Firmware upgrade from 26.1.11_10 to 26.7.3_11

Started by turipriv, September 13, 2026, 11:15:04 AM

Previous topic - Next topic
OK, this time it took me a bit longer than usual to upgrade, given the reported CPU microcode issues.

Today, I finally decided to take the leap and go ahead with the upgrade.

For what it's worth, this is the path I've taken:

 - Uninstalled os-cpu-microcode-intel plugin
 - Upgraded from 26.1.11_10 to 26.7
 - Automatic reboot
 - Upgraded from 26.7 to 26.7.3_11
 - Automatic reboot
 - Reinstalled os-cpu-microcode-intel plugin
 - Manual reboot

My unit works like a charm; all services loaded and no issues whatsoever; hardware and running features as per signature.

For the sake of completeness, the microcode plugin is currently running in late load mode.

Usual round of applause to the team and the community for yet another amazing release.
[HW]
Protectli VP2420
16GB RAM
240 GB SSD

[Versions]
OPNsense 26.7.3_11-amd64
FreeBSD 15.1-RELEASE-p3
OpenSSL 3.5.8

[Feature set]
Unbound DNS
Kea DHCPv4
Suricata IPS (Divert mode)
Wireguard Client VPN
HAProxy

Thanks for the feedback.  Happy to hear!  :)


Cheers,
Franco

September 13, 2026, 09:02:10 PM #2 Last Edit: September 13, 2026, 09:05:07 PM by tangofan
Quote from: turipriv on September 13, 2026, 11:15:04 AMMy unit works like a charm; all services loaded and no issues whatsoever; hardware and running features as per signature.

For the sake of completeness, the microcode plugin is currently running in late load mode.

If you ever want to run the microcode plugin in early load mode, my understanding is that you need to upgrade the bootloader first, which essentially involves copying some files from one OPNsense directory to another. While I also run the microcode plugin with default settings (late mode IIRC), I did go through those steps, since I figured that it doesn't hurt to get my bootloader current.

My upgrade was similarly smooth (perhaps due to uninstalling the microcode plugin first) and I applaud the team for their ability to manage the ever shifting sands of their foundations (FreeBSD, etc.) and still provide a smooth experience with minimal manual steps (provided one reads the release notes, of course).

Quote from: turipriv on September 13, 2026, 11:15:04 AM- Uninstalled os-cpu-microcode-intel plugin
 - Upgraded from 26.1.11_10 to 26.7
 - Automatic reboot
- I would have upgraded my FreeBSD Bootloader at this point to avoid any issues in the future !!
 - Upgraded from 26.7 to 26.7.3_11
 - Automatic reboot
 - Reinstalled os-cpu-microcode-intel plugin
 - Manual reboot
:)
Weird guy who likes everything Linux and *BSD on PC/Laptop/Tablet/Mobile and funny little ARM based boards :)

Quote from: nero355 on September 13, 2026, 10:11:24 PM
Quote from: turipriv on September 13, 2026, 11:15:04 AM- Uninstalled os-cpu-microcode-intel plugin
 - Upgraded from 26.1.11_10 to 26.7
 - Automatic reboot
- I would have upgraded my FreeBSD Bootloader at this point to avoid any issues in the future !!
 - Upgraded from 26.7 to 26.7.3_11
 - Automatic reboot
 - Reinstalled os-cpu-microcode-intel plugin
 - Manual reboot
:)

Good point, but as I said, I am late-loading the microcode.

Also, I had enough emotions for a Sunday already without upgrading the bootloader... ;P

Jokes aside, upgrading the bootloader is the next planned step, but I'm a couch potato and didn't want to remove my FW from the rack in case anything went wrong.
[HW]
Protectli VP2420
16GB RAM
240 GB SSD

[Versions]
OPNsense 26.7.3_11-amd64
FreeBSD 15.1-RELEASE-p3
OpenSSL 3.5.8

[Feature set]
Unbound DNS
Kea DHCPv4
Suricata IPS (Divert mode)
Wireguard Client VPN
HAProxy

Quote from: turipriv on Today at 11:12:29 AMupgrading the bootloader is the next planned step, but I'm a couch potato and didn't want to remove my FW from the rack in case anything went wrong.
If you came this far then it should be worry free IMHO : I have just updated mine! :)
Weird guy who likes everything Linux and *BSD on PC/Laptop/Tablet/Mobile and funny little ARM based boards :)

Today at 07:41:52 PM #6 Last Edit: Today at 07:45:16 PM by KHatfull
Last night (or should I say this morning, 3:00a is morning right?) I went from 26.7.1_1 to 26.7.3_11.  No issues.

  • os-intel-microcode not installed
  • removed theme plugins
  • grabbed a config export
  • ZFS snapshot
  • Ran the upgrade, one boot, all good
  • Copied the bootloader files to the secondary ZFS mirror disk
  • Rebooted, all good.

Process took less than 10 minutes.  All services just fine.

This is how I remember OPNsense upgrades going :)