Upgrade from OPNsense 22.1-amd64 to Available Version: 23.7.8

[MajorMC]

Hi guys and happy weekend!

I have a system that was installed for a client and is running firmware OPNsense 22.1-amd64 while I see the current available Version is 23.7.8

What is the best / safest upgrade path I should consider.

Many thanks in advance
Majr

[Maurice]

The sequence is always last minor update - major upgrade - last minor update - major upgrade - ...
So in your case: 22.1 - 22.1.10 - 22.7 - 22.7.11 - 23.1 - 23.1.11 - 23.7.5 - 23.7.8

The updater does that for you, just run it repeatedly. Will take a while.

Cheers
Maurice

[franco]

The safest way is to do what Maurice said, also because you can review release notes and take each step to verify it's working as intended (but don't verify after initial upgrade... update to latest stable beforehand)

The quickest way is to use an 23.7 image and do a configuration import and reinstall. You can use the live system to see if it works for the most part (plugins are tricky here) before installing it too.


Cheers,
Franco

[MajorMC]

Thanks guys for your feedback.
So if i understand correctly, I could repeatedly upgrade and the updater will simply automatically upgrade to the next logical version / restart and repeat.

It is something that can be attempted remotely with the firewall automatically rebooting after each update? I am thinking over the weekend. Both internet feeds are connected to the Firewall.

I agree there is possibly some value in exporting the current configuration / reflashing the hardware with the latest firmware and importing the previously exported configuration.

I did not actually install this unit so have not flashed a OPNsense unit before.

Thanks again
Maj

[Maurice]

Correct and yes, this can be done remotely. Of course there is always a slight risk that something goes wrong. You might then need video / serial console access to recover, so if this is a vital system, having a plan B is recommended.

[MajorMC]

Many thanks and I will schedule the upgrade for the weekend while everyone is drinking Pina Coladas' on the beach. 
Br Maj

[franco]

Not to be a voice of concern ... but ... ... if you are uncomfortable with that particular OPNsense configuration and major upgrades in general I'd recommend doing these in front of a console for recovery purposes.


Cheers,
Franco

[MajorMC]

All went perfectly - many thanks
Have a great weekend