Messages

[OPNsense update utilities]

Fixed. I did not move to the development branch but rebuilt the community setup. Note that I did not have any luck reinstalling from the original image including reformatting the boot drive. The routine that did work was much faster and cleaned up everything.

What I had to do was rebuild from github and use the OPNsense-Bootstrap routine. This pulled the current 26.7.1.2 version and reinstalled the complete set including all the packages and plugins.

https://github.com/opnsense/update#opnsense-update-utilities

OPNsense update utilities
This is a collection of firmware upgrade tools specifically written for OPNsense based on FreeBSD ideas (kernel and base sets) and tools (pkg(8) and freebsd-update(8)).

opnsense-bootstrap
opnsense-bootstrap(8) is a tool that can completely reinstall a running system in place for a thorough factory reset or to restore consistency of all the OPNsense files. It can also wipe the configuration directory, but won't do that by default.

It will automatically pick up the latest available version and build a chain of trust by using current package fingerprints -> CA root certificates -> HTTPS -> OPNsense package fingerprints.

What it will also do is turn a supported stock FreeBSD release into an OPNsense installation. Both UFS and ZFS installations are supported.

The usage is simple, starting with a FreeBSD 15.1-RELEASE image:

# fetch https://raw.githubusercontent.com/opnsense/update/master/src/bootstrap/opnsense-bootstrap.sh.in
# sh ./opnsense-bootstrap.sh.in -r 26.7

[Partial update failure detected: report this error log to OPNsense.]

Thanks for the insightful suggestions.

1. Noted. After several years of working with pfSense I'm looking for other options. Just getting into the differences between the two of these forks.

2. From what I can tell I'm running the latest stable version. 26.7 is the image I downloaded and installed. This is what is listed in the firmware configuration. Also listed are 26.7.1 and 26.7.2. However, if I run the update the message I get is that there is nothing to upgrade. Is there a way to force the update beyond 26.7?

3. I tried to install the ACME plug-in which is what started me down this rabbit hole. See my first point in the original post.

4. I'm well aware of dragons that can lurk in development versions. I have beta tested pfSense + for years. Thanks for the warning and advise to read. Maybe point me to where to read up on this updating process which seems to be stuck.

Note the last bit of the original post where I copied the error message which included a reference to notifying OPNsense of the partial update error.

The process will require 12 MiB more space.
12 MiB to be downloaded.
Fetching opnsense-26.7.2_2.pkg: .......... done
Fetching opnsense-devel-27.1.a_119.pkg: .......... done
pkg-static: No package(s) matching opnsense
Starting web GUI...done.
Partial update failure detected: report this error log to OPNsense.
No further actions will be taken. Please restart the update now.
***DONE***

[The error I get when trying to add ACME is:]

[SOLVED] See my 3rd post for the solution.

I have 26.7 installed and just still setting things up. Looking at moving from pfSense to OPNsense. Tried to add ACME and got an error that said I needed a more recent version. Standard update check says no updates available even though there are two other versions showing (26.7.1 and 26.7.2). Really odd behavior and very few packages were listed. Could not install any plugins. See below for log from trying to install ACME plugin.

The error I get when trying to add ACME is:
***GOT REQUEST TO INSTALL***
Currently running OPNsense 26.7 (amd64) at Sun Aug 23 12:59:55 PDT 2026
Installation out of date. The update to opnsense-26.7.2_2 is required.
***DONE***

If I move to the development track and check for updates I get:
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 26.7 (amd64) at Sun Aug 23 13:00:28 PDT 2026
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 930 packages processed.
All repositories are up to date.
Upgrading package manager from version '' to '2.3.1_1'
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
OPNsense is up to date.
pkg: pkg is not installed, therefore upgrade is impossible
Checking integrity... done (0 conflicting)
Your packages are up to date.
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: ......... done
Processing entries: .......... done
OPNsense repository update completed. 930 packages processed.
All repositories are up to date.
Checking for upgrades (0 candidates): . done
Processing candidates (0 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
The following 169 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
   beep: 1.0_2 [OPNsense]
   boost-libs: 1.89.0_2 [OPNsense]
   brotli: 1.2.0,1 [OPNsense]
   ca_root_nss: 3.125 [OPNsense]
   choparp: 20150613_1 [OPNsense]
   colordiff: 1.0.22 [OPNsense]
   cpdup: 1.22_1 [OPNsense]
   cpustats: 0.1 [OPNsense]
   curl: 8.21.0 [OPNsense]
   cyrus-sasl: 2.1.28_5 [OPNsense]
   cyrus-sasl-gssapi: 2.1.28 [OPNsense]
   dhcp6c: 20260122 [OPNsense]
   dhcrelay: 1.0 [OPNsense]
   dnsmasq: 2.93,1 [OPNsense]
   dpinger: 3.6 [OPNsense]
   easy-rsa: 3.2.6,1 [OPNsense]
   expat: 2.8.2 [OPNsense]
   filterlog: 0.8 [OPNsense]
   flock: 2.37.2_1 [OPNsense]
   flowd: 0.9.1_5 [OPNsense]
   gettext-runtime: 1.0_1 [OPNsense]
   glib: 2.86.4,2 [OPNsense]
   gmp: 6.3.0 [OPNsense]
   hostapd: 2.12_2 [OPNsense]
   hostwatch: 1.0.13 [OPNsense]
   hyperscan: 5.4.2 [OPNsense]
   icu: 76.1,1 [OPNsense]
   ifinfo: 13.0_1 [OPNsense]
   iftop: 1.0.p4_1 [OPNsense]
   indexinfo: 0.3.1_1 [OPNsense]
   ivykis: 0.43.2_1 [OPNsense]
   jansson: 2.15.1 [OPNsense]
   jq: 1.8.2 [OPNsense]
   json-c: 0.19 [OPNsense]
   kea: 3.0.3 [OPNsense]
   krb5: 1.22.2_2 [OPNsense]
   ldns: 1.9.2 [OPNsense]
   libcbor: 0.14.0 [OPNsense]
   libedit: 3.1.20260512,1 [OPNsense]
   libevent: 2.1.13 [OPNsense]
   libffi: 3.6.0 [OPNsense]
   libfido2: 1.17.0 [OPNsense]
   libiconv: 1.18_1 [OPNsense]
   libidn2: 2.3.8 [OPNsense]
   libltdl: 2.5.4 [OPNsense]
   liblz4: 1.10.0_2,1 [OPNsense]
   libmcrypt: 2.5.8_4 [OPNsense]
   libnet: 1.3,1 [OPNsense]
   libnghttp2: 1.69.0 [OPNsense]
   libpfctl: 0.17 [OPNsense]
   libpsl: 0.21.5_2 [OPNsense]
   libsodium: 1.0.22 [OPNsense]
   libucl: 0.9.4 [OPNsense]
   libunistring: 1.4.2 [OPNsense]
   libuuid: 2.42.2 [OPNsense]
   libxml2: 2.15.3 [OPNsense]
   libyaml: 0.2.5 [OPNsense]
   lighttpd: 1.4.85 [OPNsense]
   log4cplus: 2.1.2 [OPNsense]
   lua54: 5.4.8 [OPNsense]
   lzo2: 2.10_2 [OPNsense]
   monit: 5.35.2 [OPNsense]
   mpd5: 5.9_19 [OPNsense]
   mpdecimal: 4.0.1 [OPNsense]
   nettle: 3.10.2 [OPNsense]
   nspr: 4.39 [OPNsense]
   nss: 3.126 [OPNsense]
   ntp: 4.2.8p18_5 [OPNsense]
   oniguruma: 6.9.10 [OPNsense]
   openldap26-client: 2.6.14 [OPNsense]
   openssh-portable: 10.4.p1,1 [OPNsense]
   openssl35: 3.5.7 [OPNsense]
   openvpn: 2.7.6 [OPNsense]
   opnsense-devel: 27.1.a_119 [OPNsense]
   opnsense-installer: 26.7 [OPNsense]
   opnsense-lang: 26.1.7 [OPNsense]
   opnsense-update: 26.7.2 [OPNsense]
   pam_opnsense: 24.1 [OPNsense]
   pcre2: 10.47_1 [OPNsense]
   perl5: 5.42.2 [OPNsense]
   pftop: 0.13 [OPNsense]
   php85: 8.5.8 [OPNsense]
   php85-ctype: 8.5.8 [OPNsense]
   php85-curl: 8.5.8 [OPNsense]
   php85-dom: 8.5.8 [OPNsense]
   php85-filter: 8.5.8 [OPNsense]
   php85-gettext: 8.5.8 [OPNsense]
   php85-ldap: 8.5.8 [OPNsense]
   php85-mbstring: 8.5.8 [OPNsense]
   php85-pcntl: 8.5.8 [OPNsense]
   php85-pdo: 8.5.8 [OPNsense]
   php85-pear: 1.10.18 [OPNsense]
   php85-pear-Crypt_CHAP: 1.5.0_1 [OPNsense]
   php85-pecl-mcrypt: 1.0.9 [OPNsense]
   php85-pecl-radius: 1.4.0b1_4 [OPNsense]
   php85-phalcon: 5.18.2 [OPNsense]
   php85-phpseclib: 3.0.55 [OPNsense]
   php85-session: 8.5.8 [OPNsense]
   php85-simplexml: 8.5.8 [OPNsense]
   php85-sockets: 8.5.8 [OPNsense]
   php85-sqlite3: 8.5.8 [OPNsense]
   php85-xml: 8.5.8 [OPNsense]
   php85-zlib: 8.5.8 [OPNsense]
   pkcs11-helper: 1.31.0 [OPNsense]
   pkg: 2.3.1_1 [OPNsense]
   py313-Babel: 2.18.0 [OPNsense]
   py313-Jinja2: 3.1.6 [OPNsense]
   py313-aioquic: 1.3.0_1 [OPNsense]
   py313-anyio: 4.13.0 [OPNsense]
   py313-async_generator: 1.10_1 [OPNsense]
   py313-attrs: 26.1.0 [OPNsense]
   py313-bottleneck: 1.6.0_2 [OPNsense]
   py313-certifi: 2026.6.17 [OPNsense]
   py313-cffi: 2.0.0 [OPNsense]
   py313-charset-normalizer: 3.4.7 [OPNsense]
   py313-cryptography: 48.0.1,1 [OPNsense]
   py313-dnspython: 2.8.0_1,1 [OPNsense]
   py313-duckdb: 1.5.5 [OPNsense]
   py313-h11: 0.16.0 [OPNsense]
   py313-h2: 4.3.0 [OPNsense]
   py313-hpack: 4.1.0 [OPNsense]
   py313-httpcore: 1.0.9 [OPNsense]
   py313-httpx: 0.28.1_2 [OPNsense]
   py313-hyperframe: 6.1.0 [OPNsense]
   py313-idna: 3.18 [OPNsense]
   py313-jq: 1.11.0 [OPNsense]
   py313-ldap3: 2.9.1_1 [OPNsense]
   py313-markupsafe: 3.0.3 [OPNsense]
   py313-numexpr: 2.14.1_2 [OPNsense]
   py313-numpy: 2.4.6_1,1 [OPNsense]
   py313-outcome: 1.3.0_2 [OPNsense]
   py313-packaging: 26.2 [OPNsense]
   py313-pandas: 2.3.3_3,1 [OPNsense]
   py313-pyasn1: 0.6.0 [OPNsense]
   py313-pyasn1-modules: 0.4.1 [OPNsense]
   py313-pycparser: 2.23 [OPNsense]
   py313-pylsqpack: 0.3.24 [OPNsense]
   py313-pyopenssl: 26.2.0,1 [OPNsense]
   py313-pysocks: 1.7.1_1 [OPNsense]
   py313-python-dateutil: 2.9.0 [OPNsense]
   py313-pytz: 2026.2,1 [OPNsense]
   py313-pyyaml: 6.0.3 [OPNsense]
   py313-requests: 2.34.2 [OPNsense]
   py313-service-identity: 24.2.0 [OPNsense]
   py313-six: 1.17.0 [OPNsense]
   py313-sniffio: 1.3.1 [OPNsense]
   py313-socksio: 1.0.0_1 [OPNsense]
   py313-sortedcontainers: 2.4.0_1 [OPNsense]
   py313-sqlite3: 3.13.15_10 [OPNsense]
   py313-trio: 0.33.0 [OPNsense]
   py313-truststore: 0.10.4 [OPNsense]
   py313-tzdata: 2026.2 [OPNsense]
   py313-ujson: 5.12.1 [OPNsense]
   py313-urllib3: 2.7.0,1 [OPNsense]
   py313-vici: 6.0.3 [OPNsense]
   python313: 3.13.15 [OPNsense]
   radvd: 2.20 [OPNsense]
   readline: 8.3.3 [OPNsense]
   rrdtool: 1.9.0_1 [OPNsense]
   samplicator: 1.3.8.r1_1 [OPNsense]
   sqlite3: 3.53.3,1 [OPNsense]
   strongswan: 6.0.7 [OPNsense]
   sudo: 1.9.17p2_2 [OPNsense]
   suricata: 8.0.6 [OPNsense]
   syslog-ng: 4.12.0 [OPNsense]
   unbound: 1.26.0 [OPNsense]
   wpa_supplicant: 2.12_1 [OPNsense]
   zip: 3.0_5 [OPNsense]
   zstd: 1.5.7_2 [OPNsense]

Number of packages to be installed: 169

The process will require 1 GiB more space.
222 MiB to be downloaded.

If I try to update I get:

***GOT REQUEST TO UPDATE***
Currently running OPNsense 26.7 (amd64) at Sun Aug 23 13:02:50 PDT 2026
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (0 candidates): . done
Processing candidates (0 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: . done
The following package files will be deleted:
   /var/cache/pkg/opnsense-26.7.2_2.pkg
   /var/cache/pkg/opnsense-devel-27.1.a_119~96fc2ed938.pkg
   /var/cache/pkg/opnsense-26.7.2_2~34b31765e9.pkg
   /var/cache/pkg/opnsense-devel-27.1.a_119.pkg
The cleanup will free 12 MiB
Deleting files: .... done
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
OPNsense is up to date.
The following packages will be fetched:

New packages to be FETCHED:
   opnsense: 26.7.2_2 (6 MiB: 49.99% of the 12 MiB to download)
   opnsense-devel: 27.1.a_119 (6 MiB: 50.01% of the 12 MiB to download)

Number of packages to be fetched: 2

The process will require 12 MiB more space.
12 MiB to be downloaded.
Fetching opnsense-26.7.2_2.pkg: .......... done
Fetching opnsense-devel-27.1.a_119.pkg: .......... done
pkg-static: No package(s) matching opnsense
Starting web GUI...done.
Partial update failure detected: report this error log to OPNsense.
No further actions will be taken. Please restart the update now.
***DONE***