Update Error

[jimjohn]

Hi, got an error when updating my OPNsense. It seems stuck somewhere between 21.7.4 and 21.7.6. I suppose it happened due to an aborted update.

When updating, it tries to update the "base" and "kernel" packages, everything else seems to be the newest version available. It declares "no signature found" while / after fetching the packages and does not proceed with updating as a consequence of that. What can I do?

Versions:

Code: [Select]

base 21.7.4
kernel 21.7.4
Update output:

Code: [Select]

***GOT REQUEST TO UPDATE***
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (1 candidates): . done
Processing candidates (1 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
/var/cache/pkg/wpa_supplicant-2.9_11~d6fe3dca64.txz
/var/cache/pkg/unbound-1.13.2~c2781a1635.txz
/var/cache/pkg/wpa_supplicant-2.9_11.txz
/var/cache/pkg/syslog-ng-3.34.1.txz
/var/cache/pkg/unbound-1.13.2.txz
/var/cache/pkg/syslog-ng-3.34.1~f2a9b4d4db.txz
/var/cache/pkg/strongswan-5.9.4~3776e982e1.txz
/var/cache/pkg/squid-4.15~6ec79a5499.txz
/var/cache/pkg/strongswan-5.9.4.txz
/var/cache/pkg/squid-4.15.txz
/var/cache/pkg/python38-3.8.12_1~aa001528c2.txz
/var/cache/pkg/python38-3.8.12_1.txz
The cleanup will free 23 MiB
Deleting files: .......... done
All done
Nothing to do.
Starting web GUI...done.
Generating RRD graphs...done.
Fetching base-21.7.5-amd64.txz: ... done
Fetching kernel-21.7.5-amd64.txz: ............................................................ failed, no signature found
***DONE***
Health output:

Code: [Select]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 21.7.6 (amd64/OpenSSL) at Sun Dec 12 12:06:10 CET 2021
>>> Check installed kernel version
Version 21.7.4 is incorrect, expected: 21.7.5
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 21.7.4 is incorrect, expected: 21.7.5
>>> Check for missing or altered base files
No problems detected.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 66 dependencies to check.
Checking packages: .................................................................... done
***DONE***

[franco]

Try to prefer IPv4 (System: Settings: General) and/or switch the mirror to let this complete correctly.


Cheers,
Franco

[jimjohn]

Hi Franco, IPv6 is globally deactivated. Changing the mirror and / or the flavor (LibreSSL / OpenSSL) does not help unfortunately.

[franco]

It's very likely a local issue so let's take a closer look:

# fetch -v https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/kernel-21.7.5-amd64.txz.sig

Can you post the output?


Cheers,
Franco

[jimjohn]

It's very likely a local issue so let's take a closer look:

# fetch -v https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/kernel-21.7.5-amd64.txz.sig

Can you post the output?


Cheers,
Franco

Code: [Select]

root@OPNsense:~ # fetch -v https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/kernel-21.7.5-amd64.txz.sig
resolving server address: pkg.opnsense.org:443
SSL options: 82004854
Peer verification enabled
Using CA cert file: /usr/local/etc/ssl/cert.pem
Verify hostname
TLSv1.2 connection established using ECDHE-RSA-CHACHA20-POLY1305
Certificate subject: /CN=*.opnsense.org
Certificate issuer: /C=GB/ST=Greater Manchester/L=Salford/O=Sectigo Limited/CN=Sectigo RSA Domain Validation Secure Server CA
requesting https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/kernel-21.7.5-amd64.txz.sig
remote size / mtime: 1332 / 1636618308
kernel-21.7.5-amd64.txz.sig                           1332  B 3326 kBps    00s

[jimjohn]

OK, so hitting "12" in the SSH menu (update from console) made it somehow with the still changed mirror. I have no idea why this happened.

Now I got a 21.7.5 base and kernel although I am on 21.7.6. Is this expected?

Code: [Select]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 21.7.6 (amd64/OpenSSL) at Sun Dec 12 21:49:21 CET 2021
>>> Check installed kernel version
Version 21.7.5 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 21.7.5 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 66 dependencies to check.
Checking packages: ...............................................
php74-sqlite3-7.4.25 has no upstream equivalent
Checking packages: .
php74-xml-7.4.25 has no upstream equivalent
Checking packages: .
php74-zlib-7.4.25 has no upstream equivalent
Checking packages: .
pkg-1.16.3 has no upstream equivalent
Checking packages: .
py38-Jinja2-3.0.1 has no upstream equivalent
Checking packages: .
py38-dnspython2-2.1.0 has no upstream equivalent
Checking packages: .
py38-netaddr-0.8.0 has no upstream equivalent
Checking packages: .
py38-requests-2.25.1 has no upstream equivalent
Checking packages: .
py38-sqlite3-3.8.12_7 has no upstream equivalent
Checking packages: .
py38-ujson-4.0.2 has no upstream equivalent
Checking packages: .
radvd-2.19_1 has no upstream equivalent
Checking packages: .
rrdtool-1.7.2_4 has no upstream equivalent
Checking packages: .
samplicator-1.3.8.r1_1 has no upstream equivalent
Checking packages: .
squid-4.15 has no upstream equivalent
Checking packages: .
strongswan-5.9.4 has no upstream equivalent
Checking packages: .
sudo-1.9.8p2 has no upstream equivalent
Checking packages: .
suricata-6.0.4 has no upstream equivalent
Checking packages: .
syslog-ng-3.34.1 has no upstream equivalent
Checking packages: .
syslogd-12.1 has no upstream equivalent
Checking packages: .
unbound-1.13.2 has no upstream equivalent
Checking packages: .
wpa_supplicant-2.9_11 has no upstream equivalent
Checking packages: .
zip-3.0_1 has no upstream equivalent
***DONE***

[almodovaris]

Yeah, 21.7.6 was a smaller update, which did not include its own kernel.

[franco]

Correct, latest kernel is 21.7.5 and next one will be 21.7.7.


Cheers,
Franco

[jimjohn]

OK, then this is resolved. We will never know how and why. 

[jimjohn]

On another OPNsense I am updating now I get another error when updating ... fetching the package "base-21.7.7-amd64.txz" just takes forever. Speedtest on OPNsense is showing the same speed than the router, so there should not be a problem with the connection speed. What could that be?

Same behavior when SSH'ing into the menu and updating with "12".

Code: [Select]

Fetching base-21.7.7-amd64.txz: ...