Update firmware in terminal | transfer timed out (20.7)

[networkfan]

Hi,

I'm new on OPNsense and install it into a VM.

For some reason the system can not load the updates:

Code: [Select]

Fetching change log information, please wait... fetch: transfer timed outFound this topic [1] and verify prefer IPv4 over IPv6 is set.

Ping on terminal to opnsense.org is ok, so internet connection working.
Any idea?

[1] https://forum.opnsense.org/index.php?topic=6097.0

Edit: Download a image with curl on the OPNsense terminal work also, but has a delay of 8-9 seconds.
Look like there is a problem on the DNS, maybe the timeout of the updater is to short?

[franco]

"fetch:" means libfetch so something is wrong. curl is not an appropriate test, try to download the same image using "fetch" utility instead:

# fetch -v "URL"


Cheers,
Franco

[networkfan]

Hi Franco,

thanks for reply.

fetch -v URL works as expected, test file is downloaded:

Code: [Select]

root@OPNsense:/tmp # fetch -v https://mirror.dns-root.de/opnsense/releases/20.7/OPNsense-20.7-OpenSSL-nano-amd64.img.bz2
resolving server address: mirror.dns-root.de:443
SSL options: 82004854
Peer verification enabled
Using CA cert file: /usr/local/etc/ssl/cert.pem
Verify hostname
TLSv1.3 connection established using TLS_AES_256_GCM_SHA384
Certificate subject: /C=US/ST=CA/L=San Francisco/O=Cloudflare, Inc./CN=sni.cloudflaressl.com
Certificate issuer: /C=US/O=Cloudflare, Inc./CN=Cloudflare Inc ECC CA-3
requesting https://mirror.dns-root.de/opnsense/releases/20.7/OPNsense-20.7-OpenSSL-nano-amd64.img.bz2
remote size / mtime: 443121899 / 1596067234
OPNsense-20.7-OpenSSL-nano-amd64.img.bz2               422 MB 8726 kBps    49s
root@OPNsense:/tmp #
But update do not work:

Code: [Select]

Enter an option: 12

Fetching change log information, please wait... fetch: transfer timed out
fetch: /tmp/changelog/changelog.txz.sig appears to be truncated: 0/1332 bytes

This will automatically fetch all available updates, apply them,
and reboot if necessary.

This update requires a reboot.

Proceed with this action? [y/N]:

*** OPNsense.localdomain: OPNsense 20.7 (amd64/OpenSSL) ***
Oh, maybe only the changelog is the problem, try it with "Proceed with this action? [y/N]:y"...

[networkfan]

Look like it works 

Code: [Select]

Proceed with this action? [y/N]: y

Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating database digests format: .......... done
New version of pkg detected; it needs to be installed first.
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
pkg: 1.12.0_1 -> 1.15.10_2

Number of packages to be upgraded: 1

4 MiB to be downloaded.
[1/1] Fetching pkg-1.15.10_2.txz: .......... done
Checking integrity... done (0 conflicting)
[1/1] Upgrading pkg from 1.12.0_1 to 1.15.10_2...
[1/1] Extracting pkg-1.15.10_2: .......... done
pkg-static: Failed to execute lua script: [string "args = {}..."]:11: attempt to call a nil value (field 'stat')
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (103 candidates): .......... done
Processing candidates (103 candidates): ....... done
The following 77 package(s) will be affected (of 0 checked):

[franco]

Yes looks good, the default answer to that question is "N"(o)


Cheers,
Franco

[franco]

PS: not sure what's wrong with the changelog. Normally it could be a proxy filtering out the binary signature...

[networkfan]

Yes looks good, the default answer to that question is "N"(o)

...yes   

Code: [Select]

OPNsense 20.7.8-amd64
FreeBSD 12.1-RELEASE-p12-HBSD
OpenSSL 1.1.1i 8 Dec 2020
Edit:
Update over GUI/Terminal still show the same error, maybe snort in front of OPNsense block something (even if i don't see an alert...).

[networkfan]

@ franco,

thank you for the help, my donation is on the way.

[franco]

No final response back then so I guess this started to work afterwards? Thanks!


Cheers,
Franco

[networkfan]

Yes works.

My OPNSense test setup was behind a pfSense and not all necessary ports was open (tcpdump show the issue).
OPNSense is really interesting!

[franco]

Ah ok nice to hear that was easy to track down.


Cheers,
Franco