Upgradethread 23.1.11_1 to 23.7

[bsiege]

There is an upgrade log and it will tell you what custom package prevents you from upgrading...

Either System: Firmware: Status -> Run an Audit -> Upgrade

Thanks,
wow did not expect that. Seems to be worse... Kernel is on 23.7 already.. No idea what's happened..
Functionally all is ok. But i think i have to reinstall.

Code Select Expand

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 23.1.11_1 at Tue Aug  1 12:58:09 CEST 2023
>>> Check installed kernel version
Version 23.7 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 23.7 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense
>>> Check installed plugins
os-acme-client 3.17
os-apcupsd 1.1
os-dmidecode 1.1_1
os-hw-probe 1.0_1
os-iperf 1.0_1
os-lldpd 1.1_2
os-net-snmp 1.5_2
os-ntopng 1.2_2
os-redis 1.1_2
os-rfc2136 1.8
os-smart 2.2_2
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 67 dependencies to check.
Checking packages: ..
ca_root_nss-3.91 version mismatch, expected 3.89.1
Checking packages: ........................
opnsense-update-23.7 version mismatch, expected 23.1.11
Checking packages: .......................
py39-dnspython-2.4.0,1 version mismatch, expected 2.3.0,1
Checking packages: .
py39-duckdb-0.8.1 version mismatch, expected 0.6.1
Checking packages: ..
py39-numpy-1.25.0,1 version mismatch, expected 1.24.1_4,1
Checking packages: .
py39-pandas-2.0.3,1 version mismatch, expected 2.0.2,1
Checking packages: ....
py39-vici-5.9.11 version mismatch, expected 5.9.10
Checking packages: ......
sudo-1.9.14p3 version mismatch, expected 1.9.13p3
Checking packages: .
suricata-6.0.13_1 version mismatch, expected 6.0.13
Checking packages: ..
unbound-1.17.1_3 version mismatch, expected 1.17.1_2
Checking packages: .. done
***DONE***

[ValliereMagic]

Yup

# opnsense-patch b52bf63e9 0e1aa4bcca6


Cheers,
Franco

Thanks for the quick patch!

have a good one,
Vall

[franco]

Thanks,
wow did not expect that. Seems to be worse... Kernel is on 23.7 already.. No idea what's happened..
Functionally all is ok. But i think i have to reinstall.

Code Select Expand

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 23.1.11_1 at Tue Aug  1 12:58:09 CEST 2023
>>> Check installed kernel version
Version 23.7 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 23.7 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense
>>> Check installed plugins
os-acme-client 3.17
os-apcupsd 1.1
os-dmidecode 1.1_1
os-hw-probe 1.0_1
os-iperf 1.0_1
os-lldpd 1.1_2
os-net-snmp 1.5_2
os-ntopng 1.2_2
os-redis 1.1_2
os-rfc2136 1.8
os-smart 2.2_2
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 67 dependencies to check.
Checking packages: ..
ca_root_nss-3.91 version mismatch, expected 3.89.1
Checking packages: ........................
opnsense-update-23.7 version mismatch, expected 23.1.11
Checking packages: .......................
py39-dnspython-2.4.0,1 version mismatch, expected 2.3.0,1
Checking packages: .
py39-duckdb-0.8.1 version mismatch, expected 0.6.1
Checking packages: ..
py39-numpy-1.25.0,1 version mismatch, expected 1.24.1_4,1
Checking packages: .
py39-pandas-2.0.3,1 version mismatch, expected 2.0.2,1
Checking packages: ....
py39-vici-5.9.11 version mismatch, expected 5.9.10
Checking packages: ......
sudo-1.9.14p3 version mismatch, expected 1.9.13p3
Checking packages: .
suricata-6.0.13_1 version mismatch, expected 6.0.13
Checking packages: ..
unbound-1.17.1_3 version mismatch, expected 1.17.1_2
Checking packages: .. done
***DONE***

First things first. Yeah I think base and kernel are fine and updated. But your packages are not. FWIW, we still need the "Upgrade" audit, not the "Health" one you presented here. ;)


Cheers,
Franco

[bsiege]

FWIW, we still need the "Upgrade" audit, not the "Health" one you presented here. ;)

Wish i could... :o
Only presented connectivity,health and security as choice.

[franco]

And if you check for updates it presents packages for 23.7 and it downloads them and reboots? If yes it should produce a log file.


Cheers,
Franco

[Marcel_75]

The upgrade worked fine so far, but Zen Armor was not working and I've uninstalled all it's packages but still get this error from the Crash Reporter Status:

Code Select Expand

PHP Warning:  PHP Startup: Unable to load dynamic library 'mongodb.so' (tried: /usr/local/lib/php/20220829/mongodb.so (Cannot open "/usr/local/lib/php/20220829/mongodb.so"), /usr/local/lib/php/20220829/mongodb.so.so (Cannot open "/usr/local/lib/php/20220829/mongodb.so.so")) in Unknown on line 0

Already did a:

Code Select Expand

opnsense-update -pf

but still get this message at the end:

Code Select Expand

Beep! Beep!
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: 100%
php81-pecl-mongodb has a missing dependency: php81

>>> Missing package dependencies were detected.
>>> Found 1 issue(s) in the package database.

pkg-static: No packages available to install matching 'php81' have been found in the repositories
>>> Summary of actions performed:

php81 dependency failed to be fixed

>>> There are still missing dependencies.
>>> Try fixing them manually.

Any ideas what to do?

[franco]

# pkg remove php81-pecl-mongodb


Cheers,
Franco

[bsiege]

And if you check for updates it presents packages for 23.7 and it downloads them and reboots? If yes it should produce a log file.

Exactly! But no log...

Code Select Expand

***GOT REQUEST TO UPGRADE***
Currently running OPNsense 23.1.11_1 at Tue Aug  1 17:18:40 CEST 2023
Fetching packages-23.7-amd64.tar: ................ done
Extracting packages-23.7-amd64.tar... done
Please reboot.
***DONE***

but opnsense-update -G gives no output. Checked that before and after reboot.

[Marcel_75]

# pkg remove php81-pecl-mongodb

Cheers,
Franco

Thank you Franco. :)

So it would be also safe to delete the content of:

Code Select Expand

/usr/local/lib/php/

which is:

Code Select Expand

20210902/ 20220829/ build/

?

Don't know why this php81-pecl-mongodb was installed at all...

[IsaacFL]

Edit:

Hunch I saw looking at my pre-migration config, vs. my post-migration config:
Is it possible somewhere in the ui (like JavaScript somewhere that doesn't affect the workings of the backend) is still expecting space separated ifgroup members instead of comma separated ifgroup members?

This would explain why my single-member interface group shows up correctly (because it's the same in both representations)

i.e ifgroups version="1.0.0":
<members>opt4,opt1,lan</members>
23.1.11:
<members>opt4 opt1 lan</members>

ifgroup with single entry is still working because it has no separators, and would be valid in both i.e.:
ifgroups version="1.0.0":
<members>lan</members>
23.1.11:
<members>lan</members>

Thanks for debugging. Here is a patch: https://github.com/opnsense/core/commit/b52bf63e9

# opnsense-patch b52bf63e9


Cheers,
Franco

This patch worked to fix the groups on interfaces.

[newsense]

# pkg remove php81-pecl-mongodb

Cheers,
Franco

Thank you Franco. :)

So it would be also safe to delete the content of:

Code Select Expand

/usr/local/lib/php/

which is:

Code Select Expand

20210902/ 20220829/ build/

?

Don't know why this php81-pecl-mongodb was installed at all...

I'd only delete the 20210902 folder if left behind after running the pkg command Franco gave you _and_ completing the 23.7 upgrade.

[JoK]

Any word on how to fix this?? It an upgrade log file

Beep! Beep!
Checking all packages: .......... done
py37-markupsafe has a missing dependency: python37
py37-markupsafe has a missing dependency: py37-setuptools
py37-markupsafe is missing a required shared library: libpython3.7m.so.1.0

>>> Missing package dependencies were detected.
>>> Found 2 issue(s) in the package database.

pkg-static: No packages available to install matching 'python37' have been found in the repositories
pkg-static: No packages available to install matching 'py37-setuptools' have been found in the repositories
>>> Summary of actions performed:

python37 dependency failed to be fixed
py37-setuptools dependency failed to be fixed

>>> There are still missing dependencies.
>>> Try fixing them manually.

>>> Also make sure to check 'pkg updating' for known issues.

[newsense]

A forum search shows it should be remove

Code Select Expand

pkg remove py37-markupsafe

[LOTRouter]

# opnsense-patch b52bf63e9 0e1aa4bcca6

Confirmed, these two patches fix the interface grouping issue.

[mimugmail]

Regarding the Haystack problems and AGH, I just updated the community repo with a fix and the latest binary of AGH. Sorry for the trouble