Elasticsearch8 not removed after uninstalling Zenarmor (OPNsense)

[sammycda]

I installed Zenarmor on my OPNsense system and later used their uninstaller to remove it. After Zenarmor was removed it left "elasticsearch8" still installed on the system. It's showing up under Packages.

When I run an audit it shows that elasticsearch8 is still looking for 7 missing files. The audit log is below.

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.1.9_4 at Wed Jul 10 13:44:34 PDT 2024
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 24.1.8 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.1.8 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense
>>> Check installed plugins
os-dec-hw 1.0
os-etpro-telemetry 1.6_3
os-google-cloud-sdk 1.0_1
os-intrusion-detection-content-et-open 1.0.2_2
os-theme-cicada 1.35
os-upnp 1.5_6
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages:
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/elasticsearch.yml.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/jvm.options.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/log4j2.properties.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/role_mapping.yml.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/roles.yml.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/users.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/users_roles.sample
Checking all packages............. done
>>> Check for core packages consistency
Core package "opnsense" has 68 dependencies to check.
Checking packages: ..................................................................... done
***DONE***

Any idea how to remove elasticsearch8 from my system? Why isn't it removed with the Zemarmor uninstaller?

[IHK]

The problem you reported has been reproduced in our own lab environment. A fix for this problem will be released with the next version.

Thanks for your cooperation.


You can use the following commands as a workaround solution.

pkg remove elasticsearch8
pkg autoremove
rm -fr /usr/local/datastore/elasticsearch
rm -fr /usr/local/etc/elasticsearch

[franco]

Probably said this a number of times over the years... do not unset the automatic flag for dependencies or run pkg install commands in scripting that do not set the automatic flag. Dependencies should be handled by top packages or meta packages (plguins) only.


Cheers,
Franco