[SOLVEd] Upgrade – new version is lower than current

[pitsail]

Couple of days ago I've encountered strange situation. I've run 'Check for updates' and got this:

Package Name	Current Version	New Version	Required Action
base	20.7.6	20.7.4	upgrade
kernel	20.7.6	20.7.4	upgrade

Does it really mean I should downgrade these packages to upgrade system (and finally get to 21.1) ?

Any ideas?

[franco]

Not enough information. What version do you have currently? Thing is 20.7.8 is most recent and thus you shoudn't see 20.7.6 or 20.7.4 if your mirror is up to date.


Cheers,
Franco

[pitsail]

Current version (from Dashboard)

Code: [Select]

Versions      OPNsense 20.7.7_1-amd64
FreeBSD      12.1-RELEASE-p11-HBSD
OpenSSL     1.1.1i 8 Dec 2020

Mirror is Deciso (Commercial).

There are errors in health audit concerning version mismatches, see below.

Code: [Select]

***GOT REQUEST TO AUDIT HEALTH***
>>> Check installed kernel version
Version 20.7.6 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 20.7.6 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check for and install missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .....
opnsense-20.7.7_1: checksum mismatch for /usr/local/opnsense/service/templates/OPNsense/IDS/suricata.yaml
Checking all packages........ done
>>> Check for core packages consistency
Checking core packages: ......
dhcp6c-20200512_1 version mismatch, expected 20200512
Checking core packages: .............
lighttpd-1.4.56 version mismatch, expected 1.4.55_1
Checking core packages: ....
openssh-portable-8.4.p1_3,1 version mismatch, expected 8.2.p1_2,1
Checking core packages: ..
opnsense-20.7.7_1 version mismatch, expected 20.7.5
Checking core packages: ..
opnsense-update-20.7.6 version mismatch, expected 20.7.4
Checking core packages: ...
php73-ctype-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-curl-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-dom-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-filter-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-gettext-7.3.25 version mismatch, expected 7.3.24
Checking core packages: ..
php73-hash-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-json-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-ldap-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-openssl-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-pdo-7.3.25 version mismatch, expected 7.3.24
Checking core packages: ....
php73-session-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-simplexml-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-sockets-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-sqlite3-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-xml-7.3.25 version mismatch, expected 7.3.24
Checking core packages: .
php73-zlib-7.3.25 version mismatch, expected 7.3.24
Checking core packages: ..
py37-Jinja2-2.11.2_1 version mismatch, expected 2.11.2
Checking core packages: ..........
strongswan-5.9.1 version mismatch, expected 5.9.0
Checking core packages: .
sudo-1.9.4_1 version mismatch, expected 1.9.3p1
Checking core packages: .
suricata-5.0.5 version mismatch, expected 5.0.4
Checking core packages: .
syslog-ng-3.30.1_1 version mismatch, expected 3.29.1_2
Checking core packages: .... done
***DONE***

Full output of Update check (fresh):

Code: [Select]

Package Name Current Version New Version Required Action
base 20.7.6 20.7.4 upgrade
java-zoneinfo 2020.a 2020.d upgrade
kernel 20.7.6 20.7.4 upgrade
openjdk8 8.265.01.1 8.275.01.1 upgrade
os-sensei 1.6.2 1.7 upgrade
os-sensei-updater 1.6 1.7 upgrade

And yes, i just wanted to update to 20.7.8 and then 21.1.
But now i'm a bit confused...

Peter

[franco]

Hi Peter,

Are you a business customer that you use the commercial mirror?

Business edition is at 20.7.5 so it reverting back to 20.7.4 for base/kernel is correct.

However, having installed 20.7.6 it looks like you flipped mirrors to the community version.

Now back on the business mirror you can't get to 20.7.8 and 21.1 as of now....


Cheers,
Franco

[pitsail]

Yes i'm.

I guess that installing fresh 21.1 (and restoring config) should be most secure and let me avoid potential problems with down/up/down (an so on) ...gradig.

Am I correct?

Thank You
Peter

[franco]

Hi Peter,

No, if you want 21.1 simply switch to default mirror and fetch updates to 20.7.8, then 21.1.

You can export a backup before the 21.1 jump just to be sure.


Cheers,
Franco

[pitsail]

Thanks for your help.
I'll give it a try tomorrow.

Peter

[pitsail]

The problem was, as you suggested,  mirror change in the past...
My fault.

Finally i,ve installed 20.7 to have OPNSense with commercial Deciso mirror.
The big plus is that i managed to do it with nvme drive (just had to upgrade mainboard BIOS).

Can you predict avaiability of 21.1 in commercial branch?

[franco]

20.7.8 should hit business repo any day now, but for 21.1 we will give it a few point releases first.


Cheers,
Franco