OPNCentral cannot provision somes services since 25.10.1 Business

[nono]

We rely on OPNCentral to keep our both mains firewall (recently updated to 25.10.1) and it seems that OPNCentral isn't able to sync few services (like Firewall Rules, NAT, etc).
We're using wireguard connection between the two firewall which are UP but I do not find any related logs so I'm wondering is anyone else faced the same issue ?

[franco]

Are all nodes up to date?

We were discussing the same here:

https://www.reddit.com/r/opnsense/comments/1pj2uvz/comment/ntbofdo/


Cheers,
Franco

[nono]

Are all nodes up to date?

Yes. Not at the first point, but now it is and it's still the same.
Note: I noticed that the "Network Time" wasn't sync at one point which is now the case. I obviously didn't change anything in regards of time so I'm wondering if this could have any link.
Note: Sorry I (d|w)on't have a reddit account

[franco]

Yes, this was a target fix for syncing network time servers (and other flat values described in XMLRPC sync data).

So the problem continues when all nodes are up to date?

In that case can you downgrade OPNBEcore everywhere?

# opnsense-revert -r 25.10p1 os-OPNBEcore

I don't mind removing the change via hotfix later today if it has these unforeseen issues, but I'd like to be 100% sure that is the problem.


Cheers,
Franco

[nono]

I can confirm that the issue continues when all nodes are up to date.

But I'm not willing to downgrade my productive nodes honestly ... They are "heavily" used for business purpose so this is something I would like to avoid.

[franco]

The downgrade is painless and on the fly. It only replaces the bad plugin update. Just need to issue the following command on each node in the shell:

# opnsense-revert -r 25.10p1 os-OPNBEcore


Cheers,
Franco

[franco]

On Reddid we concluded the troubleshooting and now 25.10.1 offers an updated OPNBEcore package which reverts the bad code for the time being.


Cheers,
Franco