Messages

P.S. AGH has its own configuration file, not maintained by OPNsense, so you'll want to backup /usr/local/AdGuardHome/AdGuardHome.yaml manually too

ok thank you

isnt that why we are all here to some point to find out how to do things when we have problems and asking scholars like yourself for some educational response so that we can fix and move on unfortunately your response came back with failure to have an education and should be tossed in the E-Waste bin. Thank you for your reply

I know you're frustrated, so I'll overlook the personal insult.

The problem is that you've demonstrated that you've been doing things like manually editing system configuration files. You should never do that unless given specific instructions on what to do from the OPNsense development team (of which I am not part). When it comes to packaging/installation issues, that basically means "don't do it unless franco tells you to". Now that you have been doing this by yourself, your installation is an unknown state of brokenness. It can be very difficult to diagnose from here, because so much is unknown.

So if I download and reinstall and then load in my config file i backed up wouldnt that put me back at the same spot? just fyi i did not divulge I have adguard, crowdsec, zenarmor and clamav installed

Why not be better as a whole community?  ;)

i agree with you hence my reply to dseven for saying i dont know what i am doing

If you want to say you see an attitude problem here then I would have to agree.

Speaking for me personally, I am both here to help you and have already helped you.

If you want to continue to act like you do I'll happily help someone else and stop responding.


Cheers,
Franco

Franco,
My reply of snarkism was for dseven as he said stop fiddling with things i dont understand that reply was not for you are you all drinking your coffee this morning??? I thought i could come here and get help I am guessing maybe not?

I know the console can be intimidating, so why not use the GUI?

If you feel very attached to the console you can run

# /usr/local/opnsense/scripts/firmware/launcher.sh upgrade

I'm not sure something is wrong with your install or not, but I do know that everything you run into likely has an easy explanation.


Cheers,
Franco

got this

root@opnsense:~ # /usr/local/opnsense/scripts/firmware/launcher.sh upgrade
Fetching packages-26.7-amd64.tar: ...................................................................... done
Fetching base-26.7-amd64.txz: .......... done
Fetching kernel-26.7-amd64.txz: ...... done
Flushing temporary package files... done
Extracting packages-26.7-amd64.tar... done
Extracting base-26.7-amd64.txz... done
Extracting kernel-26.7-amd64.txz... done
Please reboot.
>>> Invoking upgrade script 'sanity.sh'
Core package "opnsense" not known to package database.
>>> Error in upgrade script '10-sanity.sh'
The upgrade was aborted due to an error.
root@opnsense:~ #

check here https://pkg.opnsense.org/FreeBSD:14:amd64/

not cool to say 26.7 is here and regular user goes to update and my system freezes due to a non existant update

It's not there because OPNsense 26.7 is built on FreeBSD 15, not 14.

With the amount of flailing around in just your post (never mind what may have gone before), I wouldn't trust your installation at all at this point. I'd backup the config, do a fresh install of 26.7, and restore the config... and stop fiddling with things that you don't understand.

isnt that why we are all here to some point to find out how to do things when we have problems and asking scholars like yourself for some educational response so that we can fix and move on unfortunately your response came back with failure to have an education and should be tossed in the E-Waste bin. Thank you for your reply

Code Select Expand

A major firmware upgrade is available for this installation: 26.7

[...]

Minor updates may be available, answer 'y' to run them instead.

[...]

Proceed with this action? [26.7/y/N]: y

How about using "26.7" at the prompt?

did that scroll up

Use the console, option 12, type 26.7 when prompted

***** This is what I Get *******

Fetching changelog information, please wait... done

This will automatically fetch all available updates and apply them.

A major firmware upgrade is available for this installation: 26.7

Make sure you have read the release notes and migration guide before
attempting this upgrade.  Approx. 1000MB will need to be downloaded and
require 2000MB of free space to unpack.  Continue with this major upgrade
by typing the major upgrade version number displayed above.

Minor updates may be available, answer 'y' to run them instead.

Proceed with this action? [26.7/y/N]:

***** when typing 26.7 I get this *******

Proceed with this action? [26.7/y/N]: 26.7

What is up everyone,

For over 11 a half years now, OPNsense is driving innovation through
modularising and hardening the open source firewall, with simple
and reliable firmware upgrades, multi-language support, fast adoption
of upstream software updates, modern IPv6 support, as well as clear
and stable 2-Clause BSD licensing.

26.7, nicknamed "Xenial Xenops", features interface assignments and
gateway groups via MVC/API, firewall rules now defaulting to MVC/API,
outbound NAT to source NAT migration assistant, captive portal IPv6
support, Kea DDNS/custom options/dynamic prefix delegation, FreeBSD
15.1, OpenVPN 2.7, PHP 8.5, Python 3.13, plus much more.

The upgrade path for 26.1 will likely be unlocked later today.  We want
to ensure the upgrade goes as smoothly as possible so please be patient!  :)

Download links, an installation guide[1] and the checksums for the images
can be found below as well.

o Europe: https://opnsense.c0urier.net/releases/26.7/
o US East Coast: https://mirror.wdc1.us.leaseweb.net/opnsense/releases/26.7/
o US West Coast: https://mirror.sfo12.us.leaseweb.net/opnsense/releases/26.7/
o South America: http://mirror.ueb.edu.ec/opnsense/releases/26.7/
o East Asia: https://mirror.ntct.edu.tw/opnsense/re7eases/26.7/
o Full mirror list: https://opnsense.org/download/

Here are the full patch notes:

:

***** At this point I have to hold the enter key down to get to the end and get this while doing so *******

o system: remove periodic backups settings and backend code
o system: migrate gateway groups to MVC/API
o system: new service widget flat tile layout (partially contributed by Konstantinos Spartalis)
o system: make LDAP auth adhere to bad login penalty as well (contributed by Matt Andreko)
o system: move ldap_escape() to caller for now to avoid side effects
o system: improve the log_archive script to also work on log subdirectories
o system: change our version of "certctl" to emit files instead of links like it is the case in FreeBSD 15.1
o system: include interfaces widget in dashboard default
o system: adjust dashboard widget resize logic to observe border box instead of content box
o reporting: migrate several settings pages to MVC/API and assorted changes
o reporting: do not show disabled interfaces in traffic graphs (contributed by Konstantinos Spartalis)
o interfaces: migrate interface assignments to MVC/API
o interfaces: fix faulty netmask on loopback address due to upstream change
o firmware: remove overzealous cleansing in output_cmd to unhide individual character progress
o firewall: move config.xml default LAN allow rules to new rules GUI
o firewall: legacy rules pages move to plugin
o firewall: restrict automatic DHCPv6 filter rules to plugin/track6 use
o firewall: always set a sequence at the end of the rule set when cloning a NAT rule
o firewall: remove unused "safepoint" actions
o firewall: fix automatic source NAT rules not displayed for PPPoE interfaces
o firewall: flatten automatic source NAT rules into two per WAN type interface
o firewall: prevent deletion if a group is referenced in MVC rules
o firewall: constraint source NAT getAction() to only general page and align setAction() accordingly
o firewall: use proper path for one-to-one NAT rules for renaming operations
o firewall: avoid emitting reply-to on block rules as well
o firewall: change interface group render/apply order
o firewall: adjust MVC alias rename according to address_to_pconfig()
o firewall: adapt getAdvancedIds() to the sectioned form structure
o firewall: invalidate rule stats cache for firewall utilities API endpoint
o captive portal: move template actions out of the ServiceController into its own TemplateController
o captive portal: adjust accounting interval to Acct-Interim-Interval
o dnsmasq: possible use before define in lease watcher
o intrusion detection: rename "uncategorized" rule package to "adult" (contributed by Konstantinos Spartalis)
o monit: fix mail-format and poll-time validation
o unbound: missing NetMaskAllowed=N on override address
o wireguard: add allowed-ips to reresolve-dns.py in case none are set yet
o acl: merge user management ACLs into one single privilege
o backend: allow "strict" mode +TARGETS using the preamble "!"
o backend: swap "strict" template logic as it was reversed
o mvc: refactor base_dialog and parseFormNode() to simplify the template
o mvc: remove unused argument from getFormGrid()
o mvc: BaseField: emit descriptions in getNodes() when they are not the same as the value to match getNodeContent()
o mvc: PortField: reject whitespaces in port ranges during validation
o mvc: ModelRelationField: remove grouped option handling
o mvc: add file type to forms
o ui: add "opnsense-auto" theme which switches between "opnsense" and "opnsense-dark" depending on browser setting
o ui: decrease flashing in opnsense-auto theme when switching (contributed by Konstantinos Spartalis)
o ui: remove direct apply_btn_id usage in favour of base_apply_button template partial
o ui: fix menu registration not setting "active"
o plugins: os-firewall-legacy 1.0 contains the static PHP firewall rules pages
o plugins: os-ndproxy has been removed, use os-ndp-proxy-go instead
o src: FreeBSD 15.1-RELEASE-p1 plus assorted stable/15 networking commits[2]
o src: pf: do not mangle IP header before shared forwarding
o src: pf: stop resolving hosts via DNS that use ":" modifier
o src: pf: clear anchor after stepping into it in pf_match_translation_rule()
o src: pf: pf_route() "dst" no longer holds the gateway in 15.x
o ports: libevent 2.1.13[3]
o ports: lighttpd 1.4.85[4]
o ports: openvpn 2.7.5[5]
o ports: sqlite 3.53.3[6]
o ports: suricata 8.0.6[7]

Migration notes, known issues and limitations:

o The privileges "page-system-groupmanager" and "page-system-usermanager-addprivs" were merged into "page-system-groupmanager" and are no longer available separately.  This was done to avoid the misconception that access to a user management page gives constrained rights to each page, but that is not the case.  User management is a process involving all 3 pages.
o The static PHP pages for firewall rule management have been moved to the "os-firewall-legacy" plugin which can be manually installed before or after the upgrade.  All rules will continue to work regardless of the plugin being installed or not and are easily migrated using the given assistant.
o Hyper-V guests may be producing panics on certain hosts with more than one virtual processor assigned.  Make sure to snapshot beforehand and stay on 26.1.x until the situation is clear.
o Since this is a major OS upgrade and OpenSSL changes from 3.0 to 3.5 third party repositories may interfere with your upgrade experience.  Removing offending repositories and plugins may help; or wait for affirmation from the respective repository owners.

The public key for the 26.7 series is:

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----


Stay safe,
Your OPNsense team


--
SHA256 (OPNsense-26.7-dvd-amd64.iso.bz2) = 95cafedda6d5b22ce832e249dc2309110fbee19f813ad78cf28bb3d387186bfb
SHA256 (OPNsense-26.7-nano-amd64.img.bz2) = 28d5e2f37e40d87468a924e3006ef10e2ddc6de485b85333d9e3958c84d0cb9d
SHA256 (OPNsense-26.7-serial-amd64.img.bz2) = 259b441646f1b0d77075a7281e368fe7f4c980360498ed6bc23740bd83c67e32
SHA256 (OPNsense-26.7-vga-amd64.img.bz2) = d975ed876e0650f6a5bf30b2e97218c5eaa370bef6597b19f43e22c1b950d3fc

[1] https://docs.opnsense.org/manual/install.html
[2] https://www.freebsd.org/releases/15.1R/relnotes/
[3] https://github.com/libevent/libevent/releases/tag/release-2.1.13-stable
[4] https://www.lighttpd.net/2026/07/08/1.4.85/
[5] https://github.com/OpenVPN/openvpn/blob/v2.7.5/Changes.rst
[6] https://sqlite.org/releaselog/3_53_3.html
[7] https://suricata.io/2026/07/09/suricata-8-0-6-and-7-0-17-released/
(END)

****** As you can see it just gives me the patch notes
, I have to then close terminal and re ssh back into opnsense to get this when selecting "y" and NOT typing in 26.7 *******

Proceed with this action? [26.7/y/N]: y

Updating OPNsense repository catalogue...
Unable to update repository OPNsense
Updating mimugmail repository catalogue...
Fetching meta.conf: . done
mimugmail repository is up to date.
Error updating repositories!
Flushing temporary package files... done
Starting web GUI...done.
Partial update failure detected: report this error log to OPNsense.
No further actions will be taken. Please restart the update now.

*** opnsense.local: OPNsense 26.1.11_10 (amd64) ***


  0) Logout                              7) Ping host
  1) Assign interfaces                   8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Update from console
  6) Reboot system                      13) Restore a backup

Enter an option:

***** Does Not Update *****

.

It's a community effort by Michael and you just need to be aware of its status and not expect OPNsense/Deciso to do anything about it.

fair enough

[repository]

If you had AdGuard Home installed from the mimugmail or mimugmail-single repository, it will survive an upgrade to 26.7 and continue to work.

You only need to disable the repository, not uninstall the plugin. The plugins UI will show it as "orphaned", but that is not a problem.

AdGuard Home was never a community plugin in the official OPNsense repo.

Then why let AGH be installed on opnsense? a lot of us rely on AGH I do if it wasnt supposed to be a plugin why let it be?

after selecting to update opnsense freezes so went through settings and got this then went to check packages and 26.7 does not exist so what gives?
check here https://pkg.opnsense.org/FreeBSD:14:amd64/

what it finds:
Index of /FreeBSD:14:amd64
[ICO]    Name    Last modified    Size    Description
[PARENTDIR]    Parent Directory        -   
[DIR]    24.7/    2025-01-29 12:15    -   
[DIR]    25.1/    2025-08-06 08:24    -   
[DIR]    25.7/    2026-02-11 15:42    -   
[DIR]    26.1/    2026-07-15 10:08    -   
[DIR]    snapshots/    2026-07-16 19:43    -   


not cool to say 26.7 is here and regular user goes to update and my system freezes due to a non existant update


------------------------------------------------
|      Hello, this is OPNsense 26.1          |          :::::::.
|                                              |          :::::::::.
|  Website:    https://opnsense.org/          |        :::        :::
|  Handbook:    https://docs.opnsense.org/    |        :::        :::
|  Forums:      https://forum.opnsense.org/    |        :::        :::
|  Code:        https://github.com/opnsense    |        `:::::::::
|  Reddit:      https://reddit.com/r/opnsense  |          `:::::::
------------------------------------------------

*** opnsense.local: OPNsense 26.1.11_10 (amd64) ***






  0) Logout                              7) Ping host
  1) Assign interfaces                  8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                  12) Update from console
  6) Reboot system                      13) Restore a backup

Enter an option: 8

root@opnsense:~ # ping -c 4 8.8.8.8
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: icmp_seq=0 ttl=111 time=15.170 ms
64 bytes from 8.8.8.8: icmp_seq=1 ttl=111 time=12.457 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=111 time=14.253 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=111 time=14.467 ms

--- 8.8.8.8 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 12.457/14.087/15.170/1.000 ms
root@opnsense:~ # pkg bootstrap -f
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d, please wait...
pkg: Attempted to fetch https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d/Latest/pkg.pkg
pkg: Attempted to fetch https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d/Latest/pkg.txz
pkg: Error: Not Found
A pre-built version of pkg could not be found for your system.
Bootstrapping pkg from https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest, please wait...
Verifying signature with trusted certificate pkg.opnsense.org.20260120... done
pkg-static: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
Installing pkg-2.3.1_1...
package pkg is already installed, forced install
Extracting pkg-2.3.1_1: 100%
root@opnsense:~ # pkg bootstrap -f
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d, please wait...
pkg: Attempted to fetch https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d/Latest/pkg.pkg
pkg: Attempted to fetch https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d/Latest/pkg.txz
pkg: Error: Not Found
A pre-built version of pkg could not be found for your system.
Bootstrapping pkg from https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest, please wait...
Verifying signature with trusted certificate pkg.opnsense.org.20260120... done
pkg-static: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
Installing pkg-2.3.1_1...
package pkg is already installed, forced install
Extracting pkg-2.3.1_1: 100%
root@opnsense:~ # cat /usr/local/etc/pkg/repos/*.conf
FreeBSD: { enabled: no }
FreeBSD-kmods: { enabled: no }
OPNsense-aux: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
  url: "https://pkg.opnsense.org/${ABI}/26.1/aux",
  signature_type: "fingerprints",
  priority: 11,
  enabled: no
}
OPNsense: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
  signature_type: "fingerprints",
  priority: 11,
  enabled: yes
}
SunnyValley: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/SunnyValley",
  url: "https://updates.zenarmor.net/opnsense/${ABI}/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d",
  signature_type: "fingerprints",
  priority: 7,
  enabled: yes
}
mimugmail: {
  url: "https://opn-repo.routerperformance.net/repo-single/${ABI}",
  priority: 5,
  enabled: yes
}

root@opnsense:~ # cat > /usr/local/etc/pkg/repos/opnsense.conf << 'EOF'
? OPNsense: {
?  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
?  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
?  signature_type: "fingerprints",
?  priority: 5,
?  enabled: yes
? at > /usr/local/}
? EOF
?
? # Temporarily disable Zenarmor repo
? cat > /usr/local/etc/pkg/repos/zenarmor.conf << 'EOF'
? SunnyValley: {
?  fingerprints: "/usr/local/etc/pkg/fingerprints/SunnyValley",
?  url: "https://updates.zenarmor.net/opnsense/${ABI}/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d",
?  signature_type: "fingerprints",
?  priority: 7,
?  enabled: no
? }
? EOF
?
root@opnsense:~ # ee /usr/local/etc/pkg/repos/opnsense.conf
^[ (escape) menu ^y search prompt ^k delete line  ^p prev li    ^g prev page
^o ascii code    ^x search        ^l undelete line ^n next li    ^v next page
^u end of file  ^a begin of line ^w delete word  ^b back 1 char ^z next word
^t top of text  ^e end of line  ^r restore word  ^f forward char
^c command      ^d delete char  ^j undelete char              ESC-Enter: exit
=====line 7 col 1 lines from top 7 ============================================
OPNsense: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
  signature_type: "fingerprints",
  priority: 5,
  enabled: yes
}
















"/usr/local/etc/pkg/repos/opnsense.conf" 7 lines, 192 characters
root@opnsense:~ # ee /usr/local/etc/pkg/repos/zenarmor.conf
^[ (escape) menu ^y search prompt ^k delete line  ^p prev li    ^g prev page
^o ascii code    ^x search        ^l undelete line ^n next li    ^v next page
^u end of file  ^a begin of line ^w delete word  ^b back 1 char ^z next word
^t top of text  ^e end of line  ^r restore word  ^f forward char
^c command      ^d delete char  ^j undelete char              ESC-Enter: exit
=====line 7 col 1 lines from top 7 ============================================
SunnyValley: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/SunnyValley",
  url: "https://updates.zenarmor.net/opnsense/${ABI}/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d",
  signature_type: "fingerprints",
  priority: 7,
  enabled: no
}
















"/usr/local/etc/pkg/repos/zenarmor.conf" 7 lines, 240 characters
root@opnsense:~ # cat /usr/local/etc/pkg/repos/opnsense.conf
OPNsense: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
  signature_type: "fingerprints",
  priority: 5,
  enabled: yes
}
root@opnsense:~ # cat /usr/local/etc/pkg/repos/zenarmor.conf
SunnyValley: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/SunnyValley",
  url: "https://updates.zenarmor.net/opnsense/${ABI}/26.1/5d78bfc7-cdf2-454f-90de-f52f43599b9d",
  signature_type: "fingerprints",
  priority: 7,
  enabled: no
}
root@opnsense:~ # pkg bootstrap -f
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest, please wait...
Verifying signature with trusted certificate pkg.opnsense.org.20260120... done
pkg-static: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
Installing pkg-2.3.1_1...
package pkg is already installed, forced install
Extracting pkg-2.3.1_1: 100%
root@opnsense:~ # pkg update -f
Updating OPNsense repository catalogue...
Fetching meta.conf: 100%    179 B  0.2kB/s    00:01
Fetching data.pkg: 100%  329 KiB 336.5kB/s    00:01
Processing entries: 100%
OPNsense repository update completed. 933 packages processed.
Updating mimugmail repository catalogue...
Fetching meta.conf: 100%    179 B  0.2kB/s    00:01
Fetching data.pkg: 100%    3 KiB  2.7kB/s    00:01
Processing entries: 100%
mimugmail repository update completed. 9 packages processed.
All repositories are up to date.
root@opnsense:~ # pkg upgrade -y
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating mimugmail repository catalogue...
Fetching meta.conf: 100%    179 B  0.2kB/s    00:01
mimugmail repository is up to date.
All repositories are up to date.
pkg: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
Updating database digests format: 100%
Checking for upgrades (2 candidates): 100%
Processing candidates (2 candidates): 100%
Checking integrity... done (0 conflicting)
Your packages are up to date.
root@opnsense:~ # opnsense-update -f
root@opnsense:~ # ps aux | grep opnsense-update
root          87691  0.0  0.0    13744    2408  0  S+  23:11    0:00.00 grep opnsense-update
root@opnsense:~ # opnsense-update -fr
No arg for -r option
Usage: man opnsense-update
root@opnsense:~ # opnsense-update -f
root@opnsense:~ # echo $?
0
root@opnsense:~ # opnsense-version
OPNsense 26.1.11_10 (amd64)
root@opnsense:~ # opnsense-update -c
root@opnsense:~ # ls -la /tmp/opnsense-update/
ls: /tmp/opnsense-update/: No such file or directory
root@opnsense:~ # cat /tmp/opnsense-update/*.log 2>/dev/null
cat: No match.
root@opnsense:~ # ls -la /usr/local/opnsense/scripts/upgrade/
ls: /usr/local/opnsense/scripts/upgrade/: No such file or directory
root@opnsense:~ # opnsense-update -c
root@opnsense:~ # opnsense-update -fb
Fetching base-26.1.11-amd64.txz: ............ done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing base-26.1.11-amd64.txz... done
Cleaning obsolete files... done
Please reboot.
root@opnsense:~ # pkg rquery '%v' opnsense-base
pkg: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
root@opnsense:~ # cat /usr/local/opnsense/update/*.conf
cat: No match.
root@opnsense:~ # grep -r "pkg.opnsense.org" /usr/local/etc/pkg/repos/
/usr/local/etc/pkg/repos/OPNsense-aux.conf.sample:  url: "https://pkg.opnsense.org/${ABI}/26.1/aux",
/usr/local/etc/pkg/repos/opnsense.conf:  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
/usr/local/etc/pkg/repos/OPNsense-aux.conf:  url: "https://pkg.opnsense.org/${ABI}/26.1/aux",
/usr/local/etc/pkg/repos/OPNsense.conf.sample:  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
/usr/local/etc/pkg/repos/OPNsense.conf:  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
root@opnsense:~ # opnsense-update -v 26.7 -fb
Usage: man opnsense-update
root@opnsense:~ # curl -s https://pkg.opnsense.org/FreeBSD:14:amd64/ | grep -E "26\.[0-9]" | sort
<tr><td valign="top"><img src="/icons/folder.gif" alt="[DIR]"></td><td><a href="26.1/">26.1/</a></td><td align="right">2026-07-15 10:08  </td><td align="right">  - </td><td>&nbsp;</td></tr>
root@opnsense:~ # pkg search -o opnsense
pkg: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
opnsense/opnsense              OPNsense community release
opnsense/opnsense-devel        OPNsense development release
opnsense/filterlog-go          command-line tool and terminal-based viewer for OPNsense firewall logs
opnsense/installer            OPNsense installer scripts
opnsense/lang                  OPNsense translations
opnsense/update                OPNsense update utilities
opnsense/pam                  OPNsense shared authentication system using PAM
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ # curl -s https://pkg.opnsense.org/FreeBSD:14:amd64/ | grep -E "href=\"[0-9]+\.[0-9]+/" | sed 's/.*href="\([^"]*\)\/.*/\1/'
Unmatched '"'.
root@opnsense:~ # curl -s https://pkg.opnsense.org/ | grep -E "href=\"[0-9]+\.[0-9]+/"
Unmatched '"'.
root@opnsense:~ # opnsense-update -c -M
https://pkg.opnsense.org/FreeBSD:14:amd64/26.1
root@opnsense:~ # cat /conf/config.xml | grep -A5 -B5 firmware
      <pwd_changed_at>1772711113.6124</pwd_changed_at>
      <landing_page/>
      <comment/>
      <apikeys/>
      <priv>page-all,page-diagnostics-arptable,page-diagnostics-authentication,page-diagnostics-backup-restore,page-diagnostics-configurationhistory,page-diagnostics-factorydefaults,page-diagnostics-system-pftop,page-diagnostics-pf-info,page-diagnostics-haltsystem,page-diagnostics-logs-firewall-general,page-diagnostics-logs-firewall-dynamic,page-diagnostics-logs-firewall-plain,page-diagnostics-logs-firewall-summary,page-diagnostics-logs-gateways,page-diagnostics-logs-system,page-diagnostics-ndptable,page-diagnostics-netflow,page-diagnostics-netstat,page-diagnostics-networkinsight,page-diagnostics-packetcapture,page-diagnostics-tables,page-diagnostics-ping,page-diagnostics-rebootsystem,page-diagnostics-routingtables,page-diagnostics-limiter-info,page-diagnostics-showstates,page-diagnostics-system-activity,page-diagnostics-health,page-diagnostics-testport,page-diagnostics-traceroute,page-firewall-alias-edit,page-firewall-aliases,page-firewall-categories,page-interfaces-groups-edit,page-firewall-nat-1-1-edit,page-firewall-nat-portforward-edit,page-firewall-nat-npt,page-firewall-nat-outbound,page-firewall-nat-outbound-edit,page-filter-snat-api,page-firewall-scrub,page-firewall-rules,page-filter-api,page-firewall-rules-edit,page-firewall-schedules,page-firewall-schedules-edit,page-firewall-trafficshaper,page-interfaces-assignnetworkports,page-interfaces-bridge-edit,page-diagnostics-dns_diagnostics,page-interfaces-gif-edit,page-interfaces-gre-edit,page-interfaces-lagg-edit,page-interfaces-loopback,page-interfaces-neighbor,page-hostdiscovery,page-diagnostics-logs-hostdiscovery,page-interfaces-ppps,page-interfaces-ppps-edit,page-system-advanced-network,page-firewall-virtualipaddress-edit,page-status-carp,page-interfaces-vlan-edit,page-interfaces-vxlan,page-interfaces,page-interfaces-wireless,page-interfaces-wireless-edit,page-system-login-logout,page-system-license,page-system-usermanager-passwordmg,page-status-trafficgraph,page-services-adguardhome,page-services-captiveportal,page-dhcp-kea-ctrl-agent,page-diagnostics-logs-kea,page-dhcp-kea-v4,page-dhcp-kea-v6,page-services-dhcprelay,page-services-opendns,page-diagnostics-logs-dnsmasq,page-services-dnsforwarder,page-services-ids,page-services-dhcpserver,page-services-dhcpserver-editstaticmapping,page-status-dhcpleases,page-diagnostics-logs-dhcp,page-services-dhcpv6server,page-services-dhcpserverv6-editstaticmapping,page-services-ntpd,page-opnarp-config,page-services-router-advertisements,page-services-unbound,page-services-dnsresolver-acls,page-services-dnsresolver-advanced,page-services-dnsresolver-overrides,page-services-dnsresolver,page-diagnostics-logs-resolver,page-status-dnsoverview,page-status-habackup,page-status-interfaces,page-status-ipsec,page-status-ipsec-leases,page-status-ipsec-sad,page-status-ipsec-spd,page-status-dhcpv6leases,page-status-ntp,page-services-ntp-gps,page-services-ntp-pps,page-status-openvpn,page-status-services,page-status-systemlogs-portalauth,page-status-systemlogs-ipsecvpn,page-status-systemlogs-ntpd,page-status-systemlogs-openvpn,page-status-systemlogs-ppp,page-status-systemlogs-routing,page-status-systemlogs-wireless,page-diagnostics-wirelessstatus,page-system-groupmanager,page-system-usermanager-addprivs,page-system-usermanager,page-system-advanced-admin,page-system-advanced-firewall,page-system-advanced-misc,page-system-advanced-sysctl,page-system-authservers,page-system-camanager,page-system-certmanager,page-wizard-system,page-diagnostics-crash-reporter,page-system-crlmanager,user-config-readonly,page-system-firmware-manualupdate,page-system-gatewaygroups,page-system-gateways,page-system-gateways-editgatewaygroups,page-system-generalsetup,page-system-hasync,page-system-cron,page-diagnostics-logs-settings-targets,page-snapshots,page-system-staticroutes,page-system-status,page-vpn-ipsec-connections,page-vpn-ipsec-editkeys,page-vpn-ipsec-keypairs,page-openvpn-client-export,page-openvpn-csc,page-openvpn-instances,page-wireguard-config,page-wireguard-logs,page-wireguard-diagnostics,page-services-monit,page-xmlrpclibrary</priv>
      <language>en_US</language>
     
      <dashboard/>
    </user>
    <timezone>America/New_York</timezone>
--
      <passwordauth>1</passwordauth>
      <permitrootlogin>1</permitrootlogin>
    </ssh>
    <rrdbackup>-1</rrdbackup>
    <netflowbackup>-1</netflowbackup>
    <firmware version="1.0.1" persisted_at="1769961223.54" description="Firmware settings">
      <mirror/>
      <flavour/>
      <plugins>os-adguardhome-maxit,os-c-icap,os-clamav,os-crowdsec,os-opnarp-maxit,os-sensei,os-sensei-agent,os-sensei-updater,os-smart,os-sunnyvalley,os-theme-rebellion</plugins>
      <type/>
      <subscription/>
      <reboot>0</reboot>
    </firmware>
    <dnsserver>127.0.0.1</dnsserver>
    <language>en_US</language>
    <pf_disable_force_gw>1</pf_disable_force_gw>
    <disablereplyto>1</disablereplyto>
    <dns1gw>none</dns1gw>
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ # opnsense-update -c
root@opnsense:~ # fetch -o - https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest/meta.txz | tar -xO +MANIFEST | grep version
fetch: https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest/meta.txz: Not Found
tar: +MANIFEST: Not found in archive
tar: Error exit delayed from previous errors.
root@opnsense:~ # pkg rquery '%v' opnsense-base
pkg: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
root@opnsense:~ # pkg rquery '%v' opnsense-base
pkg: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
root@opnsense:~ # ps aux | grep -E "opnsense-update|pkg|upgrade"
root          96243  0.0  0.0    13744    2336  0  S+  23:28    0:00.00 grep -E opnsense-update|pkg|upgrade
root@opnsense:~ # ls -la /var/run/opnsense-update.lock
ls: /var/run/opnsense-update.lock: No such file or directory
root@opnsense:~ # top -n 1
last pid: 70216;  load averages:  0.12,  0.18,  0.16  up 0+00:36:36    23:28:34
79 processes:  1 running, 78 sleeping
CPU:  3.2% user,  0.0% nice,  1.0% system,  0.0% interrupt, 95.7% idle
Mem: 11G Active, 1815M Inact, 6266M Wired, 172K Buf, 12G Free
ARC: 1531M Total, 618M MFU, 768M MRU, 906K Anon, 10M Header, 133M Other
    1194M Compressed, 2608M Uncompressed, 2.18:1 Ratio
Swap: 8192M Total, 8192M Free

  PID USERNAME    THR PRI NICE  SIZE    RES STATE    C  TIME    WCPU COMMAND
50349 root        13  20  -20    10G  227M nanslp  1  0:32  0.20% eastpect

root@opnsense:~ # df -h /
Filesystem            Size    Used  Avail Capacity  Mounted on
zroot/ROOT/default    891G    4.3G    887G    0%    /
root@opnsense:~ # df -h /tmp
Filesystem    Size    Used  Avail Capacity  Mounted on
zroot/tmp    887G    1.3M    887G    0%    /tmp
root@opnsense:~ # df -h /var
Filesystem            Size    Used  Avail Capacity  Mounted on
zroot/ROOT/default    891G    4.3G    887G    0%    /
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ # cat > /usr/local/etc/pkg/repos/opnsense.conf << 'EOF'
c/pkg/fingerprin? OPNsense: {
?  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
?  url: "https://pkg.opnsense.org/FreeBSD:14:amd64/26.7/latest",
?  signature_type: "fingerprints",
?  priority: 5,
?  enabled: yes
? }
? EOF
?
root@opnsense:~ # cat > /usr/local/etc/pkg/repos/opnsense.conf << 'EOF'
? OPNsense: {
?  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
?  url: "https://pkg.opnsense.org/FreeBSD:14:amd64/26.7/latest",
?  signature_type: "fingerprints",
?  priority: 5,
?  enabled: yes
? }
? EOF
?
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ #
root@opnsense:~ # cat /usr/local/etc/pkg/repos/opnsense.conf
OPNsense: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
  signature_type: "fingerprints",
  priority: 5,
  enabled: yes
}
root@opnsense:~ # rm /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo 'OPNsense: {' > /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  url: "https://pkg.opnsense.org/FreeBSD:14:amd64/26.7/latest",'; >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  signature_type: "fingerprints",' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  priority: 5,' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  enabled: yes' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '}' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # cat /usr/local/etc/pkg/repos/opnsense.conf
OPNsense: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
  url: "https://pkg.opnsense.org/FreeBSD:14:amd64/26.7/latest",
  signature_type: "fingerprints",
  priority: 5,
  enabled: yes
}
root@opnsense:~ # pkg update -f
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
Unable to update repository OPNsense
Updating mimugmail repository catalogue...
Fetching meta.conf: 100%    179 B  0.2kB/s    00:01
Fetching data.pkg: 100%    3 KiB  2.7kB/s    00:01
Processing entries: 100%
mimugmail repository update completed. 9 packages processed.
Error updating repositories!
root@opnsense:~ # opnsense-update -vf
26.1.11
root@opnsense:~ # curl -s https://pkg.opnsense.org/FreeBSD:14:amd64/ | grep -E 'href="[0-9]+\.[0-9]+/"' | sed 's/.*href="\([^"]*\)\/.*/\1/'
24.7
25.1
25.7
26.1
root@opnsense:~ # cat > /usr/local/etc/pkg/repos/opnsense.conf << 'EOF'
? OPNsense: {
?  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
?  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
?  signature_type: "fingerprints",
?  priority: 5,
?  enabled: yes
? }
? EOF
?
?
root@opnsense:~ # cat /usr/local/etc/pkg/repos/opnsense.conf
OPNsense: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
  url: "https://pkg.opnsense.org/FreeBSD:14:amd64/26.7/latest",
  signature_type: "fingerprints",
  priority: 5,
  enabled: yes
}
root@opnsense:~ # rm /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo 'OPNsense: {' > /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",'; >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  signature_type: "fingerprints",' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  priority: 5,' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '  enabled: yes' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # echo '}' >> /usr/local/etc/pkg/repos/opnsense.conf
root@opnsense:~ # cat /usr/local/etc/pkg/repos/opnsense.conf
OPNsense: {
  fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
  url: "https://pkg.opnsense.org/${ABI}/26.1/latest",
  signature_type: "fingerprints",
  priority: 5,
  enabled: yes
}
root@opnsense:~ # pkg update -f
Updating OPNsense repository catalogue...
Fetching meta.conf: 100%    179 B  0.2kB/s    00:01
Fetching data.pkg: 100%  329 KiB 336.5kB/s    00:01
Processing entries: 100%
OPNsense repository update completed. 933 packages processed.
Updating mimugmail repository catalogue...
Fetching meta.conf: 100%    179 B  0.2kB/s    00:01
Fetching data.pkg: 100%    3 KiB  2.7kB/s    00:01
Processing entries: 100%
mimugmail repository update completed. 9 packages processed.
All repositories are up to date.
root@opnsense:~ # opnsense-version
OPNsense 26.1.11_10 (amd64)
root@opnsense:~ # opnsense-update -c
root@opnsense:~ # pkg upgrade -n
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating mimugmail repository catalogue...
Fetching meta.conf: 100%    179 B  0.2kB/s    00:01
mimugmail repository is up to date.
All repositories are up to date.
pkg: warning: database version 39 is newer than libpkg(3) version 36, but still compatible
Checking for upgrades (2 candidates): 100%
Processing candidates (2 candidates): 100%
Checking integrity... done (0 conflicting)
Your packages are up to date.
root@opnsense:~ #