Upgrade or Downgrade?

[mihak]

I upgraded OPNSense to 21.1.r1 and now when I am checking for updates, I get the notification to "upgrade" down to 20.7.8 - see the attachment.

How do I avoid this? I would like to upgrade n2disk, nprobe and ntopng - but keep the base and kernel at my current version.

[allebone]

I know when unbound had an issue I ran the command:

opnsense-revert -r 20.7.6 unbound

So I am thinking you could try something along the lines of:

opnsense-revert -r 20.7.8 n2disk

Maybe that will change just that package?

Pete

[franco]

Please post /var/cache/opnsense-update/.upgrade.log

I guess looking at the screen you have the ntop repository installed but that has some incompatiblities and probably prevents your system from installing relevant 21.1 packages.

opnsense-revert only works on packages we provide via releases and e.g. "n2disk" is not one of them.

We did inform ntop people of the release engineerings problematic so that is expected in the current way they provide packages.


Cheers,
Franco

[mihak]

There is no .upgrade.log at all... The whole opnsense-update folder is empty:

admin@OPNsense:~ % sudo tail /var/cache/opnsense-update/.upgrade.log
tail: /var/cache/opnsense-update/.upgrade.log: No such file or directory
admin@OPNsense:~ % ls /var/cache/opnsense-update/
admin@OPNsense:~ %

[franco]

Strange, it doesn't look like it did an update in any case. It would look something like this...

# ls /var/cache/opnsense-update/
.sets.pending   .upgrade.log   .upgrade.pipe   46122      57827

How did you come to update to 21.1.r1?


Cheers,
Franco

[mihak]

Upgrade was offered to me through System:Firmware. I Unlocked the upgrade, confirmed it and let it run its course. If it is relevant, the upgrade didn't reboot OPNSense at the end of the process, I had to ssh into the box and sudo reboot it manually.

Audit health report:

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 21.1.b_97 (amd64/OpenSSL) at Thu Jan 21 17:03:14 PST 2021
>>> Check installed kernel version
Version 21.1.r1 is incorrect, expected: 20.7.8
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 21.1.r1 is incorrect, expected: 20.7.8
>>> Check for missing or altered base files
No problems detected.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages:
elasticsearch5-5.6.8_5: checksum mismatch for /usr/local/etc/elasticsearch/elasticsearch.yml
Checking all packages.......
ntopng-4.3.210120: checksum mismatch for /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem
Checking all packages....
os-ntopng-devel-1.2: checksum mismatch for /usr/local/opnsense/service/conf/actions.d/actions_ntopng.conf
Checking all packages...
os-sensei-1.6.2: checksum mismatch for /usr/local/etc/rc.d/eastpect
Checking all packages........ done
>>> Check for core packages consistency
Core package "opnsense-devel" has 67 dependencies to check.
Checking packages: .................................................................... done
***DONE***

[franco]

Sensei probably gets in the way, but not sure how yet. https://forum.opnsense.org/index.php?topic=20906.msg97486#msg97486

To fix this set firmware flavour to "21.1/MINT/21.1.r1/OpenSSL" and check for updates + install (not "upgrade").

Afterwards set flavour back to "(default)".


Cheers,
Franco

[mihak]

Like this? (see attached)

[franco]

Yes, looks good.