Upgrade from 22.4_2 to 22.4.1 stuck on DEC3860

[Mbl]

Just started the Update from 22.4_2 to 22.4.1 an hour ago an the update log always shows:

Code Select Expand

***GOT REQUEST TO UPDATE***
Currently running OPNsense 22.4_2 (amd64/OpenSSL) at Tue Jun  7 21:46:30 CEST 2022
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 802 packages processed.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 802 packages processed.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.
Checking for upgrades (65 candidates): .......... done
Processing candidates (65 candidates): .......... done
The following 66 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
py38-charset-normalizer: 2.0.12 [OPNsense]

.............


Migrated OPNsense\Unbound\Unbound from 1.0.0 to 1.0.2
#!/usr/local/bin/php

Firewall works still as expected but the spinner next to the "Updates" tab is still moving. Changelog tab shows "22.4.1 (installed)" as of today.

Shall I reboot? Thanks for any advice...

[Mbl]

I have rebooted the firewall and it looks like the upgrade was successful. The log I have copied in the last post, the process was hanging on package 63 from 66 (unfortunately I have deleted the part from the log not to post a too long log file). So, what's about the missing 3 packages + the one which failed?
Looking at the Plugins tab I can see:

Code Select Expand


Name Version Size Repository Comment
os-sensei-db (missing) N/A N/A N/A N/A


Already tried to audit all three different types and resolve plugin conflicts but didn't help. I assume most of the update went through (63 from 66 packages) but some are still missing.
So, what's the best procedure to check system consistency and re-run a FULL upgrade?
Thanks in advance @franco?

PS: this is the third upgrade in a row generating some issues...

[franco]

Looks like this relates to Zenarmor more than to normal upgrades, but seeing this worries me a little:

Code Select Expand

#!/usr/local/bin/php

Not sure where this is coming from...

But in any case I think that os-sensei-db is no longer provided and can be resolved via plugin reset under status tab.

If you aren't sure about current system state the health audit can real a lot of potential issues. It's also on the status page in firmware.


Cheers,
Franco

[Mbl]

Hi @franco, thanks for your replay.

Sensei works just normally. The package N/A error just occurred after the update.

Now I have an issue detected by the "System: Firmware: Reporter" with the following PHP errors:

Code Select Expand


[08-Jun-2022 01:00:00 Europe/Zurich] PHP Warning:  implode(): Invalid arguments passed in /usr/local/opnsense/scripts/OPNBEcore/ldap_sync_cleanup on line 68
[08-Jun-2022 01:00:00 Europe/Zurich] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/opnsense/scripts/OPNBEcore/ldap_sync_cleanup on line 70


I'll submit this report to you guys so you can have a look at it...

[franco]

Thanks, I see what the problem is. We will probably update the package today or tomorrow following an internal discussion.


Cheers,
Franco

[franco]

Amendment was pushed out, just grab it via usual firmware update with no restart required :)


Thanks,
Franco

[Mbl]

Thanks @franco, AGAIN for your great support! Just updated all works fine so far.

The Package error "os-sensei-db (missing)" is still there anything I can / shall do with this?

I'm still not sure if the initial update to 22.4.1 has updated all 66 packages as it stopped on package 63 with the error (see my first post):

Code Select Expand

Migrated OPNsense\Unbound\Unbound from 1.0.0 to 1.0.2
#!/usr/local/bin/php

Have had audit health running with the following output:

Code Select Expand

>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense-business" has 66 dependencies to check.
Checking packages: .................................................................... done
***DONE***

Can I be sure I have ALL the latest packages installed?

[franco]

> The Package error "os-sensei-db (missing)" is still there anything I can / shall do with this?

Well, the sole point of this message is that os-sensei-db is embedded in the config.xml but not found on your disk or the remote repositories for whatever reason.

Generally the GUI should give you a plugin resolve option under firmware status but you could also run it from command line:

# configctl firmware resync

Does that fix it or are we looking at a persistent issue?

> Can I be sure I have ALL the latest packages installed?

As per your health audit snippet... yes.


Cheers,
Franco

[Mbl]

> The Package error "os-sensei-db (missing)" is still there anything I can / shall do with this?

Well, the sole point of this message is that os-sensei-db is embedded in the config.xml but not found on your disk or the remote repositories for whatever reason.

Generally the GUI should give you a plugin resolve option under firmware status but you could also run it from command line:

# configctl firmware resync

Does that fix it or are we looking at a persistent issue?

The above command exits with OK and the os-sensei-db plugin is still in the missing state. I'll try to get in touch with Zenarmour...

> Can I be sure I have ALL the latest packages installed?

As per your health audit snippet... yes.

Ok, thanks!

[franco]

You can also edit /conf/config.xml and remove "os-sensei-db" from the list of firmware plugins -- it's a simple comma-separated list.


Cheers,
Franco

[Mbl]

Just a short update on this.

Checked with Zenarmour support what to do with the os-sensei-db package. They confirmed that this package is no longer required so I have removed it from the config file...

Firewall is running as expected now.

Thanks for your superbe support @franco!

[franco]

My pleasure :)


Cheers,
Franco

[Mbl]

@franco, it looks lie we're having the same issue again while updating from 22.4.1 to 22.4.2

Here is the log:

Code Select Expand

***GOT REQUEST TO UPDATE***
Currently running OPNsense 22.4.1 (amd64/OpenSSL) at Wed Jul 13 08:28:53 CEST 2022
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 807 packages processed.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 807 packages processed.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.
Checking for upgrades (66 candidates): .......... done
Processing candidates (66 candidates): .......... done
The following 69 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
libsodium: 1.0.18 [OPNsense]
py38-filelock: 3.7.1 [OPNsense]
py38-importlib-metadata: 4.8.1 [OPNsense]
py38-zipp: 3.4.0 [OPNsense]

Installed packages to be UPGRADED:
acme.sh: 3.0.2 -> 3.0.4 [OPNsense]
bind-tools: 9.18.2 -> 9.18.4 [OPNsense]
ca_root_nss: 3.77 -> 3.78 [OPNsense]
curl: 7.83.1 -> 7.84.0 [OPNsense]
glib: 2.70.4_5,2 -> 2.70.4_6,2 [OPNsense]
hostapd: 2.10_1 -> 2.10_4 [OPNsense]
krb5: 1.19.3 -> 1.20 [OPNsense]
libffi: 3.3_1 -> 3.4.2 [OPNsense]
libfido2: 1.10.0 -> 1.11.0 [OPNsense]
libnghttp2: 1.46.0 -> 1.47.0 [OPNsense]
lighttpd: 1.4.64_1 -> 1.4.65 [OPNsense]
net-snmp: 5.9_3,1 -> 5.9.1_1,1 [OPNsense]
nettle: 3.7.3 -> 3.8 [OPNsense]
nspr: 4.33 -> 4.34 [OPNsense]
nss: 3.78 -> 3.79 [OPNsense]
nut: 2.8.0 -> 2.8.0_4 [OPNsense]
openssh-portable: 8.9.p1_3,1 -> 8.9.p1_4,1 [OPNsense]
openssl: 1.1.1o,1 -> 1.1.1q,1 [OPNsense]
openvpn: 2.5.6 -> 2.5.7 [OPNsense]
opnsense-business: 22.4.1 -> 22.4.2 [OPNsense]
opnsense-update: 22.1.8 -> 22.1.9 [OPNsense]
os-OPNBEcore: 1.0.2_1 -> 1.0.2_2 [OPNsense]
os-acme-client: 3.10 -> 3.11 [OPNsense]
os-ddclient: 1.5 -> 1.7_2 [OPNsense]
os-sensei: 1.11.2 -> 1.11.3 [SunnyValley]
os-sunnyvalley: 1.2_1 -> 1.2_2 [OPNsense]
pftop: 0.7_9 -> 0.8 [OPNsense]
php74: 7.4.29 -> 7.4.30 [OPNsense]
php74-ctype: 7.4.29 -> 7.4.30 [OPNsense]
php74-curl: 7.4.29 -> 7.4.30 [OPNsense]
php74-dom: 7.4.29 -> 7.4.30 [OPNsense]
php74-filter: 7.4.29 -> 7.4.30 [OPNsense]
php74-gettext: 7.4.29 -> 7.4.30 [OPNsense]
php74-json: 7.4.29 -> 7.4.30 [OPNsense]
php74-ldap: 7.4.29 -> 7.4.30 [OPNsense]
php74-mbstring: 7.4.29 -> 7.4.30 [OPNsense]
php74-openssl: 7.4.29 -> 7.4.30 [OPNsense]
php74-pdo: 7.4.29 -> 7.4.30 [OPNsense]
php74-pecl-radius: 1.4.0b1_1 -> 1.4.0b1_2 [OPNsense]
php74-session: 7.4.29 -> 7.4.30 [OPNsense]
php74-simplexml: 7.4.29 -> 7.4.30 [OPNsense]
php74-sockets: 7.4.29 -> 7.4.30 [OPNsense]
php74-sqlite3: 7.4.29 -> 7.4.30 [OPNsense]
php74-xml: 7.4.29 -> 7.4.30 [OPNsense]
php74-zlib: 7.4.29 -> 7.4.30 [OPNsense]
py38-Babel: 2.10.1 -> 2.10.2 [OPNsense]
py38-certifi: 2021.10.8 -> 2022.5.18.1 [OPNsense]
py38-cffi: 1.15.0 -> 1.15.0_1 [OPNsense]
py38-cryptography: 3.3.2 -> 3.4.8 [OPNsense]
py38-dns-lexicon: 3.9.5 -> 3.11.2 [OPNsense]
py38-lxml: 4.8.0_2 -> 4.9.0 [OPNsense]
py38-requests: 2.27.1 -> 2.28.0 [OPNsense]
py38-setuptools: 57.0.0 -> 62.1.0 [OPNsense]
py38-tldextract: 2.2.1_2 -> 3.3.0_1 [OPNsense]
python38: 3.8.13_1 -> 3.8.13_2 [OPNsense]
ruby: 2.7.6_1,1 -> 2.7.6_2,1 [OPNsense]
sqlite3: 3.37.2_1,1 -> 3.38.5,1 [OPNsense]
strongswan: 5.9.5 -> 5.9.6_2 [OPNsense]
sudo: 1.9.10 -> 1.9.11p2 [OPNsense]
suricata: 6.0.5 -> 6.0.5_3 [OPNsense]
unbound: 1.15.0_1 -> 1.16.0 [OPNsense]
wpa_supplicant: 2.10_1 -> 2.10_4 [OPNsense]

Installed packages to be REINSTALLED:
cyrus-sasl-2.1.28 [OPNsense] (options changed)
flock-2.37.2 [OPNsense] (option removed: NLS)
pcre2-10.40 [OPNsense] (options changed)

Number of packages to be installed: 4
Number of packages to be upgraded: 62
Number of packages to be reinstalled: 3

The process will require 8 MiB more space.
106 MiB to be downloaded.
[1/69] Fetching wpa_supplicant-2.10_4.pkg: .......... done
[2/69] Fetching unbound-1.16.0.pkg: .......... done
[3/69] Fetching suricata-6.0.5_3.pkg: .......... done
[4/69] Fetching sudo-1.9.11p2.pkg: .......... done
[5/69] Fetching strongswan-5.9.6_2.pkg: .......... done
[6/69] Fetching sqlite3-3.38.5,1.pkg: .......... done
[7/69] Fetching ruby-2.7.6_2,1.pkg: .......... done
[8/69] Fetching python38-3.8.13_2.pkg: .......... done
[9/69] Fetching py38-tldextract-3.3.0_1.pkg: .......... done
[10/69] Fetching py38-setuptools-62.1.0.pkg: .......... done
[11/69] Fetching py38-requests-2.28.0.pkg: .......... done
[12/69] Fetching py38-lxml-4.9.0.pkg: .......... done
[13/69] Fetching py38-dns-lexicon-3.11.2.pkg: .......... done
[14/69] Fetching py38-cryptography-3.4.8.pkg: .......... done
[15/69] Fetching py38-cffi-1.15.0_1.pkg: .......... done
[16/69] Fetching py38-certifi-2022.5.18.1.pkg: .......... done
[17/69] Fetching py38-Babel-2.10.2.pkg: .......... done
[18/69] Fetching php74-zlib-7.4.30.pkg: ... done
[19/69] Fetching php74-xml-7.4.30.pkg: ... done
[20/69] Fetching php74-sqlite3-7.4.30.pkg: ... done
[21/69] Fetching php74-sockets-7.4.30.pkg: ..... done
[22/69] Fetching php74-simplexml-7.4.30.pkg: ... done
[23/69] Fetching php74-session-7.4.30.pkg: ..... done
[24/69] Fetching php74-pecl-radius-1.4.0b1_2.pkg: ... done
[25/69] Fetching php74-pdo-7.4.30.pkg: ...... done
[26/69] Fetching php74-openssl-7.4.30.pkg: ........ done
[27/69] Fetching php74-mbstring-7.4.30.pkg: .......... done
[28/69] Fetching php74-ldap-7.4.30.pkg: .... done
[29/69] Fetching php74-json-7.4.30.pkg: ... done
[30/69] Fetching php74-gettext-7.4.30.pkg: . done
[31/69] Fetching php74-filter-7.4.30.pkg: ... done
[32/69] Fetching php74-dom-7.4.30.pkg: ....... done
[33/69] Fetching php74-curl-7.4.30.pkg: .... done
[34/69] Fetching php74-ctype-7.4.30.pkg: . done
[35/69] Fetching php74-7.4.30.pkg: .......... done
[36/69] Fetching pftop-0.8.pkg: ......... done
[37/69] Fetching pcre2-10.40.pkg: .......... done
[38/69] Fetching os-sunnyvalley-1.2_2.pkg: . done
[39/69] Fetching os-sensei-1.11.3.pkg: .......... done
[40/69] Fetching os-ddclient-1.7_2.pkg: .. done
[41/69] Fetching os-acme-client-3.11.pkg: .......... done
[42/69] Fetching os-OPNBEcore-1.0.2_2.pkg: .. done
[43/69] Fetching opnsense-update-22.1.9.pkg: ..... done
[44/69] Fetching opnsense-business-22.4.2.pkg: .......... done
[45/69] Fetching openvpn-2.5.7.pkg: .......... done
[46/69] Fetching openssl-1.1.1q,1.pkg: .......... done
[47/69] Fetching openssh-portable-8.9.p1_4,1.pkg: .......... done
[48/69] Fetching nut-2.8.0_4.pkg: .......... done
[49/69] Fetching nss-3.79.pkg: .......... done
[50/69] Fetching nspr-4.34.pkg: .......... done
[51/69] Fetching nettle-3.8.pkg: .......... done
[52/69] Fetching net-snmp-5.9.1_1,1.pkg: .......... done
[53/69] Fetching lighttpd-1.4.65.pkg: .......... done
[54/69] Fetching libnghttp2-1.47.0.pkg: .......... done
[55/69] Fetching libfido2-1.11.0.pkg: .......... done
[56/69] Fetching libffi-3.4.2.pkg: ...... done
[57/69] Fetching krb5-1.20.pkg: .......... done
[58/69] Fetching hostapd-2.10_4.pkg: .......... done
[59/69] Fetching glib-2.70.4_6,2.pkg: .......... done
[60/69] Fetching flock-2.37.2.pkg: ... done
[61/69] Fetching cyrus-sasl-2.1.28.pkg: .......... done
[62/69] Fetching curl-7.84.0.pkg: .......... done
[63/69] Fetching ca_root_nss-3.78.pkg: .......... done
[64/69] Fetching bind-tools-9.18.4.pkg: .......... done
[65/69] Fetching acme.sh-3.0.4.pkg: .......... done
[66/69] Fetching libsodium-1.0.18.pkg: .......... done
[67/69] Fetching py38-filelock-3.7.1.pkg: .. done
[68/69] Fetching py38-importlib-metadata-4.8.1.pkg: .... done
[69/69] Fetching py38-zipp-3.4.0.pkg: . done
Checking integrity... done (0 conflicting)
[1/69] Upgrading openssl from 1.1.1o,1 to 1.1.1q,1...
[1/69] Extracting openssl-1.1.1q,1: .......... done
[2/69] Upgrading libffi from 3.3_1 to 3.4.2...
[2/69] Extracting libffi-3.4.2: .......... done
[3/69] Upgrading python38 from 3.8.13_1 to 3.8.13_2...
[3/69] Extracting python38-3.8.13_2: .......... done
[4/69] Upgrading py38-setuptools from 57.0.0 to 62.1.0...
[4/69] Extracting py38-setuptools-62.1.0: .......... done
[5/69] Upgrading py38-cffi from 1.15.0 to 1.15.0_1...
[5/69] Extracting py38-cffi-1.15.0_1: .......... done
[6/69] Upgrading py38-cryptography from 3.3.2 to 3.4.8...
[6/69] Extracting py38-cryptography-3.4.8: .......... done
[7/69] Upgrading py38-certifi from 2021.10.8 to 2022.5.18.1...
[7/69] Extracting py38-certifi-2022.5.18.1: .......... done
[8/69] Upgrading py38-requests from 2.27.1 to 2.28.0...
[8/69] Extracting py38-requests-2.28.0: .......... done
[9/69] Reinstalling pcre2-10.40...
[9/69] Extracting pcre2-10.40: .......... done
[10/69] Upgrading krb5 from 1.19.3 to 1.20...
[10/69] Extracting krb5-1.20: .......... done
[11/69] Reinstalling cyrus-sasl-2.1.28...
*** Added group `cyrus' (id 60)
*** Added user `cyrus' (id 60)
[11/69] Extracting cyrus-sasl-2.1.28: .......... done
[12/69] Upgrading sqlite3 from 3.37.2_1,1 to 3.38.5,1...
[12/69] Extracting sqlite3-3.38.5,1: .......... done
[13/69] Upgrading py38-lxml from 4.8.0_2 to 4.9.0...
[13/69] Extracting py38-lxml-4.9.0: .......... done
[14/69] Upgrading php74 from 7.4.29 to 7.4.30...
[14/69] Extracting php74-7.4.30: .......... done
[15/69] Upgrading nspr from 4.33 to 4.34...
[15/69] Extracting nspr-4.34: .......... done
[16/69] Upgrading libnghttp2 from 1.46.0 to 1.47.0...
[16/69] Extracting libnghttp2-1.47.0: .......... done
[17/69] Upgrading ca_root_nss from 3.77 to 3.78...
[17/69] Extracting ca_root_nss-3.78: ...... done
[18/69] Installing py38-filelock-3.7.1...
[18/69] Extracting py38-filelock-3.7.1: .......... done
[19/69] Installing py38-zipp-3.4.0...
[19/69] Extracting py38-zipp-3.4.0: .......... done
[20/69] Upgrading py38-tldextract from 2.2.1_2 to 3.3.0_1...
[20/69] Extracting py38-tldextract-3.3.0_1: .......... done
[21/69] Upgrading py38-Babel from 2.10.1 to 2.10.2...
[21/69] Extracting py38-Babel-2.10.2: .......... done
[22/69] Upgrading php74-session from 7.4.29 to 7.4.30...
[22/69] Extracting php74-session-7.4.30: .......... done
[23/69] Upgrading php74-pdo from 7.4.29 to 7.4.30...
[23/69] Extracting php74-pdo-7.4.30: .......... done
[24/69] Upgrading php74-mbstring from 7.4.29 to 7.4.30...
[24/69] Extracting php74-mbstring-7.4.30: .......... done
[25/69] Upgrading php74-json from 7.4.29 to 7.4.30...
[25/69] Extracting php74-json-7.4.30: .......... done
[26/69] Upgrading nss from 3.78 to 3.79...
[26/69] Extracting nss-3.79: .......... done
[27/69] Upgrading nettle from 3.7.3 to 3.8...
[27/69] Extracting nettle-3.8: .......... done
[28/69] Upgrading libfido2 from 1.10.0 to 1.11.0...
[28/69] Extracting libfido2-1.11.0: .......... done
[29/69] Upgrading glib from 2.70.4_5,2 to 2.70.4_6,2...
[29/69] Extracting glib-2.70.4_6,2: .......... done
[30/69] Upgrading curl from 7.83.1 to 7.84.0...
[30/69] Extracting curl-7.84.0: .......... done
[31/69] Upgrading bind-tools from 9.18.2 to 9.18.4...
[31/69] Extracting bind-tools-9.18.4: .......... done
[32/69] Installing libsodium-1.0.18...
[32/69] Extracting libsodium-1.0.18: .......... done
[33/69] Installing py38-importlib-metadata-4.8.1...
[33/69] Extracting py38-importlib-metadata-4.8.1: .......... done
[34/69] Upgrading wpa_supplicant from 2.10_1 to 2.10_4...
[34/69] Extracting wpa_supplicant-2.10_4: ....... done
[35/69] Upgrading unbound from 1.15.0_1 to 1.16.0...
===> Creating groups.
Using existing group 'unbound'.
===> Creating users
Using existing user 'unbound'.
[35/69] Extracting unbound-1.16.0: .......... done
[36/69] Upgrading suricata from 6.0.5 to 6.0.5_3...
[36/69] Extracting suricata-6.0.5_3: .......... done
[37/69] Upgrading sudo from 1.9.10 to 1.9.11p2...
[37/69] Extracting sudo-1.9.11p2: .......... done
[38/69] Upgrading strongswan from 5.9.5 to 5.9.6_2...
[38/69] Extracting strongswan-5.9.6_2: .......... done
[39/69] Upgrading py38-dns-lexicon from 3.9.5 to 3.11.2...
[39/69] Extracting py38-dns-lexicon-3.11.2: .......... done
[40/69] Upgrading php74-zlib from 7.4.29 to 7.4.30...
[40/69] Extracting php74-zlib-7.4.30: ....... done
[41/69] Upgrading php74-xml from 7.4.29 to 7.4.30...
[41/69] Extracting php74-xml-7.4.30: ........ done
[42/69] Upgrading php74-sqlite3 from 7.4.29 to 7.4.30...
[42/69] Extracting php74-sqlite3-7.4.30: ........ done
[43/69] Upgrading php74-sockets from 7.4.29 to 7.4.30...
[43/69] Extracting php74-sockets-7.4.30: .......... done
[44/69] Upgrading php74-simplexml from 7.4.29 to 7.4.30...
[44/69] Extracting php74-simplexml-7.4.30: ......... done
[45/69] Upgrading php74-pecl-radius from 1.4.0b1_1 to 1.4.0b1_2...
[45/69] Extracting php74-pecl-radius-1.4.0b1_2: .......... done
[46/69] Upgrading php74-openssl from 7.4.29 to 7.4.30...
[46/69] Extracting php74-openssl-7.4.30: ....... done
[47/69] Upgrading php74-ldap from 7.4.29 to 7.4.30...
[47/69] Extracting php74-ldap-7.4.30: ....... done
[48/69] Upgrading php74-gettext from 7.4.29 to 7.4.30...
[48/69] Extracting php74-gettext-7.4.30: ....... done
[49/69] Upgrading php74-filter from 7.4.29 to 7.4.30...
[49/69] Extracting php74-filter-7.4.30: ........ done
[50/69] Upgrading php74-dom from 7.4.29 to 7.4.30...
[50/69] Extracting php74-dom-7.4.30: .......... done
[51/69] Upgrading php74-curl from 7.4.29 to 7.4.30...
[51/69] Extracting php74-curl-7.4.30: ....... done
[52/69] Upgrading php74-ctype from 7.4.29 to 7.4.30...
[52/69] Extracting php74-ctype-7.4.30: ....... done
[53/69] Upgrading pftop from 0.7_9 to 0.8...
[53/69] Extracting pftop-0.8: ..... done
[54/69] Upgrading os-OPNBEcore from 1.0.2_1 to 1.0.2_2...
[54/69] Extracting os-OPNBEcore-1.0.2_2: .......... done
Stopping configd...done
Starting configd.
Reloading plugin configuration
Configuring system logging...done.
Service `cron' has been restarted.
[55/69] Upgrading opnsense-update from 22.1.8 to 22.1.9...
[55/69] Extracting opnsense-update-22.1.9: .......... done
[56/69] Upgrading openvpn from 2.5.6 to 2.5.7...
===> Creating groups.
Using existing group 'openvpn'.
===> Creating users
Using existing user 'openvpn'.
[56/69] Extracting openvpn-2.5.7: .......... done
[57/69] Upgrading openssh-portable from 8.9.p1_3,1 to 8.9.p1_4,1...
[57/69] Extracting openssh-portable-8.9.p1_4,1: .......... done
[58/69] Upgrading net-snmp from 5.9_3,1 to 5.9.1_1,1...
[58/69] Extracting net-snmp-5.9.1_1,1: .......... done
[59/69] Upgrading lighttpd from 1.4.64_1 to 1.4.65...
===> Creating groups.
Using existing group 'www'.
===> Creating users
Using existing user 'www'.
[59/69] Extracting lighttpd-1.4.65: .......... done
[60/69] Upgrading hostapd from 2.10_1 to 2.10_4...
[60/69] Extracting hostapd-2.10_4: ....... done
[61/69] Reinstalling flock-2.37.2...
[61/69] Extracting flock-2.37.2: ...... done
[62/69] Upgrading acme.sh from 3.0.2 to 3.0.4...
===> Creating groups.
Using existing group 'acme'.
===> Creating users
Using existing user 'acme'.
===> Creating homedir(s)
[62/69] Extracting acme.sh-3.0.4: .......... done
[63/69] Upgrading ruby from 2.7.6_1,1 to 2.7.6_2,1...
[63/69] Extracting ruby-2.7.6_2,1: .......... done
[64/69] Upgrading os-sunnyvalley from 1.2_1 to 1.2_2...
[64/69] Extracting os-sunnyvalley-1.2_2: .... done
[65/69] Upgrading os-sensei from 1.11.2 to 1.11.3...
[65/69] Extracting os-sensei-1.11.3: .......... done
Zenarmor service is running, saving state to resume after upgrade...
Stopping eastpect.
Waiting for PIDS: 93516.
No matching processes were found
Removing Zenarmor cron jobs...
Cron jobs deleted: 1
create link for python in virtualenv...done
Restarting configd service...done
Activating features for Business Edition...
Deleting OPNsense menu cache...done
Invalidating OPNsense cache...done
Invalidating Zenarmor cache...done
Running Zenarmor post-install scripts...
Preparing Settings Db...
Backup configurations...
Application database base path is /usr/local/sensei//db/
Application category max id is 115
13 web 2.0 categories added.
3 applications added.
Web category max id is 251
Prepared Default Policy
Checking Schedule Reports...
Preparing Userenrich Db...
Checking Cloud Nodes...done
Running OPNsense migration scripts...done
DB Type: ES
Report Mail Configuration Checking ...done
Web category migration ...done
Custom web category migration ...done
Appications category migration ...done
Setting dev.netmap.buf_num...
Report database set cluster uuid...
Current Swap Rate: 60
Current License Size: 100, Current flavor: 100, License size: 100 http index reconfiguration for device...
2022.07.13 - 08:30:10 - INFO - [main] Starting ipdr retiring for ELASTICSEARCH...
2022.07.13 - 08:30:10 - INFO - [http] Rolling over index...
2022.07.13 - 08:30:10 - INFO - [http] Got aliases for index.
2022.07.13 - 08:30:10 - INFO - [http-220706] Sorted index.
2022.07.13 - 08:30:10 - INFO - [http-220707] Sorted index.
2022.07.13 - 08:30:10 - INFO - [http-220708] Sorted index.
2022.07.13 - 08:30:10 - INFO - [http-220709] Sorted index.
2022.07.13 - 08:30:10 - INFO - [http-220710] Sorted index.
2022.07.13 - 08:30:10 - INFO - [http-220711] Sorted index.
2022.07.13 - 08:30:10 - INFO - [http-220712] Sorted index.
2022.07.13 - 08:30:10 - INFO - [http_write] checking....
2022.07.13 - 08:30:10 - INFO - [http-220713-1] New index added to alias: http_all , http_write
2022.07.13 - 08:30:10 - INFO - [main] ipdr check external elasticsearch.
2022.07.13 - 08:30:10 - INFO - [main] ipdr retire manager finished.
2022.07.13 - 08:30:10 - INFO - [main] Deleting archive files which older then 15 days.
2022.07.13 - 08:30:10 - INFO - [main] Deleting files under /usr/local/sensei/log/active folder.
2022.07.13 - 08:30:10 - INFO - [main] Deleting files under /usr/local/sensei/log/archive folder.
Running OPNsense post install scripts...done
Generating Zenarmor configuration files...done
Restarting OPNsense web gui...done
Removing Zenarmor cron jobs...\n
Cron jobs deleted: 0
Configuring Zenarmor cron jobs...\n
Cron jobs created: 1
Cron jobs edited: 1
Cron jobs deleted: 0
Adding new dashboard widget to OPNsense...done
Resuming Zenarmor packet engine, restarting with the new engine...
eastpect is not running
mdconfig: ioctl(/dev/mdctl): Invalid argument
newfs: /dev/md43: could not find special device
mount: /dev/md43: No such file or directory
Starting eastpect.
Registering plug-in to the OPNsense firmware system...done
Done & sync heartbeat ...
[66/69] Upgrading os-ddclient from 1.5 to 1.7_2...
[66/69] Extracting os-ddclient-1.7_2: .......... done
Stopping configd...done
Starting configd.
Reloading plugin configuration
Configuring system logging...done.
Reloading template OPNsense/Syslog: OK
Reloading template OPNsense/ddclient: OK
[67/69] Upgrading os-acme-client from 3.10 to 3.11...
[67/69] Extracting os-acme-client-3.11: .......... done
Stopping configd...done
Starting configd.
Reloading plugin configuration
Configuring system logging...done.
Reloading template OPNsense/AcmeClient: OK
[68/69] Upgrading opnsense-business from 22.4.1 to 22.4.2...
[68/69] Extracting opnsense-business-22.4.2: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh'
Migrated OPNsense\Tor\General from 0.0.0 to 1.0.0
Migrated OPNsense\CaptivePortal\CaptivePortal from 1.0.0 to 1.0.1
#!/usr/local/bin/php

[franco]

Maybe you can try to run this from the console:

# /usr/local/etc/rc.syshook update

and see if it hangs as well...


Cheers,
Franco

[Mbl]

Have had executed this command already:

Code Select Expand

root@firewall:/var/log/system # /usr/local/etc/rc.syshook update
>>> Invoking update script 'refresh'
#!/usr/local/bin/php
Writing firmware setting...done.
Writing trust files...done.
Configuring login behaviour...done.
Configuring system logging...done.


and rebooted the firewall afterwards.
Now it looks like there is no firewall or NAT functionallity anymore due to a missing "pf" device.

Code Select Expand

<13>1 2022-07-13T09:44:01+02:00 firewall /update_tables.py 69818 - [meta sequenceId="2210"] Error loading alias [extG_Alias1]: /dev/pf: No such file or directory {current_size: 0, new_size: 4}
<13>1 2022-07-13T09:44:01+02:00 firewall /update_tables.py 69818 - [meta sequenceId="2211"] Error loading alias [extG_Alias2]: /dev/pf: No such file or directory {current_size: 0, new_size: 1}
<13>1 2022-07-13T09:44:01+02:00 firewall /update_tables.py 69818 - [meta sequenceId="2212"] Error loading alias [extG_Alias3]: /dev/pf: No such file or directory {current_size: 0, new_size: 7}
<13>1 2022-07-13T09:44:01+02:00 firewall /update_tables.py 69818 - [meta sequenceId="2213"] Error loading alias [extG_Alias4]: /dev/pf: No such file or directory {current_size: 0, new_size: 6}


Any advice what to do?


PS:
On the firewall GUI I also have plenty of notices on the top right bar:

Code Select Expand

07-13-22 09:13:41 [ There were error(s) loading the rules: pfctl: /dev/pf: No such file or directory ]