That .LCK file means the rules DB is stuck in a locked/failed update state.
Quick fix:
Stop Suricata
Delete both files:
rm /usr/local/etc/suricata/rules/rules.sqlite*
Restart OPNsense IDS/IPS (or reboot)
Reapply config, then re-enable ET Open and update again
If it still auto-downloads, check Services → Intrusion Detection → Administration and disable auto rule updates temporarily.
The issue isn't the rules themselves—it's the locked SQLite DB blocking everything.bitlife online
Quick fix:
Stop Suricata
Delete both files:
rm /usr/local/etc/suricata/rules/rules.sqlite*
Restart OPNsense IDS/IPS (or reboot)
Reapply config, then re-enable ET Open and update again
If it still auto-downloads, check Services → Intrusion Detection → Administration and disable auto rule updates temporarily.
The issue isn't the rules themselves—it's the locked SQLite DB blocking everything.bitlife online
"