Super solid work on this stateful SSH upgrade script paired with the Claude MCP server. Solving pkg ABI conflicts and automatic resume after firewall reboots addresses one of the most frustrating OPNsense admin pain points, and live production testing from 26.1.2 to 26.1.3 makes this even more trustworthy.
A few related GitHub repos worth referencing for further iteration:
https://github.com/opnsense/update – official core update backend for deep dive into native upgrade mechanics
https://github.com/Rosa-Luxemburgstiftung-Berlin/ansible-opnsense-update – Ansible automation for fleet-wide OPNsense upgrades
https://github.com/mikch06/opnsense-updates – lightweight update checker for alerting workflows
If you ever need auxiliary batch processing utilities alongside firewall admin tooling, bulk extract images and bulk image edit are handy open-style batch tools for quick asset preparation.
Really appreciate you open-sourcing this project. Feel free to tag me if you need testing or code review feedback down the line
A few related GitHub repos worth referencing for further iteration:
https://github.com/opnsense/update – official core update backend for deep dive into native upgrade mechanics
https://github.com/Rosa-Luxemburgstiftung-Berlin/ansible-opnsense-update – Ansible automation for fleet-wide OPNsense upgrades
https://github.com/mikch06/opnsense-updates – lightweight update checker for alerting workflows
If you ever need auxiliary batch processing utilities alongside firewall admin tooling, bulk extract images and bulk image edit are handy open-style batch tools for quick asset preparation.
Really appreciate you open-sourcing this project. Feel free to tag me if you need testing or code review feedback down the line
"