Missed an update ? How to force . . .

[rfox]

I'm running 24.1.8 for some time now - saw there was 24.1.9 available, but when I check for new updates. it doesn't show anything new . . . but funny enough, I check changelog and see 24.1.9 is there but 24.1.8 is installed ?!? How do I force the update ??

[franco]

Can you do a health (1) and/or connectivity (2) audit? It could be

(1) package database broken
(2) stale mirror


Cheers,
Franco

[rfox]

ODD - I do see an "Error 2" - but I never touched the /etc/sysctl.conf ?!? Should I be worried?

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.1.8 at Thu Jun 20 14:18:11 CEST 2024
>>> Root file system: /dev/gpt/rootfs
>>> Check installed kernel version
Version 24.1.8 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.1.8 is correct.
>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
   size (299, 564)
   sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x62040fc99f43c4ba77c425bee14abaaf6cf4c59d481c3029f56e6c7467d6fd26)
>>> Check installed repositories
OPNsense
SunnyValley
repo-mihak
>>> Check installed plugins
os-collectd 1.4_1
os-crowdsec 1.0.8_1
os-ddclient 1.21_2
os-dmidecode 1.1_1
os-hw-probe 1.0_1
os-iperf 1.0_1
os-maltrail 1.10
os-mdns-repeater 1.1_1
os-net-snmp 1.5_3
os-netdata 1.2_1
os-ntopng 1.3
os-redis 1.1_2
os-sensei 1.17.4
os-sensei-updater 1.17
os-speedtest-community 0.9_5
os-sunnyvalley 1.4_3
os-theme-rebellion 1.8.10
os-vnstat 1.3_1
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" not known to package database.
***DONE***

[franco]

> etc/sysctl.conf:

The most likely culprit is Zenarmor.

> Core package "opnsense" not known to package database.

And there's your issue.

# pkg install opnsense

And then check for updates again.


Cheers,
Franco

[rfox]

Very odd indeed - not sure what caused that . . . and when I run that command 

The following 122 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
        beep: 1.0_2 [OPNsense]
        boost-libs: 1.84.0 [OPNsense]
        ca_root_nss: 3.93 [OPNsense]
        choparp: 20150613_1 [OPNsense]
        cpdup: 1.22_1 [OPNsense]
        cpustats: 0.1 [OPNsense]
        dhcp6c: 20240607 [OPNsense]
        dhcrelay: 0.5 [OPNsense]
        dnsmasq: 2.90_1,1 [OPNsense]
        dpinger: 3.3 [OPNsense]
        easy-rsa: 3.2.0 [OPNsense]
        expiretable: 0.6_3 [OPNsense]
        filterlog: 0.7_1 [OPNsense]
        flock: 2.37.2_1 [OPNsense]
        flowd: 0.9.1_5 [OPNsense]
        gmp: 6.3.0 [OPNsense]
        hostapd: 2.10_10 [OPNsense]
        hyperscan: 5.4.2 [OPNsense]
        ifinfo: 13.0_1 [OPNsense]
        iftop: 1.0.p4_1 [OPNsense]
        isc-dhcp44-server: 4.4.3P1_1 [OPNsense]
        ivykis: 0.43_1 [OPNsense]
        jansson: 2.14 [OPNsense]
        kea: 2.4.1_2 [OPNsense]
        ldns: 1.8.3_1 [OPNsense]
        libargon2: 20190702_1 [OPNsense]
        libltdl: 2.4.7 [OPNsense]
        libmcrypt: 2.5.8_4 [OPNsense]
        libnet: 1.3,1 [OPNsense]
        libucl: 0.9.2 [OPNsense]
        lighttpd: 1.4.76 [OPNsense]
        log4cplus: 2.1.1 [OPNsense]
        lzo2: 2.10_1 [OPNsense]
        monit: 5.33.0_1 [OPNsense]
        mpd5: 5.9_18 [OPNsense]
        nettle: 3.9.1 [OPNsense]
        nspr: 4.35 [OPNsense]
        nss: 3.100 [OPNsense]
        ntp: 4.2.8p18 [OPNsense]
        oniguruma: 6.9.9 [OPNsense]
        openssh-portable: 9.7.p1,1 [OPNsense]
        openvpn: 2.6.10 [OPNsense]
        opnsense: 24.1.9_3 [OPNsense]
        opnsense-installer: 24.1 [OPNsense]
        opnsense-lang: 23.7.11 [OPNsense]
        opnsense-update: 24.1.8 [OPNsense]
        pam_opnsense: 24.1 [OPNsense]
        pftop: 0.10_1 [OPNsense]
        php82: 8.2.20 [OPNsense]
        php82-ctype: 8.2.20 [OPNsense]
        php82-curl: 8.2.20 [OPNsense]
        php82-dom: 8.2.20 [OPNsense]
        php82-filter: 8.2.20 [OPNsense]
        php82-gettext: 8.2.20 [OPNsense]
        php82-google-api-php-client: 2.4.0 [OPNsense]
        php82-ldap: 8.2.20 [OPNsense]
        php82-mbstring: 8.2.20 [OPNsense]
        php82-pcntl: 8.2.20 [OPNsense]
        php82-pdo: 8.2.20 [OPNsense]
        php82-pear: 1.10.13 [OPNsense]
        php82-pear-Crypt_CHAP: 1.5.0_1 [OPNsense]
        php82-pecl-mcrypt: 1.0.7 [OPNsense]
        php82-pecl-radius: 1.4.0b1_2 [OPNsense]
        php82-phalcon: 5.7.0 [OPNsense]
        php82-phpseclib: 3.0.36 [OPNsense]
        php82-session: 8.2.20 [OPNsense]
        php82-simplexml: 8.2.20 [OPNsense]
        php82-sockets: 8.2.20 [OPNsense]
        php82-sqlite3: 8.2.20 [OPNsense]
        php82-xml: 8.2.20 [OPNsense]
        php82-zlib: 8.2.20 [OPNsense]
        pkcs11-helper: 1.29.0_3 [OPNsense]
        py311-Babel: 2.14.0 [OPNsense]
        py311-Jinja2: 3.1.3 [OPNsense]
        py311-aioquic: 0.9.25 [OPNsense]
        py311-anyio: 4.4.0 [OPNsense]
        py311-async_generator: 1.10 [OPNsense]
        py311-attrs: 23.2.0 [OPNsense]
        py311-bottleneck: 1.3.8_1 [OPNsense]
        py311-certifi: 2024.6.2 [OPNsense]
        py311-cffi: 1.16.0 [OPNsense]
        py311-charset-normalizer: 3.3.2_1 [OPNsense]
        py311-cryptography: 42.0.8,1 [OPNsense]
        py311-dnspython: 2.6.1,1 [OPNsense]
        py311-duckdb: 1.0.0 [OPNsense]
        py311-h11: 0.14.0 [OPNsense]
        py311-h2: 4.1.0 [OPNsense]
        py311-hpack: 4.0.0 [OPNsense]
        py311-httpcore: 1.0.5 [OPNsense]
        py311-httpx: 0.27.0_1 [OPNsense]
        py311-hyperframe: 6.0.0 [OPNsense]
        py311-idna: 3.7 [OPNsense]
        py311-markupsafe: 2.1.5_1 [OPNsense]
        py311-netaddr: 1.3.0 [OPNsense]
        py311-numexpr: 2.9.0_1 [OPNsense]
        py311-numpy: 1.25.0_7,1 [OPNsense]
        py311-openssl: 23.2.0,1 [OPNsense]
        py311-outcome: 1.3.0_1 [OPNsense]
        py311-pandas: 2.0.3_2,1 [OPNsense]
        py311-pyasn1: 0.6.0 [OPNsense]
        py311-pyasn1-modules: 0.4.0 [OPNsense]
        py311-pycparser: 2.22 [OPNsense]
        py311-pylsqpack: 0.3.18 [OPNsense]
        py311-pytz: 2024.1,1 [OPNsense]
        py311-requests: 2.32.3 [OPNsense]
        py311-service-identity: 24.1.0 [OPNsense]
        py311-sniffio: 1.3.1 [OPNsense]
        py311-socksio: 1.0.0_1 [OPNsense]
        py311-sortedcontainers: 2.4.0 [OPNsense]
        py311-trio: 0.25.1 [OPNsense]
        py311-tzdata: 2024.1 [OPNsense]
        py311-ujson: 5.10.0 [OPNsense]
        py311-vici: 5.9.11 [OPNsense]
        radvd: 2.19_3 [OPNsense]
        samplicator: 1.3.8.r1_1 [OPNsense]
        strongswan: 5.9.14 [OPNsense]
        sudo: 1.9.15p5_4 [OPNsense]
        suricata: 7.0.5_1 [OPNsense]
        syslog-ng: 4.7.1 [OPNsense]
        unbound: 1.20.0_1 [OPNsense]
        wpa_supplicant: 2.10_10 [OPNsense]
        zip: 3.0_2 [OPNsense]

Number of packages to be installed: 122

The process will require 721 MiB more space.
101 MiB to be downloaded.

[franco]

Most is installed anyway, but the problem is that the package manager forgot that it was indeed installed so it needs to go through the motions again.


Cheers,
Franco

[rfox]

Understood - THX - any reason this occurred or just an anomaly ?

[franco]

Typical sqlite database corruption (likely in conjunction with UFS).


Cheers,
Franco

[rfox]

I re-ran the healthcheck just for fun and it still says "Version 24.1.8" under kernel version and base version ?!?  Is that still OK ??

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.1.9_3 at Thu Jun 20 17:31:03 CEST 2024
>>> Root file system: /dev/gpt/rootfs
>>> Check installed kernel version
Version 24.1.8 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.1.8 is correct.
>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
   size (299, 564)
   sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x62040fc99f43c4ba77c425bee14abaaf6cf4c59d481c3029f56e6c7467d6fd26)
>>> Check installed repositories
OPNsense
SunnyValley
repo-mihak
>>> Check installed plugins
os-collectd 1.4_1
os-crowdsec 1.0.8_1
os-ddclient 1.21_2
os-dmidecode 1.1_1
os-hw-probe 1.0_1
os-iperf 1.0_1
os-maltrail 1.10
os-mdns-repeater 1.1_1
os-net-snmp 1.5_3
os-netdata 1.2_1
os-ntopng 1.3
os-redis 1.1_2
os-sensei 1.17.4
os-sensei-updater 1.17
os-speedtest-community 0.9_5
os-sunnyvalley 1.4_3
os-theme-rebellion 1.8.10
os-vnstat 1.3_1
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 68 dependencies to check.
Checking packages: .................................................
pkg-1.19.2_1 is set to automatic
Checking packages: .................... done
***DONE***

[franco]

> Version 24.1.8 is correct.

It appears to think 24.1.8 is correct... which is... err.. correct


Cheers,
Franco

[rfox]

But at the beginning it says: "Currently running OPNsense 24.1.9_3 at Thu Jun 20 17:31:03 CEST 2024" ?!?

[franco]

If you look at your packages list:

opnsense @ 24.1.9(_x)
base @ 24.1.8
kernel @ 24.1.8
opnsense-update @ 24.1.8 <-- this is what steers the base and kernel actually

the rest of the packages uses whatever version was last released. No relation to 24.1(.9) necessary.


Cheers,
Franco

[newsense]

>>> Check installed repositories
OPNsense
SunnyValley
repo-mihak

This highlighted repo might be interfering too, was last updated 8 months ago on GH and it may cause issues if you have packages installed from there