Upgraders beware

[beneix]

I'm ready to try the upgrade but would like to know if there is a way to prepare so that I can do a full roll-back in case I have issues that are difficult to solve? I am running OPNSense on an APU2E4.

[Patrick M. Hausen]

Are you running on ZFS?

[beneix]

Are you running on ZFS?

No. When I installed this a couple of years ago, I had no idea about ZFS. From what I have just Googled, it seems it is possible to install with ZFS on the APU but I am not sure I am up for the hassle of somehow mirroring the current install to a backup device, reformatting the device with ZFS and restoring the installation...

I deduct from your question that without ZFS, there is no easy way to roll back?

[Patrick M. Hausen]

You can always perform a fresh install and import a saved configuration. If to roll back or to migrate to ZFS doesn't matter, it's rather painless and fast. Only downside: you will be offline for 30-60 minutes and you need physical access to the system.

Then, yes, with ZFS you can roll back a live system without a reinstall.

[beneix]

You can always perform a fresh install and import a saved configuration.

Thanks Patrick, I found your guide on ZFS and roll-back. Just one question: I am on 23.7.10_1. The only install I can download on 23.7 is...23.7. Will importing a configuration backed up from 23.7.10_1 to a 23.7 install cause issues?

[Patrick M. Hausen]

Not to my knowledge. At least basic Internet access should work so you can update to 23.7-latest first.

BTW: I run APU4D4 with ZFS and OPNsense - the performance and memory of the device itself is definitely sufficient.

[beneix]

OK, I will try when I get a moment. On the APU, how does one choose a boot environment after creating multiple ones using bectl? Is that done via the serial console?

[Patrick M. Hausen]

If the system is fundamentally running and you can login via SSH, then just "bectl acticate <name>; shutdown -r now".

If it isn't, yes, at the console.

[cttechcorp]

I 100% Agree.   I have had terrible issues since the latest upgrades.

• IPSec Firewall Rules no longer get created for IP Alias or secondary interfaces.
  Firewall State table is unusable;  search doesn't seem to work at all.
  Making changes to any interface resets them all.
  

Things in opnsense have usually just worked for me without a hitch, now everything is going haywire!

[franco]

I 100% Agree.   I have had terrible issues since the latest upgrades.

And this, ladies and gentleman, is what happens if you keep such topics rolling with replies.

"Weird" issues often have "weird" reasons is all I can say from a software standpoint. I'm always happy about qualified reports for individual issues either on GitHub or as a separate forum post.

Let's not pile on this thread...


Cheers,
Franco

[DEC670airp414user]

should add a way to remove kara from posters who are full of ....

[cookiemonster]

just lock the thread @franco with a note as the reason i.e what you just wrote.

[lilsense]

Although, I do agree with Franco and Patrick I disagree with cookiemonster.

As myself been frustrated with various releases due to the underlying changes in the FreeBSD. It's hard to pin point things when you have to rebuild the router every time from scratch to identify what check box caused the major issues after the upgrade.

No doubt that the FreeBSD is the most solid OS. And No one can expect Franco and Patrick or anyone else for that matter do a free one on one, either.

So when it comes to OPNsense, it's far better than PFsense support.

I am on the side of let this thread run for ever so folks can place all their frustrations. Maybe when there's time folks in OPNsesnse can read up and maybe they find "nuggets" to improve the User Experience or add features.

just my 0.00000000000000001USD

[cookiemonster]

Ok I get the want to have a thread to vent. I don't see it as productive but we all have opinions and I respect yours.
What I see is that just posting a venting, oneliner to say the upgrade is flawed is counterproductive. But yes, maybe if it was accepted as a place to vent but not to expect assistance it could be of use to someone.
Then it would ideally be explicit that no help will be given there, for that, the usual requirements would apply: the failing service, the relevant settings and some initial diagnostic. What any user forum wants to be able to assist.

[beneix]

I think what would be useful would be to have a "Report 24.1 upgrade issues here" thread. This would not be for just venting, it should specifically contain issues encountered as a result of the nominated upgrade – and offer a place for support with such issues.

Perhaps the naming "Upgraders beware" in itself is slightly charged, leading to venting...