Update hangs with "403 Forbidden" error

[guywyers]

I performed an upgrade from the 19.7 to the 19.7.7 version and I'm getting stuck during the upgrade with the system showing exactly the same behaviour as shown here (https://forum.opnsense.org/index.php?topic=10689.msg48752#msg48752) and here (https://forum.opnsense.org/index.php?topic=10386.0). Concretely:

• The update hangs for a long time ("Updating... Please wait")
• Web gui is no longer accessible, even after a long time, showing error "403 Forbidden"
• Console access is no longer possible, showing error message mentioned above: "sh: /usr/local/sbin/opnsense-auth: not found"
• Reboot completely turns the device unresponsive

Recovery consists of a clean install from (19.7) installation media (USB in my case) with a recovery of my configuration.

Any ideas what's happening and how I can fix this?

Thanks.

[d0zr]

The fix for the update process being denied access to the repo is to go to System>Firmware>Updates>Settings, and select a different mirror.

Did/Do you have any PPPoE interfaces configured?  I found that changing a PPPoE config (setup in 19.1, but then upgraded to 19.7), on one of my ethernet connections to use plain DHCP, caused the 19.7 host to crash and reboot. (Note: I also had another interface (OPT6) assigned (disabled) to the same adapter, so I could access the modem on occasion, whilst also running the PPPoE based WAN through it).

I imagine that had I disabled/deleted the PPPoE interface first, then changed the opt interface to DHCP it would have been alright.  As it was I just reconfigured the WAN with the interface enabled so might have upset all kinds of services, particularly Suricata, working with the current and active WAN.

Anyhow, it could be that reassigning your interfaces afresh will prevent crashing and overwrite some previous config causing it.

[franco]

Yeah, see https://forum.opnsense.org/index.php?topic=15452.msg70447#msg70447

[guywyers]

Thanks guys.

I changed the mirror and was able to perform the update.

However I couldn't recall the fact that I had ever selected a download mirror and when I went to the location indicated, there was no specific mirror mentioned. It simply showed "(default)".

I did change it to some explicit location and got the update done, but it does seem strange to me. No?