unable to update from 23.7 to 24.1

[Patrick M. Hausen]

Perform a health and a connectivity audit, please.

[TomT]

Hi.
Connectivity:

Code Select Expand

***GOT REQUEST TO AUDIT CONNECTIVITY***
Currently running OPNsense 24.7.12 (amd64) at Sat Jan 18 22:06:12 GMT 2025
Checking connectivity for host: pkg.opnsense.org -> 89.149.222.99
PING 89.149.222.99 (89.149.222.99): 1500 data bytes
1508 bytes from 89.149.222.99: icmp_seq=0 ttl=58 time=17.814 ms
1508 bytes from 89.149.222.99: icmp_seq=1 ttl=58 time=17.352 ms
1508 bytes from 89.149.222.99: icmp_seq=2 ttl=58 time=17.990 ms
1508 bytes from 89.149.222.99: icmp_seq=3 ttl=58 time=17.688 ms

--- 89.149.222.99 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 17.352/17.711/17.990/0.233 ms
Checking connectivity for repository (IPv4): https://pkg.opnsense.org/FreeBSD:14:amd64/24.7
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 865 packages processed.
All repositories are up to date.
Checking connectivity for host: pkg.opnsense.org -> 2001:1af8:5300:a010:1::1
ping: UDP connect: No route to host
Checking connectivity for repository (IPv6): https://pkg.opnsense.org/FreeBSD:14:amd64/24.7
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/meta.txz: Non-recoverable resolver failure
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: Non-recoverable resolver failure
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.txz: Non-recoverable resolver failure
Unable to update repository OPNsense
Error updating repositories!
Checking server certificate for host: pkg.opnsense.org
depth=2 OU = GlobalSign Root CA - R3, O = GlobalSign, CN = GlobalSign
verify return:1
depth=1 C = BE, O = GlobalSign nv-sa, CN = GlobalSign GCC R3 DV TLS CA 2020
verify return:1
depth=0 CN = pkg.opnsense.org
verify return:1
DONE
***DONE***
Heath:

Code Select Expand

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.7.12 (amd64) at Sat Jan 18 22:07:26 GMT 2025
>>> Root file system: /dev/gpt/rootfs
>>> Check installed kernel version
Version 24.7.12 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.7.12 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
>>> Check installed plugins
os-realtek-re 1.0
os-theme-cicada 1.38
os-udpbroadcastrelay 1.0_5
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 24.7.12 has 69 dependencies to check.
Checking packages: ...................................................................... done
***DONE***
Thanks

[TomT]

I do have IPv6 disabled, but I can ping pkg.opnsense.org without issue.
Any ideas how to resolve this as I'd like to get my VPN working again.

Thanks

[Patrick M. Hausen]

Your DNS for the OPNsense system itself is somehow broken:

Code Select Expand

pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: Non-recoverable resolver failure


[TomT]

Your DNS for the OPNsense system itself is somehow broken:

Code Select Expand

pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: Non-recoverable resolver failure


I can ping the address and browse to it.
Is there any other option to set the upgrade ?

[Patrick M. Hausen]

I can ping the address and browse to it.

From a shell on OPNsense itself?

Try System > Settings > General and set the DNS to e.g. 8.8.8.8

[TomT]

Ok. I've been an idiot 😞
I'm running 24.7.12 NOT 24.7.2 !

I've restarted my server and now the VPN is up. 🤦