssl-7.2.20: ....... done
[41/51] Upgrading php72-ldap from 7.2.19 to 7.2.20...
[41/51] Extracting php72-ldap-7.2.20: ....... done
[42/51] Upgrading php72-gettext from 7.2.19 to 7.2.20...
[42/51] Extracting php72-gettext-7.2.20: ....... done
[43/51] Upgrading php72-filter from 7.2.19 to 7.2.20...
[43/51] Extracting php72-filter-7.2.20: ........ done
[44/51] Upgrading php72-dom from 7.2.19 to 7.2.20...
[44/51] Extracting php72-dom-7.2.20: .......... done
[45/51] Upgrading php72-curl from 7.2.19 to 7.2.20...
[45/51] Extracting php72-curl-7.2.20: ....... done
[46/51] Upgrading php72-ctype from 7.2.19 to 7.2.20...
[46/51] Extracting php72-ctype-7.2.20: ....... done
[47/51] Upgrading opnsense-update from 19.7 to 19.7.2...
[47/51] Extracting opnsense-update-19.7.2: .......... done
[48/51] Upgrading openssh-portable from 7.9.p1_1,1 to 8.0.p1,1...
[48/51] Extracting openssh-portable-8.0.p1,1: .......... done
[49/51] Upgrading ntp from 4.2.8p13 to 4.2.8p13_1...
[49/51] Extracting ntp-4.2.8p13_1: .......... done
[50/51] Upgrading monit from 5.25.3 to 5.26.0...
[50/51] Extracting monit-5.26.0: ....... done
[51/51] Upgrading opnsense from 19.7 to 19.7.2...
[51/51] Extracting opnsense-19.7.2: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
Keep version OPNsense\Backup\NextcloudSettings (1.0.0)
Keep version OPNsense\CaptivePortal\CaptivePortal (1.0.0)
Keep version OPNsense\Cron\Cron (1.0.1)
*** OPNsense\Diagnostics\Netflow Migration failed, check log for details
Keep version OPNsense\Firewall\Alias (1.0.0)
Keep version OPNsense\IDS\IDS (1.0.3)
*** OPNsense\Monit\Monit Migration failed, check log for details
Keep version OPNsense\OpenVPN\Export (0.0.1)
Keep version OPNsense\Proxy\Proxy (1.0.3)
Keep version OPNsense\Routes\Route (1.0.0)
Keep version OPNsense\Syslog\Syslog (1.0.0)
Keep version OPNsense\TrafficShaper\TrafficShaper (1.0.3)
Writing firmware setting...done.
Configuring login behaviour...done.
Configuring system logging...done.

Skip messages that display after that

Code Select Expand

Message from opnsense-19.7.2:

Roar!
Checking integrity... done (0 conflicting)
Nothing to do.
The following package files will be deleted:
        /var/cache/pkg/unbound-1.9.2_1-1d1bda3fdb.txz
        /var/cache/pkg/syslog-ng-3.21.1_1.txz
        /var/cache/pkg/unbound-1.9.2_1.txz
        /var/cache/pkg/syslog-ng-3.21.1_1-4842c1aba4.txz
        /var/cache/pkg/squid-4.8_1-8b01640cc5.txz
        /var/cache/pkg/sqlite3-3.29.0.txz
        /var/cache/pkg/squid-4.8_1.txz
        /var/cache/pkg/sqlite3-3.29.0-35b62101d1.txz
        /var/cache/pkg/readline-8.0.0-ee5f8cca1e.txz
        /var/cache/pkg/php72-zlib-7.2.20.txz
        /var/cache/pkg/readline-8.0.0.txz
        /var/cache/pkg/python37-3.7.4-e5e5de689f.txz
        /var/cache/pkg/python37-3.7.4.txz
        /var/cache/pkg/py37-sqlite3-3.7.4_7-365a80e10c.txz
        /var/cache/pkg/php72-xml-7.2.20-14ec71552f.txz
        /var/cache/pkg/py37-sqlite3-3.7.4_7.txz
        /var/cache/pkg/php72-zlib-7.2.20-55868d889c.txz
        /var/cache/pkg/php72-sqlite3-7.2.20.txz
        /var/cache/pkg/php72-xml-7.2.20.txz
        /var/cache/pkg/php72-sqlite3-7.2.20-cd14976597.txz
        /var/cache/pkg/php72-sockets-7.2.20-dd84f65451.txz
        /var/cache/pkg/php72-pdo-7.2.20-502f07a57a.txz
        /var/cache/pkg/php72-sockets-7.2.20.txz
        /var/cache/pkg/php72-simplexml-7.2.20-b2d92e049e.txz
        /var/cache/pkg/php72-simplexml-7.2.20.txz
        /var/cache/pkg/php72-session-7.2.20-2fff19c573.txz
        /var/cache/pkg/php72-pdo-7.2.20.txz
        /var/cache/pkg/php72-session-7.2.20.txz
        /var/cache/pkg/php72-openssl-7.2.20-1f45957334.txz
        /var/cache/pkg/php72-dom-7.2.20-5b9c1f4797.txz
        /var/cache/pkg/php72-openssl-7.2.20.txz
        /var/cache/pkg/php72-ldap-7.2.20-307f1d6b45.txz
        /var/cache/pkg/php72-ldap-7.2.20.txz
        /var/cache/pkg/php72-json-7.2.20-303d28b5a2.txz
        /var/cache/pkg/php72-json-7.2.20.txz
        /var/cache/pkg/php72-hash-7.2.20-385b903d56.txz
        /var/cache/pkg/php72-hash-7.2.20.txz
        /var/cache/pkg/php72-gettext-7.2.20-83583f69c9.txz
        /var/cache/pkg/php72-gettext-7.2.20.txz
        /var/cache/pkg/php72-filter-7.2.20-55be9811b0.txz
        /var/cache/pkg/php72-filter-7.2.20.txz
        /var/cache/pkg/php72-7.2.20-8e94589999.txz
        /var/cache/pkg/php72-dom-7.2.20.txz
        /var/cache/pkg/php72-curl-7.2.20-92625c22f9.txz
        /var/cache/pkg/php72-curl-7.2.20.txz
        /var/cache/pkg/php72-ctype-7.2.20-4e1a820d45.txz
        /var/cache/pkg/php72-ctype-7.2.20.txz
        /var/cache/pkg/php72-7.2.20.txz
        /var/cache/pkg/pcre-8.43_2-9129aa6aa6.txz
        /var/cache/pkg/pcre-8.43_2.txz
        /var/cache/pkg/opnsense-update-19.7.2-df2463775b.txz
        /var/cache/pkg/opnsense-19.7.2-ea932c3c89.txz
        /var/cache/pkg/opnsense-update-19.7.2.txz
        /var/cache/pkg/openssl-1.0.2s,1-bf343b0171.txz
        /var/cache/pkg/opnsense-19.7.2.txz
        /var/cache/pkg/openssl-1.0.2s,1.txz
        /var/cache/pkg/openssh-portable-8.0.p1,1-ba1a228a28.txz
        /var/cache/pkg/openssh-portable-8.0.p1,1.txz
        /var/cache/pkg/openldap-sasl-client-2.4.47-b47ad7deb7.txz
        /var/cache/pkg/ntp-4.2.8p13_1-18790c253a.txz
        /var/cache/pkg/openldap-sasl-client-2.4.47.txz
        /var/cache/pkg/ntp-4.2.8p13_1.txz
        /var/cache/pkg/nettle-3.5.1_1-d707069d04.txz
        /var/cache/pkg/nettle-3.5.1_1.txz
        /var/cache/pkg/monit-5.26.0-538cfe6fec.txz
        /var/cache/pkg/monit-5.26.0.txz
        /var/cache/pkg/libxml2-2.9.9-c1a8471d5b.txz
        /var/cache/pkg/libxml2-2.9.9.txz
        /var/cache/pkg/libucl-0.8.1-c4fbfe1c41.txz
        /var/cache/pkg/libucl-0.8.1.txz
        /var/cache/pkg/libnghttp2-1.39.1_1-67d3ca25d3.txz
        /var/cache/pkg/libnghttp2-1.39.1_1.txz
        /var/cache/pkg/libiconv-1.14_11-8e16cfd1b4.txz
        /var/cache/pkg/libiconv-1.14_11.txz
        /var/cache/pkg/libffi-3.2.1_3-d0fbd68961.txz
        /var/cache/pkg/libffi-3.2.1_3.txz
        /var/cache/pkg/libevent-2.1.11-93d0e3c3ef.txz
        /var/cache/pkg/libevent-2.1.11.txz
        /var/cache/pkg/libedit-3.1.20190324,1-e1bec6e63d.txz
        /var/cache/pkg/libedit-3.1.20190324,1.txz
        /var/cache/pkg/libargon2-20190702-8508e70a35.txz
        /var/cache/pkg/ldns-1.7.0_1-2a4d767b8d.txz
        /var/cache/pkg/libargon2-20190702.txz
        /var/cache/pkg/ldns-1.7.0_1.txz
        /var/cache/pkg/krb5-1.17_2-709c6e3516.txz
        /var/cache/pkg/krb5-1.17_2.txz
        /var/cache/pkg/json-c-0.13.1_1-f6a1e1b33c.txz
        /var/cache/pkg/json-c-0.13.1_1.txz
        /var/cache/pkg/gmp-6.1.2_1-68af8aef82.txz
        /var/cache/pkg/gmp-6.1.2_1.txz
        /var/cache/pkg/glib-2.56.3_6,1-a280cfebeb.txz
        /var/cache/pkg/glib-2.56.3_6,1.txz
        /var/cache/pkg/gettext-runtime-0.20.1-8c222d9f9b.txz
        /var/cache/pkg/expat-2.2.6_1-e5b3ee09e1.txz
        /var/cache/pkg/gettext-runtime-0.20.1.txz
        /var/cache/pkg/expat-2.2.6_1.txz
        /var/cache/pkg/cyrus-sasl-2.1.27-50943cf8fa.txz
        /var/cache/pkg/e2fsprogs-libuuid-1.45.3-01c4960b41.txz
        /var/cache/pkg/e2fsprogs-libuuid-1.45.3.txz
        /var/cache/pkg/curl-7.65.3-266e2cfbe9.txz
        /var/cache/pkg/cyrus-sasl-2.1.27.txz
        /var/cache/pkg/curl-7.65.3.txz
The cleanup will free 42 MiB
Deleting files: .......... done
All done
Starting web GUI...done.
Generating RRD graphs...done.
Fetching base-19.7.2-i386.txz: .......................... done
Fetching kernel-19.7.2-i386.txz: ............. done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-19.7.2-i386.txz... done
Installing base-19.7.2-i386.txz... done
Please reboot.
>>> Invoking stop script 'beep'
>>> Invoking stop script 'freebsd'
>>> Invoking stop script 'backup'
>>> Invoking backup script 'captiveportal'
>>> Invoking backup script 'dhcpleases'
>>> Invoking backup script 'duid'
>>> Invoking backup script 'netflow'
>>> Invoking backup script 'rrd'
>>> Invoking stop script 'config'
Shutdown NOW!
shutdown: [pid 27657]

*** FINAL System shutdown message from root@OPNsense.localdomain ***

System going down IMMEDIATELY



System shutdown time has arrived
Waiting (max 60 seconds) for system process `vnlru' to stop... done
Waiting (max 60 seconds) for system process `bufdaemon' to stop... done
Waiting (max 60 seconds) for system process `syncer' to stop...
Syncing disks, vnodes remaining... 0 0 0 0 done
All buffers synced.
Uptime: 33m17s
Rebooting...

Code Select Expand

/boot/config: -S115200 -D
Consoles: internal video/keyboard  serial port
BIOS drive C: is disk0
BIOS 638kB/515072kB available memory

FreeBSD/x86 bootstrap loader, Revision 1.1
Loading /boot/defaults/loader.conf
Warning: error reading file /boot/loader.conf
/
       _    _               _                     _ ____   _____ _____
      | |  | |             | |                   | |  _ \ / ____|  __ \
      | |__| | __ _ _ __ __| | ___ _ __   ___  __| | |_) | (___ | |  | |
      |  __  |/ _` | '__/ _` |/ _ \ '_ \ / _ \/ _` |  _ < \___ \| |  | |
      | |  | | (_| | | | (_| |  __/ | | |  __/ (_| | |_) |____) | |__| |
      |_|  |_|\__,_|_|  \__,_|\___|_| |_|\___|\__,_|____/|_____/|_____/


+==========Welcome to HardenedBSD=========+ uKOS2qsmkfe38kEuXLimP+7XoBiuIt5k
|                                         | BMHardenedBSDxfOL9QwvfA6yxGHkNMG
|  1. Boot Multi User [Enter]             | 2I7ADmw7Mp/P8Y4wjnBFDNKvNzdZa/uu
|  2. Boot [S]ingle User                  | 7jx0/j28DcHs1oTUiFxDezXj0+bYBAjk
|  3. [Esc]ape to loader prompt           | M/WeI4vOFPUZQcUiqAhCItlLY/1/YsdU
|  4. Reboot                              | bYCu3JOWsOA/Ctw0oVmHA+jY6Z8RJnsT
|                                         | NTm3YVdJVYQ+O2ltoSwHardenedBSDVD
|  Options:                               | vji9p89gQvsPgS9hh9ekUCw/0TnSeQ1W
|  5. [K]ernel: kernel (1 of 2)           | NHcmBLfiNO7mU9D4rCxiSQfifcIZzC78
|  6. Configure Boot [O]ptions...         | uwaNYp+XGq+qEt7pQ+aX2nsJ2juBCGai
|                                         | fTclPrFDFBNSqyrmOEI3Lrkn3eudPbJU
|                                         | NlHardenedBSDvCOXT59dcSRw9mB3bOl
|                                         | gEcyCwdlh1xWKOu9qGWcmsAhOVReHec4
+=========================================+

can't find 'kernel'
can't find 'kernel'

can't load 'kernel'

So I did this twice with two different 4GB CF having same results.  I was able to upgrade my Watchguard XTM5 just fine using the 64-bit test image that fixed the inode issues.