OPNsense upgrade failure with Zenarmor (23.1.7)

[almodovaris]

Now it's even worse: simply accessing https://192.168.1.1/system_advanced_sysctl.php crashes OPNsense (you do have to enter username and password if asked).

If it matters, I have OPNsense 23.1.9_19-amd64.

kernel and base are 23.1.8_5.

Oddly enough, getting rid of maxlen from config.xml does not solve the problem.

Even

Code Select Expand


# sysctl -a

crashes the system.

Reverting to stable 22.1.8 base and kernel, sysctl -a no longer crashes my system. And reinstalling Zenarmor no longer crashes my system. Please note that the crash happened also on stable versions, I think that removing maxlen from config.xml solved the problem for 23.1.8 base and kernel.

For the record, that tunable was set as default.

[almodovaris]

I've checked:

opnsense-update -zbr 23.1.8_5 is safe;
opnsense-update -zkr dbg-23.1.8_5 isn't safe.

[franco]

The last stable version base/kernel is 23.1.8. If you install random snapshots (opnsense-update -z) I'm unsure what you are trying to achieve...

If this is a FreeBSD 13 issue it's probably going to happen all the time since we don't alter code that is relevant here.


Cheers,
Franco

[almodovaris]

Let's put it this way: I have an addiction, I'm addicted to updates.

[franco]

Cowbell vibes, but I digress...

Ok, fair enough. You might want to try FreeBSD 13.2?

# opnsense-update -zbkr 23.7.d

It's unlikely an upstream fix will automatically find its way to 13.1/23.1 nowadays.


Cheers,
Franco

[almodovaris]

23.7.d works okay.

[franco]

Ok, that's nice to hear.


Cheers,
Franco