OPNsense 21.7 upgrade

[mueller]

Hallo,

das Upgrade auf Version 21.7 lief bei mir mit meiner Konfiguration reibungslos durch.
Es scheint auf den ersten Blick alles sauber zu laufen.

Besten Dank allen, die daran mitgearbeitet haben, das macht Spaß 

[dsecure]

Hallo,

das Upgrade auf Version 21.7 lief bei mir mit meiner Konfiguration reibungslos durch.
Es scheint auf den ersten Blick alles sauber zu laufen.

Besten Dank allen, die daran mitgearbeitet haben, das macht Spaß 

Top, lief bei mir auch ohne Probleme so weit durch.

[Markus_MSP]

Hallo zusammen, leider lief das upgrade bei mir nicht 

Habe Sensei mit Lizenz im Einsatz, da gab es schon bei dem letzten größeren UPDATE Probleme. Leider kann ich nichts mehr aus der Sense an Protokollen ziehen, da sie nicht mehr hochfährt (BlackScreen auf der Maschine)

ERGÄNZUNG: Putty Promptcopy

FreeBSD/amd64 EFI loader, Revision 1.1
(Wed Jul 21 14:24:43 CEST 2021 root@sensey)

   Command line arguments: loader.efi -S115200 -h
   EFI version: 2.60
   EFI Firmware: American Megatrends (rev 5.12)
   Console: comconsole (0x1000)
   Load Path: HD(3,GPT,247A4DEE-A65F-11EB-9D93-406231093DE5,0x64428,0x1AD244A8)
   Load Device: PciRoot(0x0)/Pci(0x17,0x0)/Sata(0x1,0xFFFF,0x0)/HD(3,GPT,247A4DE                                                                  E-A65F-11EB-9D93-406231093DE5,0x64428,0x1AD244A8)
   BootCurrent: 0001
   BootOrder: 0001

   BootInfo Path: HD(1,GPT,2365876F-A65F-11EB-9D93-406231093DE5,0x28,0x64000)/\E                                                                  FI\BOOT\BOOTX64.EFI
Ignoring Boot0001: Only one DP found
Trying ESP: PciRoot(0x0)/Pci(0x17,0x0)/Sata(0x1,0xFFFF,0x0)/HD(3,GPT,247A4DEE-A6                                                                  5F-11EB-9D93-406231093DE5,0x64428,0x1AD244A8)
Setting currdev to disk0p3:
Loading /boot/defaults/loader.conf
|

                  ______  _____  _____
                 /  __  |/ ___ |/ __  |
                 | |  | | |__/ | |  | |___  ___ _ __  ___  ___
                 | |  | |  ___/| |  | / __|/ _ \ '_ \/ __|/ _ \
                 | |__| | |    | |  | \__ \  __/ | | \__ \  __/
                 |_____/|_|    |_| /__|___/\___|_| |_|___/\___|

 +=========================================+     @@@@@@@@@@@@@@@@@@@@@@@@@@@@
 |                                         |   @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
 |  1. Boot Multi User [Enter]             |   @@@@@                    @@@@@
 |  2. Boot Single User                  |       @@@@@            @@@@@
 |  3. [Esc]ape to loader prompt           |    @@@@@@@@@@@       @@@@@@@@@@@
 |  4. Reboot                              |         \\\\\         /////
 |                                         |   ))))))))))))       (((((((((((
 |  Options:                               |         /////         \\\\\
 |  5. [K]ernel: kernel (1 of 2)           |    @@@@@@@@@@@       @@@@@@@@@@@
 |  6. Configure Boot

• ptions...         |       @@@@@            @@@@@

 |                                         |   @@@@@                    @@@@@
 |                                         |   @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
 |                                         |   @@@@@@@@@@@@@@@@@@@@@@@@@@@@
 +=========================================+
                                                21.7  ``Noble Nightingale''
/boot/kernel/kernel text=0x184dd54 data=0x1e3968+0x76ed60 syms=[0x8+0x18fde0+0x8                                                                  +0x1ae221]
/boot/entropy size=0x1000
/boot/kernel/carp.ko size 0x10250 at 0x2892000
/boot/kernel/if_bridge.ko size 0xf998 at 0x28a3000
loading required module 'bridgestp'
/boot/kernel/bridgestp.ko size 0x72a8 at 0x28b3000
/boot/kernel/if_enc.ko size 0x3e78 at 0x28bb000
/boot/kernel/if_gre.ko size 0xb1c0 at 0x28bf000
/boot/kernel/if_lagg.ko size 0x16008 at 0x28cb000
/boot/kernel/if_tap.ko size 0x8b60 at 0x28e2000
/boot/kernel/pf.ko size 0x584a0 at 0x28eb000
/boot/kernel/pflog.ko size 0x2af8 at 0x2944000
/boot/kernel/pfsync.ko size 0xec30 at 0x2947000
Booting...
Start @ 0xffffffff80372000 ...
KDB: debugger backends: ddb
KDB: current backend: ddb
---<<BOOT>>---
Copyright (c) 2013-2019 The HardenedBSD Project.
Copyright (c) 1992-2019 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 12.1-RELEASE-p19-HBSD #0  c89981353e9(stable/21.7)-dirty: Wed Jul 21 14:                                                                  36:43 CEST 2021
    root@sensey:/usr/obj/usr/src/amd64.amd64/sys/SMP amd64
FreeBSD clang version 8.0.1 (tags/RELEASE_801/final 366581) (based on LLVM 8.0.1                                                                  )
VT(vga): resolution 640x480
HardenedBSD: initialize and check features (__HardenedBSD_version 1200059 __Free                                                                  BSD_version 1201000).
CPU: Intel(R) Core(TM) i5-7300U CPU @ 2.60GHz (2712.14-MHz K8-class CPU)
  Origin="GenuineIntel"  Id=0x806e9  Family=0x6  Model=0x8e  Stepping=9
  Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,C                                                                  MOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
  Features2=0x7ffafbff<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,SMX,EST,TM2,SSSE3,SD                                                                  BG,FMA,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,TSCDLT,AESNI,XSAVE,                                                                  OSXSAVE,AVX,F16C,RDRAND>
  AMD Features=0x2c100800<SYSCALL,NX,Page1GB,RDTSCP,LM>
  AMD Features2=0x121<LAHF,ABM,Prefetch>
  Structured Extended Features=0x29c6fbf<FSGSBASE,TSCADJ,SGX,BMI1,HLE,AVX2,SMEP,                                                                  BMI2,ERMS,INVPCID,RTM,NFPUSG,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PROCTRACE>
  Structured Extended Features3=0xc000000<IBPB,STIBP>
  XSAVE Features=0xf<XSAVEOPT,XSAVEC,XINUSE,XSAVES>
  VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID
  TSC: P-state invariant, performance statistics
real memory  = 8589934592 (8192 MB)
avail memory = 8175194112 (7796 MB)
Event timer "LAPIC" quality 600
ACPI APIC Table: <ALASKA A M I >
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 2 core(s) x 2 hardware threads
random: unblocking device.
ioapic0 <Version 2.0> irqs 0-119 on motherboard
Launching APs: 1 3 2
Timecounter "TSC-low" frequency 1356072462 Hz quality 1000
wlan: mac acl policy registered
random: entropy device external interface
kbd0 at kbdmux0
module_register_init: MOD_LOAD (vesa, 0xffffffff812907f0, 0) error 19
random: registering fast source Intel Secure Key RNG
random: fast provider: "Intel Secure Key RNG"
000.000054 [4344] netmap_init               netmap: loaded module
[ath_hal] loaded
nexus0
efirtc0: <EFI Realtime Clock> on motherboard
efirtc0: registered as a time-of-day clock, resolution 1.000000s
cryptosoft0: <software crypto> on motherboard
acpi0: <ALASKA A M I > on motherboard
acpi0: Power Button (fixed)
cpu0: <ACPI CPU> on acpi0
hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 24000000 Hz quality 950
Event timer "HPET" frequency 24000000 Hz quality 550
Event timer "HPET1" frequency 24000000 Hz quality 440
Event timer "HPET2" frequency 24000000 Hz quality 440
Event timer "HPET3" frequency 24000000 Hz quality 440
Event timer "HPET4" frequency 24000000 Hz quality 440
atrtc0: <AT realtime clock> port 0x70-0x77 irq 8 on acpi0
atrtc0: Warning: Couldn't map I/O.
atrtc0: registered as a time-of-day clock, resolution 1.000000s
Event timer "RTC" frequency 32768 Hz quality 0
attimer0: <AT timer> port 0x40-0x43,0x50-0x53 irq 0 on acpi0
Timecounter "i8254" frequency 1193182 Hz quality 0
Event timer "i8254" frequency 1193182 Hz quality 100
Timecounter "ACPI-fast" frequency 3579545 Hz quality 900
acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1808-0x180b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pci0: <ACPI PCI bus> on pcib0
vgapci0: <VGA-compatible display> port 0xf000-0xf03f mem 0xde000000-0xdeffffff,0                                                                  xc0000000-0xcfffffff at device 2.0 on pci0
vgapci0: Boot video device
xhci0: <Intel Sunrise Point-LP USB 3.0 controller> mem 0xdf610000-0xdf61ffff at                                                                   device 20.0 on pci0
xhci0: 32 bytes context size, 64-bit DMA
usbus0 on xhci0
usbus0: 5.0Gbps Super Speed USB v3.0
pci0: <simple comms> at device 22.0 (no driver attached)
ahci0: <Intel Sunrise Point-LP AHCI SATA controller> port 0xf090-0xf097,0xf080-0                                                                  xf083,0xf060-0xf07f mem 0xdf628000-0xdf629fff,0xdf62d000-0xdf62d0ff,0xdf62c000-0                                                                  xdf62c7ff at device 23.0 on pci0
ahci0: AHCI v1.31 with 3 6Gbps ports, Port Multiplier not supported
ahcich0: <AHCI channel> at channel 0 on ahci0
ahcich1: <AHCI channel> at channel 1 on ahci0
ahcich2: <AHCI channel> at channel 2 on ahci0
pcib1: <ACPI PCI-PCI bridge> at device 28.0 on pci0
pci1: <ACPI PCI bus> on pcib1
igb0: <Intel(R) I211 (Copper)> port 0xe000-0xe01f mem 0xdf500000-0xdf51ffff,0xdf                                                                  520000-0xdf523fff at device 0.0 on pci1
igb0: Using 1024 TX descriptors and 1024 RX descriptors
igb0: Using 2 RX queues 2 TX queues
igb0: Using MSI-X interrupts with 3 vectors
igb0: Ethernet address: 40:62:31:09:3d:e5
igb0: netmap queues/slots: TX 2/1024, RX 2/1024
pcib2: <ACPI PCI-PCI bridge> at device 28.1 on pci0
pci2: <ACPI PCI bus> on pcib2
igb1: <Intel(R) I211 (Copper)> port 0xd000-0xd01f mem 0xdf400000-0xdf41ffff,0xdf                                                                  420000-0xdf423fff at device 0.0 on pci2
igb1: Using 1024 TX descriptors and 1024 RX descriptors
igb1: Using 2 RX queues 2 TX queues
igb1: Using MSI-X interrupts with 3 vectors
igb1: Ethernet address: 40:62:31:09:3d:e6
igb1: netmap queues/slots: TX 2/1024, RX 2/1024
pcib3: <ACPI PCI-PCI bridge> at device 28.2 on pci0
pci3: <ACPI PCI bus> on pcib3
igb2: <Intel(R) I211 (Copper)> port 0xc000-0xc01f mem 0xdf300000-0xdf31ffff,0xdf                                                                  320000-0xdf323fff at device 0.0 on pci3
igb2: Using 1024 TX descriptors and 1024 RX descriptors
igb2: Using 2 RX queues 2 TX queues
igb2: Using MSI-X interrupts with 3 vectors
igb2: Ethernet address: 40:62:31:09:3d:e7
igb2: netmap queues/slots: TX 2/1024, RX 2/1024
pcib4: <ACPI PCI-PCI bridge> at device 28.3 on pci0
pci4: <ACPI PCI bus> on pcib4
igb3: <Intel(R) I211 (Copper)> port 0xb000-0xb01f mem 0xdf200000-0xdf21ffff,0xdf                                                                  220000-0xdf223fff at device 0.0 on pci4
igb3: Using 1024 TX descriptors and 1024 RX descriptors
igb3: Using 2 RX queues 2 TX queues
igb3: Using MSI-X interrupts with 3 vectors
igb3: Ethernet address: 40:62:31:09:3d:e8
igb3: netmap queues/slots: TX 2/1024, RX 2/1024
pcib5: <ACPI PCI-PCI bridge> at device 28.4 on pci0
pci5: <ACPI PCI bus> on pcib5
igb4: <Intel(R) I211 (Copper)> port 0xa000-0xa01f mem 0xdf100000-0xdf11ffff,0xdf                                                                  120000-0xdf123fff at device 0.0 on pci5
igb4: Using 1024 TX descriptors and 1024 RX descriptors
igb4: Using 2 RX queues 2 TX queues
igb4: Using MSI-X interrupts with 3 vectors
igb4: Ethernet address: 40:62:31:09:3d:e9
igb4: netmap queues/slots: TX 2/1024, RX 2/1024
pcib6: <ACPI PCI-PCI bridge> at device 28.5 on pci0
pci6: <ACPI PCI bus> on pcib6
igb5: <Intel(R) I211 (Copper)> port 0x9000-0x901f mem 0xdf000000-0xdf01ffff,0xdf                                                                  020000-0xdf023fff at device 0.0 on pci6
igb5: Using 1024 TX descriptors and 1024 RX descriptors
igb5: Using 2 RX queues 2 TX queues
igb5: Using MSI-X interrupts with 3 vectors
igb5: Ethernet address: 40:62:31:09:3d:ea
igb5: netmap queues/slots: TX 2/1024, RX 2/1024
isab0: <PCI-ISA bridge> at device 31.0 on pci0
isa0: <ISA bus> on isab0
pci0: <memory> at device 31.2 (no driver attached)
hdac0: <Intel Kaby Lake-LP HDA Controller> mem 0xdf620000-0xdf623fff,0xdf600000-                                                                  0xdf60ffff at device 31.3 on pci0
acpi_button0: <Sleep Button> on acpi0
acpi_button1: <Power Button> on acpi0
acpi_tz0: <Thermal Zone> on acpi0
acpi_tz1: <Thermal Zone> on acpi0
uart0: <16950 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
uart0: console (115200,n,8,1)
uart1: <16950 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
est0: <Enhanced SpeedStep Frequency Control> on cpu0
Timecounters tick every 1.000 msec
hdacc0: <Intel Kaby Lake HDA CODEC> at cad 2 on hdac0
hdaa0: <Intel Kaby Lake Audio Function Group> at nid 1 on hdacc0
pcm0: <Intel Kaby Lake (HDMI/DP 8ch)> at nid 3 on hdaa0
ugen0.1: <0x8086 XHCI root HUB> at usbus0
uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0
ada0 at ahcich1 bus 0 scbus1 target 0 lun 0
ada0: <KINGSTON SUV500MS240G 003056RA> ACS-4 ATA SATA 3.x device
ada0: Serial Number 50026B76823426D6
ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 512bytes)
ada0: Command Queueing enabled
ada0: 228936MB (468862128 512 byte sectors)
Trying to mount root from ufs:/dev/gpt/rootfs [rw]...
WARNING: /mnt was not properly dismounted
WARNING: /mnt: mount pending error: blocks 480 files 2
Mounting filesystems...
tunefs: soft updates remains unchanged as enabled
WARNING: /mnt: reload pending error: blocks 480 files 2
tunefs: file system reloaded
tunefs: issue TRIM to the disk remains unchanged as enabled
WARNING: /mnt: reload pending error: blocks 480 files 2
tunefs: file system reloaded
** /dev/gpt/rootfs
** Last Mounted on /mnt
** Root file system
** Phase 1 - Check Blocks and Sizes
INCORRECT BLOCK COUNT I=3210266 (80 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210267 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210275 (80 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210280 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210287 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210289 (128 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210290 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210295 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210296 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210297 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=3210299 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=8747910 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=24480957 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=24480958 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=24959796 (64 should be
CORRECT? yes

INCORRECT BLOCK COUNT I=25040632 (8 should be 0)uhub0: 18 ports with 18 removabl                                                                  e, self powered

CORRECT? yes

INCORRECT BLOCK COUNT I=26002953 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26002994 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003005 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003012 (112 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003061 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003063 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003203 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003215 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003217 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003221 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003386 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003393 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003396 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003397 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003725 (32 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26003790 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26083397 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26083401 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26083561 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26083583 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26083609 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26083612 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26083615 (8 should be 0)
CORRECT? yes

INCORRECT BLOCK COUNT I=26083617 (8 should be 0)
CORRECT? yes

** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
LINK COUNT DIR I=3210240  OWNER=root MODE=41777
SIZE=1536 MTIME=Jul 29 08:17 2021  COUNT 11 SHOULD BE 9
ADJUST? yes

ZERO LENGTH DIR I=3210280  OWNER=elasticsearch MODE=40755
SIZE=0 MTIME=Jul 29 08:17 2021
CLEAR? yes

UNREF FILE  I=3210292  OWNER=elasticsearch MODE=100600
SIZE=32768 MTIME=Jul 29 08:17 2021
RECONNECT? yes

LINK COUNT DIR I=3210293  OWNER=www MODE=40750
SIZE=512 MTIME=Jul 29 08:17 2021  COUNT 6 SHOULD BE 2
ADJUST? yes

ZERO LENGTH DIR I=3210295  OWNER=www MODE=40750
SIZE=0 MTIME=Jul 29 08:17 2021
CLEAR? yes

ZERO LENGTH DIR I=3210296  OWNER=www MODE=40750
SIZE=0 MTIME=Jul 29 08:17 2021
CLEAR? yes

ZERO LENGTH DIR I=3210297  OWNER=www MODE=40750
SIZE=0 MTIME=Jul 29 08:17 2021
CLEAR? yes

ZERO LENGTH DIR I=3210299  OWNER=www MODE=40750
SIZE=0 MTIME=Jul 29 08:17 2021
CLEAR? yes

UNREF FILE  I=3210306  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:10 2021
RECONNECT? yes

UNREF FILE  I=24959797  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=24959798  OWNER=root MODE=100644
SIZE=3 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=25040632  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003012  OWNER=unbound MODE=100640
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003013  OWNER=root MODE=100640
SIZE=8720 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003019  OWNER=root MODE=100640
SIZE=8720 MTIME=Jul 29 08:12 2021
RECONNECT? yes

UNREF FILE  I=26003077  OWNER=root MODE=100600
SIZE=16384 MTIME=Jul 29 08:16 2021
RECONNECT? yes

UNREF FILE  I=26003086  OWNER=root MODE=140666
SIZE=0 MTIME=Jul 29 08:16 2021
RECONNECT? yes

UNREF FILE  I=26003096  OWNER=unbound MODE=140666
SIZE=0 MTIME=Jul 29 08:16 2021
RECONNECT? yes

UNREF FILE  I=26003097  OWNER=root MODE=140755
SIZE=0 MTIME=Jul 29 08:16 2021
RECONNECT? yes

LINK COUNT FILE I=26003198  OWNER=unbound MODE=100640
SIZE=758 MTIME=Jul 29 08:17 2021  COUNT 2 SHOULD BE 1
ADJUST? yes

UNREF FILE  I=26003214  OWNER=redis MODE=140700
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003215  OWNER=redis MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

LINK COUNT DIR I=26003222  OWNER=www MODE=40755
SIZE=512 MTIME=Jul 29 08:17 2021  COUNT 5 SHOULD BE 4
ADJUST? yes

UNREF FILE  I=26003223  OWNER=root MODE=100640
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003256  OWNER=root MODE=100640
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003257  OWNER=root MODE=100640
SIZE=8720 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003388  OWNER=root MODE=100640
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003389  OWNER=root MODE=100640
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26003390  OWNER=root MODE=100640
SIZE=8720 MTIME=Jul 29 08:17 2021
RECONNECT? yes

LINK COUNT DIR I=26003988  OWNER=ntopng MODE=40755
SIZE=512 MTIME=Jul 29 08:17 2021  COUNT 6 SHOULD BE 5
ADJUST? yes

LINK COUNT DIR I=26083215  OWNER=root MODE=40755
SIZE=512 MTIME=Jul 29 08:17 2021  COUNT 8 SHOULD BE 5
ADJUST? yes

UNREF FILE  I=26083331  OWNER=ntopng MODE=100600
SIZE=103112 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083379  OWNER=root MODE=140700
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083397  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

NO SPACE LEFT IN /lost+found
EXPAND? yes

UNREF FILE  I=26083401  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083560  OWNER=root MODE=140700
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083561  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083583  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083602  OWNER=root MODE=140700
SIZE=0 MTIME=Jul 29WARNING: /mnt: reload pending error: blocks 480 files 2
 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083609  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083612  OWNER=root MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083615  OWNER=ntopng MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083617  OWNER=elasticsearch MODE=100644
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

UNREF FILE  I=26083622  OWNER=ntopng MODE=100600
SIZE=0 MTIME=Jul 29 08:17 2021
RECONNECT? yes

** Phase 5 - Check Cyl groups
CG 0: BAD CHECK-HASH 0xde412024 vs 0x895c889f
FREE BLK COUNT(S) WRONG IN SUPERBLK
SALVAGE? yes

SUMMARY INFORMATION BAD
SALVAGE? yes

BLK(S) MISSING IN BIT MAPS
SALVAGE? yes

89453 files, 2716093 used, 51766118 free (13278 frags, 6469105 blocks, 0.0% frag                                                                  mentation)

***** FILE SYSTEM STILL DIRTY *****

***** FILE SYSTEM WAS MODIFIED *****

***** PLEASE RERUN FSCK *****
** /dev/gpt/rootfs
** Last Mounted on /mnt
** Root file system
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
89453 files, 2716093 used, 51766118 free (13278 frags, 6469105 blocks, 0.0% frag                                                                  mentation)

***** FILE SYSTEM MARKED CLEAN *****
Setting hostuuid: df5c1420-a65e-11eb-9d93-406231093de5.
Setting hostid: 0x0b2e58a2.
Configuring vt: blanktime.
Configuring crash dump device: /dev/gpt/swapfs
swapon: adding /dev/gpt/swapfs as swap device
.ELF ldconfig path: /lib /usr/lib /usr/local/lib /usr/local/lib/compat/pkg /usr/                                                                  local/lib/compat/pkg /usr/local/lib/ipsec /usr/local/lib/mysql /usr/local/lib/pe                                                                  rl5/5.32/mach/CORE
32-bit compatibility ldconfig path:
done.
>>> Invoking early script 'upgrade'
>>> Invoking early script 'configd'
Starting configd.
>>> Invoking early script 'templates'
Generating configuration: OK
>>> Invoking early script 'backup'
>>> Invoking backup script 'captiveportal'
>>> Invoking backup script 'dhcpleases'
>>> Invoking backup script 'duid'
>>> Invoking backup script 'netflow'
>>> Invoking backup script 'rrd'
>>> Invoking early script 'carp'
CARP event system: OK
Launching the init system...done.
Initializing...........done.
igb0: link state changed to UP
igb2: link state changed to UP
igb3: link state changed to UP
Starting device manager...done.
Configuring login behaviour...done.
Configuring loopback interface...done.
Configuring kernel modules...done.
Setting up extended sysctls...done.
Setting timezone...done.
Writing firmware setting...done.
Writing trust files...done.
Setting hostname: myopnsense.ddns.net
Generating /etc/hosts...done.
Configuring system logging...done.
Configuring loopback interface...done.
Creating wireless clone interfaces...done.
Configuring VLAN interfaces...done.
Creating OpenVPN instances...done.
Configuring VLAN50_SMART interface...done.
Configuring VLAN70_WLAN_GAST interface...done.
Configuring VLAN100_LAN_GAST interface...done.
Configuring igb0_LAN_WLAN_HOME interface...done.
Configuring igb2_LAN_GAST interface...done.
Configuring igb3_DMZ interface...done.
Configuring igb4_LABOR interface...done.
Configuring igb1_WAN interface...done.
Creating IPsec VTI instances...done.
Generating /etc/resolv.conf...done.
Configuring firewall.......done.
Starting PFLOG...done.
Configuring OpenSSH...done.
Starting web GUI...done.
Configuring CRON...done.
Setting up routes...done.
Generating /etc/hosts...done.
Starting DHCPv4 service...done.
Starting Unbound DNS...done.
Setting up gateway monitors...done.
Configuring firewall.......done.
Starting PFLOG...done.
Syncing OpenVPN settings...done.
Configuring dynamic DNS clients...done.
Starting NTP service...done.
Starting Unbound DNS...done.
Generating RRD graphs...done.
Configuring system logging...done.
>>> Invoking start script 'newwanip'
Reconfiguring IPv4 on ovpns1: OK
Reconfiguring routes: OK
>>> Invoking start script 'freebsd'
Certificates generated /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem

• ifconfig wg create name wg0
[!] Missing WireGuard kernel support (ifconfig: SIOCIFCREATE2: Invalid argument). Falling back to slow userspace implementation.

• wireguard-go wg0

┌───────────────────────────────────────────────────────
│                                                      │
│   Running wireguard-go is not required because this  │
│   kernel has first class support for WireGuard. For  │
│   information on installing the kernel module,       │
│   please visit:                                      │
│         https://www.wireguard.com/install/           │
│                                                      │
└───────────────────────────────────────────────────────

• wg setconf wg0 /dev/stdin

Warning: AllowedIP has nonzero host part: 100.65.1.2/24

• ifconfig wg0 inet 100.65.1.0/24 alias

route: route has not been found

• ifconfig wg0 mtu 1420
• ifconfig wg0 up
• resolvconf -a wg0 -x
• Backgrounding route monitor
• ifconfig wg create name wg1
[!] Missing WireGuard kernel support (ifconfig: SIOCIFCREATE2: Invalid argument). Falling back to slow userspace implementation.

• wireguard-go wg1

┌───────────────────────────────────────────────────────
│                                                      │
│   Running wireguard-go is not required because this  │
│   kernel has first class support for WireGuard. For  │
│   information on installing the kernel module,       │
│   please visit:                                      │
│         https://www.wireguard.com/install/           │
│                                                      │
└───────────────────────────────────────────────────────

• wg setconf wg1 /dev/stdin

Warning: AllowedIP has nonzero host part: 100.66.1.2/24

• ifconfig wg1 inet 100.66.1.0/24 alias

route: route has not been found

• ifconfig wg1 mtu 1420
• ifconfig wg1 up
• resolvconf -a wg1 -x
• Backgrounding route monitor
• ifconfig wg create name wg2
[!] Missing WireGuard kernel support (ifconfig: SIOCIFCREATE2: Invalid argument). Falling back to slow userspace implementation.

• wireguard-go wg2

┌───────────────────────────────────────────────────────
│                                                      │
│   Running wireguard-go is not required because this  │
│   kernel has first class support for WireGuard. For  │
│   information on installing the kernel module,       │
│   please visit:                                      │
│         https://www.wireguard.com/install/           │
│                                                      │
└───────────────────────────────────────────────────────

• wg setconf wg2 /dev/stdin
• ifconfig wg2 inet 100.67.1.1/24 alias

route: route has not been found

• ifconfig wg2 mtu 1420
• ifconfig wg2 up
• resolvconf -a wg2 -x
• route -q -n add -inet 100.67.1.3/32 -interface wg2
• route -q -n add -inet 100.67.1.2/32 -interface wg2
• Backgrounding route monitor

Starting suricata.
29/7/2021 -- 08:47:52 - <Info> - Including configuration file installed_rules.yaml.
29/7/2021 -- 08:47:52 - <Info> - Configuration node 'rule-files' redefined.
29/7/2021 -- 08:47:52 - <Info> - Including configuration file custom.yaml.
usage: kill [-s signal_name] pid ...
       kill -l [exit_status]
       kill -signal_name pid ...
       kill -signal_number pid ...
Starting senpai.
Starting redis.
Starting ntopng.
29/Jul/2021 08:47:55 [Ntop.cpp:2347] Setting local networks to 127.0.0.0/8,fe80::/10
29/Jul/2021 08:47:55 [Redis.cpp:162] Successfully connected to redis 127.0.0.1@0
29/Jul/2021 08:47:55 [Redis.cpp:162] Successfully connected to redis 127.0.0.1@0
29/Jul/2021 08:47:56 [Ntop.cpp:2287] Parent process is exiting (this is normal)
WARNING: attempt to domain_add(netgraph) after domainfinalize()
setup igb0
setup igb1 [egress only]
/usr/local/etc/rc.d/haproxy: WARNING: /usr/local/etc/haproxy.conf is not readable.
/usr/local/etc/rc.d/haproxy: WARNING: failed precmd routine for haproxy
Starting flowd_aggregate.
Starting flowd.
Starting elasticsearch.
usage: kill [-s signal_name] pid ...
       kill -l [exit_status]
       kill -signal_name pid ...
       kill -signal_number pid ...
No matching processes were found
/dev/md43: 50.0MB (102400 sectors) block size 32768, fragment size 4096
        using 4 cylinder groups of 12.53MB, 401 blks, 1664 inodes.
        with soft updates
super-block backups (for fsck_ffs -b #) at:
 192, 25856, 51520, 77184
Starting eastpect.
Starting acme_http_challenge.
ipfw2 (+ipv6) initialized, divert loadable, nat loadable, default to accept, logging disabled
load_dn_sched dn_sched FIFO loaded
load_dn_sched dn_sched QFQ loaded
load_dn_sched dn_sched RR loaded
load_dn_sched dn_sched WF2Q+ loaded
load_dn_sched dn_sched PRIO loaded
load_dn_sched dn_sched FQ_CODEL loaded
load_dn_sched dn_sched FQ_PIE loaded
load_dn_aqm dn_aqm CODEL loaded
load_dn_aqm dn_aqm PIE loaded
Bump flowset buckets to 256 (was 0)
Bump flowset buckets to 256 (was 0)
289.225276 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
289.239980 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
pf disabled
pf enabled
Firewall rules loaded.
289.461807 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
Starting API dispatcher
Install : zone 0
overlay user template package for zone 0
Traceback (most recent call last):
  File "/usr/local/opnsense/scripts/OPNsense/CaptivePortal/overlay_template.py", line 46, in <module>
    zip_content = base64.b64decode(template_data)
  File "/usr/local/lib/python3.8/base64.py", line 87, in b64decode
    return binascii.a2b_base64(s)
binascii.Error: Invalid base64-encoded string: number of data characters (1285173) cannot be 1 more than a multiple of 4
Start : zone 0
2021-07-29T08:48:11.319071+02:00 XXXXXXXXXXX.ddns.net lighttpd 99013 - - (server.c.1513) server started (lighttpd/1.4.59)
start captiveportal background process
>>> Invoking start script 'syslog-ng'
Stopping syslog_ng.
Waiting for PIDS: 4769.
Starting syslog_ng.
>>> Invoking start script 'c-icap'
Cannot 'start' c_icap. Set c_icap_enable to YES in /etc/rc.conf or use 'onestart' instead of 'start'.
>>> Invoking start script 'ntopng'
ntopng already running?  (pid=15787).
>>> Error in start script 'ntopng'
>>> Invoking start script 'wireguard'
Setting up routes...sending datagram to 127.0.0.1:2056 failed: Permission denied
405.180179 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
405.205442 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
406.619985 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048[/s][/s]


Zugriff auf die Routes verweigert, hmm, ich kann damit nichts anfangen, aber vielleicht hilft die Fehlermeldung

Also neu installieren und Backup einspielen. Melde mich ob das funktioniert.

Viele Grüße und einen schönen Start in den Tag  :)

[Markus_MSP]

Tja, eine Neuinstallation hat erstmal funktioniert. Restore der OPNsense Konfig hat auch funktioniert.

ABER: Sobald wieder Sensei ins Spiel kommt, war es das, schon wieder mal Sensei. Danach keine Möglichkeit mehr auf die GUI zu kommen etc. Sämtliche Dienste auf der Sense laufen dann auch nicht mehr.

Sensei ist mit ElasticSearch DB installiert.

Also wieder auf ein Update der Sensei warten 

[mrk45k]

Jepp, ich habe auch Probleme
Bei mir hing es immer im "Configuring VLAN interfaces..." als ich es aus dem Web GUI installiert hatte nach dem boot.

Selbst eine Neuinstallation ging nicht mit 21.7. Da hing immer der Installer nach der Auswahl der Partitionsart.
Also direkt im ersten Schritt.

Bin wieder zurück auf 21.1...2h meines Lebens verschwendet. Schade!

[franco]

Beim Boot "kernel.old" auswählen dann klappt es erstmal mit dem 21.7.

Ist wohl mit einer Änderung aus FreeBSD hinzugekommen. Genaueres wissen wir noch aktuell noch nicht.


Grüsse
Franco

[mrk45k]

Mein Vlan Problem scheint wohl ein igb Schnittstellen (Treiber) Problem zu sein.
Im Englischenbereich habe ich folgendes gefunden:
https://forum.opnsense.org/index.php?topic=23867.msg115473#msg115473

Da ich aber auch Sensei nutze, werde ich das Ganze erst einmal solange verschieben bis Sunnyvalley was neueres hat. Weil vermutlich spätestens dann wäre ich in die oben schon gennanten Probleme gerauscht.

[mrk45k]

Sunnyvalley hat schon nachgeschoben mit 1.9.3.
Habe es so wie aus dem Englischenbereich lauffähig bekommen.
Zudem habe ich sensei auf passiv gestellt und gestopt.
Dann mit dem Web GUI installiert.
Danach Sensei update geladen. Das sieht man nicht unter 21.1.
Sensei läuft jetzt auch mit dem Update.