24.1 Bug report

[franco]

There's no use removing a required package by os-squid as it would probably end up removing the web proxy which is probably in use. ;)


Cheers,
Franco

[newsense]

Ah forgot about os-squid, I only tried installing squid and it didn't appear to pull the langpack

[knowHoff]

I've checked the opnsense instance which is not showing "wireguard-mod".

This lists the same packages within upgrade.log

Code Select Expand

Installed packages to be REINSTALLED:
...
wireguard-kmod-0.0.20220615_1

what can I do to "get rif of "wireguard-kmod" in packages? is this of relevance or can it be ignored?

about squid:
I've compared the log of the other box and found this:

Code Select Expand

Using existing user 'squid'.
===> Creating homedir(s)
===> Pre-installation configuration for squid-6.6
[186/188] Extracting squid-6.6: .......... done
pkg-static: Fail to rename /usr/local/sbin/.pkgtemp.purge.lGBOIJF84C8k -> /usr/local/sbin/purge:No such file or directory

I'm not using a web proxy on either of both installations.

I have the possibility to reinstall from scratch but would like to avoid this.
OPNSense is now running since 2019, applying all updates worked with each step further.

How can I continue to troubelshoot?

[franco]

Is wireguard-kmod even installed anymore? It was a dependency of os-wireguard at one point but no longer needed unless you installed it manually which makes it "sticky".

As for squid it's probably messing up a few things for the package manager. I've made the cleanup routine more aggressive...

# /usr/local/etc/rc.syshook.d/update/10-refresh

And try again.


Cheers,
Franco

[knowHoff]

thanks franco!

I'v logged in as root, ran

Code Select Expand

root@OPNsense:/usr/local/etc/rc.syshook.d/update # ./10-refresh


getting:

Code Select Expand

Writing firmware settings: FreeBSD OPNsense
Writing trust files...done.
Scanning /usr/share/certs/blacklisted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring system logging...done.

rebooted the firewall and ran health report, still getting the squid error:

Code Select Expand

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.1_1 at Thu Feb  1 17:12:28 CET 2024
>>> Root file system: /dev/gpt/rootfs
>>> Check installed kernel version
Version 24.1 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.1 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense
>>> Check installed plugins
os-apcupsd 1.1
os-chrony 1.5_1
os-ddclient 1.20_1
os-realtek-re 1.0
os-theme-rebellion 1.8.9
os-wol 2.4_2
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .........
squid-langpack-7.0.0.20230225: missing file /usr/local/share/squid-langpack/af/ERR_ACCESS_DENIED
Checking all packages.... done
>>> Check for core packages consistency
Core package "opnsense" has 68 dependencies to check.
Checking packages: ..................................................................... done
***DONE***

I've checked the dir content of "/usr/local/share/squid-langpack/af"
and get this, "ERR_ACCESS_DENIED" is not there:

Code Select Expand

root@OPNsense:/usr/local/share/squid-langpack/af # ls -la
total 180
drwxr-xr-x   2 root  wheel  3584 Feb  1 13:57 .
drwxr-xr-x  48 root  wheel  1024 Nov 17 17:39 ..
-rw-r--r--   1 root  wheel  1320 Feb 25  2023 ERR_ACL_TIME_QUOTA_EXCEEDED
-rw-r--r--   1 root  wheel  1639 Feb 25  2023 ERR_AGENT_CONFIGURE
-rw-r--r--   1 root  wheel  1598 Feb 25  2023 ERR_AGENT_WPAD
-rw-r--r--   1 root  wheel  1156 Feb 25  2023 ERR_CACHE_ACCESS_DENIED
-rw-r--r--   1 root  wheel  1314 Feb 25  2023 ERR_CACHE_MGR_ACCESS_DENIED
-rw-r--r--   1 root  wheel  1477 Feb 25  2023 ERR_CANNOT_FORWARD
-rw-r--r--   1 root  wheel  1399 Feb 25  2023 ERR_CONFLICT_HOST
-rw-r--r--   1 root  wheel  1175 Feb 25  2023 ERR_CONNECT_FAIL
-rw-r--r--   1 root  wheel  1030 Feb 25  2023 ERR_DIR_LISTING
-rw-r--r--   1 root  wheel  1267 Feb 25  2023 ERR_DNS_FAIL
-rw-r--r--   1 root  wheel  1209 Feb 25  2023 ERR_ESI
-rw-r--r--   1 root  wheel  1179 Feb 25  2023 ERR_FORWARDING_DENIED
-rw-r--r--   1 root  wheel  1063 Feb 25  2023 ERR_FTP_DISABLED
-rw-r--r--   1 root  wheel  1148 Feb 25  2023 ERR_FTP_FAILURE
-rw-r--r--   1 root  wheel  1157 Feb 25  2023 ERR_FTP_FORBIDDEN
-rw-r--r--   1 root  wheel  1306 Feb 25  2023 ERR_FTP_NOT_FOUND
-rw-r--r--   1 root  wheel   716 Feb 25  2023 ERR_FTP_PUT_CREATED
-rw-r--r--   1 root  wheel  1261 Feb 25  2023 ERR_FTP_PUT_ERROR
-rw-r--r--   1 root  wheel   720 Feb 25  2023 ERR_FTP_PUT_MODIFIED
-rw-r--r--   1 root  wheel  1137 Feb 25  2023 ERR_FTP_UNAVAILABLE
-rw-r--r--   1 root  wheel  1278 Feb 25  2023 ERR_GATEWAY_FAILURE
-rw-r--r--   1 root  wheel  1268 Feb 25  2023 ERR_ICAP_FAILURE
-rw-r--r--   1 root  wheel  1852 Feb 25  2023 ERR_INVALID_REQ
-rw-r--r--   1 root  wheel  1275 Feb 25  2023 ERR_INVALID_RESP
-rw-r--r--   1 root  wheel  1394 Feb 25  2023 ERR_INVALID_URL
-rw-r--r--   1 root  wheel  1125 Feb 25  2023 ERR_LIFETIME_EXP
-rw-r--r--   1 root  wheel  1090 Feb 25  2023 ERR_NO_RELAY
-rw-r--r--   1 root  wheel  1296 Feb 25  2023 ERR_ONLY_IF_CACHED_MISS
-rw-r--r--   1 root  wheel  1083 Feb 25  2023 ERR_PRECONDITION_FAILED
-rw-r--r--   1 root  wheel  1122 Feb 25  2023 ERR_PROTOCOL_UNKNOWN
-rw-r--r--   1 root  wheel  1179 Feb 25  2023 ERR_READ_ERROR
-rw-r--r--   1 root  wheel  1238 Feb 25  2023 ERR_READ_TIMEOUT
-rw-r--r--   1 root  wheel  1432 Feb 25  2023 ERR_SECURE_CONNECT_FAIL
-rw-r--r--   1 root  wheel  1056 Feb 25  2023 ERR_SHUTTING_DOWN
-rw-r--r--   1 root  wheel  1176 Feb 25  2023 ERR_SOCKET_FAILURE
-rw-r--r--   1 root  wheel  1355 Feb 25  2023 ERR_TOO_BIG
-rw-r--r--   1 root  wheel  1077 Feb 25  2023 ERR_UNSUP_HTTPVERSION
-rw-r--r--   1 root  wheel  1106 Feb 25  2023 ERR_UNSUP_REQ
-rw-r--r--   1 root  wheel  1084 Feb 25  2023 ERR_URN_RESOLVE
-rw-r--r--   1 root  wheel  1181 Feb 25  2023 ERR_WRITE_ERROR
-rw-r--r--   1 root  wheel  1074 Feb 25  2023 ERR_ZERO_SIZE_OBJECT
-rw-r--r--   1 root  wheel  7409 Feb 25  2023 error-details.txt

I've compared this to the other opnsense.
Here I don't have "squid-langpack" dir within /usr/local/share/

My idea was to copy "ERR_ACCESS_DENIED" from there.

wireguard-kmod is still available.
Initially (in 2019) wireguard was installed through plugin section as a plugin.
I did not install wireguard-kmod manually or "locked" it.

[franco]

So in any case wireguard-kmod is safe to remove:

# pkg remove wireguard

And reinstall squid-langpack... the cleanup cleans up the garbage that pkg leaves behind which breaks itself later...

# opnsense-revert squid-langpack


Cheers,
Franco

[knowHoff]

Thanks franco!

squid error is gone!

pkg remove wireguard throws:

Code Select Expand

root@OPNsense:~ # pkg remove wireguard
No packages matched for pattern 'wireguard'

Checking integrity... done (0 conflicting)
1 packages requested for removal: 0 locked, 1 missing


wireguard-kmod still there.

I'm afk for today and check back tomorrow noon CET.

Cheers

[franco]

Sorry, obviously it needs to be this:

# pkg remove wireguard-kmod

;)

[knowHoff]

 ;D obviously!

it worked, thanks a lot!

Cheers

[zunami]

i have the same problem after the update to 24.1 that this wireguard error came up when booting.

Code Select Expand

fatal Terror uncaught class opnsense\wireguard\Server not found in /usr/local/etc/inc/plugins.inc.d/wireguard.inc:104
Stack trace:
#0 /usr/local/etc/inc/plugins. Inc(106): wireguard_devices()
#1 /usr/local/etc/inc/iconsole.inc(59): plugins_devices()
#2 /usr/local/etc/rc.bootup(74): is_interface_mismatch()
#3 {Main} thrown in /usr/local/etc/inc/plugins.inc.d/wireguard.inc on line 104
enter full path of shell or Return for /bin/sh

only it should be different for me. the boot process is completely cancelled from this moment on. i can neither access via lan nor via wan. i have no internet connection. i can only work via console.

I have
pkg remove wireguard
pkg remove wireguard-plugin
pkg remove wireguard-kmod
and i got the message

Code Select Expand

Checking integrity... done (0 conflicting)
1 packages requested for removal: 0 locked, 1 missing

how can I solve this problem?

[franco]

Do a health audit and reinstall the "opnsense" package. You clearly have missing files.


Cheers,
Franco