Failure to update from 23

[charles.adams]

I finally got around to unboxing and setting up my DEC850. I have a valid BE license and it is input into the GUI.

As the first step I attemp to update via GUI. I get that an update is availible but when it tries to apply it fails.

Code Select Expand

***GOT REQUEST TO UPDATE***
Currently running OPNsense 23.10 at Tue Jul 16 00:24:29 CDT 2024
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 873 packages processed.
All repositories are up to date.
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 873 packages processed.
All repositories are up to date.
Checking for upgrades (145 candidates): .......... done
Processing candidates (145 candidates): ....... done
The following 95 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
libpfctl: 0.8
openssl111: 1.1.1w
py39-pyasn1: 0.5.0
py39-pyasn1-modules: 0.3.0
py39-service-identity: 23.1.0
py39-typing-extensions: 4.9.0
squid-langpack: 7.0.0.20240307

Installed packages to be UPGRADED:
beep: 1.0_1 -> 1.0_2
choparp: 20150613 -> 20150613_1
curl: 8.3.0 -> 8.6.0
cyrus-sasl: 2.1.28 -> 2.1.28_1
easy-rsa: 3.1.6 -> 3.1.7
gettext-runtime: 0.22_1 -> 0.22.3
glib: 2.78.0,2 -> 2.78.3,2
ivykis: 0.42.4 -> 0.42.4_1
libfido2: 1.13.0 -> 1.14.0
libnet: 1.2,1 -> 1.3,1
libnghttp2: 1.56.0 -> 1.58.0
libpsl: 0.21.2_3 -> 0.21.2_4
libxml2: 2.10.4_1 -> 2.10.4_2
lighttpd: 1.4.71 -> 1.4.73
mpd5: 5.9_16 -> 5.9_17
nss: 3.93 -> 3.95
oniguruma: 6.9.8_1 -> 6.9.9
openssh-portable: 9.3.p2_1,1 -> 9.6.p1_1,1
openvpn: 2.6.6 -> 2.6.8_1
opnsense-business: 23.10 -> 23.10.3_1
opnsense-installer: 23.1 -> 24.1
opnsense-lang: 23.7.4 -> 23.7.11
opnsense-update: 23.7.4 -> 23.7.10_1
os-OPNBEcore: 1.2 -> 1.3
perl5: 5.34.1_3 -> 5.36.3_1
pftop: 0.8_4 -> 0.10
php82: 8.2.11 -> 8.2.14
php82-ctype: 8.2.11 -> 8.2.14
php82-curl: 8.2.11 -> 8.2.14
php82-dom: 8.2.11 -> 8.2.14
php82-filter: 8.2.11 -> 8.2.14
php82-gettext: 8.2.11 -> 8.2.14
php82-ldap: 8.2.11 -> 8.2.14
php82-mbstring: 8.2.11 -> 8.2.14
php82-pcntl: 8.2.11 -> 8.2.14
php82-pdo: 8.2.11 -> 8.2.14
php82-phpseclib: 3.0.23 -> 3.0.34
php82-session: 8.2.11 -> 8.2.14
php82-simplexml: 8.2.11 -> 8.2.14
php82-sockets: 8.2.11 -> 8.2.14
php82-sqlite3: 8.2.11 -> 8.2.14
php82-xml: 8.2.11 -> 8.2.14
php82-zlib: 8.2.11 -> 8.2.14
pkcs11-helper: 1.29.0 -> 1.29.0_1
py39-Babel: 2.13.0 -> 2.14.0
py39-aioquic: 0.9.21 -> 0.9.24
py39-anyio: 4.0.0 -> 4.2.0
py39-certifi: 2023.7.22 -> 2023.11.17
py39-charset-normalizer: 3.3.0 -> 3.3.2
py39-cryptography: 41.0.4,1 -> 41.0.7_2,1
py39-cython: 0.29.36 -> 0.29.37
py39-exceptiongroup: 1.1.3 -> 1.2.0
py39-h2: 4.0.0 -> 4.1.0
py39-httpcore: 0.18.0 -> 1.0.2
py39-httpx: 0.25.0 -> 0.26.0
py39-idna: 3.4_1 -> 3.6
py39-netaddr: 0.9.0 -> 0.10.1
py39-numexpr: 2.8.7 -> 2.8.8
py39-numpy: 1.25.0,1 -> 1.25.0_4,1
py39-outcome: 1.2.0 -> 1.3.0_1
py39-pylsqpack: 0.3.17 -> 0.3.18
py39-trio: 0.22.2 -> 0.24.0
py39-tzdata: 2023.3_1 -> 2023.4
py39-ujson: 5.8.0 -> 5.9.0
py39-urllib3: 1.26.17,1 -> 1.26.18,1
py39-yaml: 6.0 -> 6.0.1
readline: 8.2.1 -> 8.2.7
rrdtool: 1.8.0_2 -> 1.8.0_3
sqlite3: 3.43.1,1 -> 3.44.0_1,1
squid: 5.9 -> 6.6
strongswan: 5.9.11_2 -> 5.9.13
sudo: 1.9.14p3 -> 1.9.15p5
suricata: 6.0.14 -> 6.0.17
unbound: 1.18.0 -> 1.19.3
wpa_supplicant: 2.10_9 -> 2.10_10

Installed packages to be REINSTALLED:
cpdup-1.22 (direct dependency changed: openssl111)
cyrus-sasl-gssapi-2.1.28 (direct dependency changed: openssl111)
gmp-6.3.0 (option added: INFO)
hostapd-2.10_8 (direct dependency changed: openssl111)
isc-dhcp44-server-4.4.3P1 (direct dependency changed: openssl111)
krb5-1.21.2 (direct dependency changed: openssl111)
ldns-1.8.3 (direct dependency changed: openssl111)
libevent-2.1.12 (direct dependency changed: openssl111)
monit-5.33.0 (direct dependency changed: openssl111)
ntp-4.2.8p17_1 (direct dependency changed: openssl111)
openldap26-client-2.6.6 (direct dependency changed: openssl111)
python39-3.9.18 (direct dependency changed: openssl111)
syslog-ng-4.4.0 (direct dependency changed: openssl111)

Number of packages to be installed: 7
Number of packages to be upgraded: 75
Number of packages to be reinstalled: 13

The process will require 19 MiB more space.
36 MiB to be downloaded.
[1/22] Fetching py39-Babel-2.14.0.pkg: .......... done
pkg-static: cached package py39-Babel-2.14.0: missing or size mismatch, fetching from remote
[2/22] Fetching py39-Babel-2.14.0.pkg: .......... done
pkg-static: cached package py39-Babel-2.14.0: missing or size mismatch, cannot continue
Consider running 'pkg update -f'
Starting web GUI...done.
Generating RRD graphs...done.
***DONE***

When I connect via serial using the provided cable it also fails when using option 12:

Code Select Expand

  0) Logout                              7) Ping host
  1) Assign interfaces                   8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Update from console
  6) Reboot system                      13) Restore a backup

Enter an option: 12

Fetching change log information, please wait... done

This will automatically fetch all available updates and apply them.

This update requires a reboot.

Proceed with this action? [y/N]: y

This business release is based on the OPNsense 23.7.12 community version
with additional reliability improvements.

Here are the full patch notes:

o system: fix handling of empty "serialusb" node set during import
o system: fix assorted PHP deprecation warnings
o system: add issuer and logo to OTP link
o system: prevent empty "user" node to crash during boot
o system: allow 0 length voucher passwords in authentication server
o reporting: update traffic graph colors to be contrast and consistent (contributed by brotherla)
o interfaces: add missing ACL entries for ARP/NDP tables
o interfaces: prevent modal x-axis overflow on packet capture page
o firewall: add optional advanced property "State policy" to influence state creation on a per rule base
o firewall: change default traffic normalization behavior and choose "in" as standard direction for manual rules
o firewall: refactor schedule matching and fix an end-of-the-month bug
o firewall: fix incorrect packet counters statistics collection
o firewall: fix virtual IP API use with subnet/subnet_bits usage
o firewall: fix floating rule display (contributed by lin-xianming)
o firewall: fix display of ICMP tooltip (contributed by lin-xianming)

Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 873 packages processed.
All repositories are up to date.
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 873 packages processed.
All repositories are up to date.
Checking for upgrades (145 candidates): .......... done
Processing candidates (145 candidates): ....... done
The following 95 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
        libpfctl: 0.8
        openssl111: 1.1.1w
        py39-pyasn1: 0.5.0
        py39-pyasn1-modules: 0.3.0
        py39-service-identity: 23.1.0
        py39-typing-extensions: 4.9.0
        squid-langpack: 7.0.0.20240307

Installed packages to be UPGRADED:
        beep: 1.0_1 -> 1.0_2
        choparp: 20150613 -> 20150613_1
        curl: 8.3.0 -> 8.6.0
        cyrus-sasl: 2.1.28 -> 2.1.28_1
        easy-rsa: 3.1.6 -> 3.1.7
        gettext-runtime: 0.22_1 -> 0.22.3
        glib: 2.78.0,2 -> 2.78.3,2
        ivykis: 0.42.4 -> 0.42.4_1
        libfido2: 1.13.0 -> 1.14.0
        libnet: 1.2,1 -> 1.3,1
        libnghttp2: 1.56.0 -> 1.58.0
        libpsl: 0.21.2_3 -> 0.21.2_4
        libxml2: 2.10.4_1 -> 2.10.4_2
        lighttpd: 1.4.71 -> 1.4.73
        mpd5: 5.9_16 -> 5.9_17
        nss: 3.93 -> 3.95
        oniguruma: 6.9.8_1 -> 6.9.9
        openssh-portable: 9.3.p2_1,1 -> 9.6.p1_1,1
        openvpn: 2.6.6 -> 2.6.8_1
        opnsense-business: 23.10 -> 23.10.3_1
        opnsense-installer: 23.1 -> 24.1
        opnsense-lang: 23.7.4 -> 23.7.11
        opnsense-update: 23.7.4 -> 23.7.10_1
        os-OPNBEcore: 1.2 -> 1.3
        perl5: 5.34.1_3 -> 5.36.3_1
        pftop: 0.8_4 -> 0.10
        php82: 8.2.11 -> 8.2.14
        php82-ctype: 8.2.11 -> 8.2.14
        php82-curl: 8.2.11 -> 8.2.14
        php82-dom: 8.2.11 -> 8.2.14
        php82-filter: 8.2.11 -> 8.2.14
        php82-gettext: 8.2.11 -> 8.2.14
        php82-ldap: 8.2.11 -> 8.2.14
        php82-mbstring: 8.2.11 -> 8.2.14
        php82-pcntl: 8.2.11 -> 8.2.14
        php82-pdo: 8.2.11 -> 8.2.14
        php82-phpseclib: 3.0.23 -> 3.0.34
        php82-session: 8.2.11 -> 8.2.14
        php82-simplexml: 8.2.11 -> 8.2.14
        php82-sockets: 8.2.11 -> 8.2.14
        php82-sqlite3: 8.2.11 -> 8.2.14
        php82-xml: 8.2.11 -> 8.2.14
        php82-zlib: 8.2.11 -> 8.2.14
        pkcs11-helper: 1.29.0 -> 1.29.0_1
        py39-Babel: 2.13.0 -> 2.14.0
        py39-aioquic: 0.9.21 -> 0.9.24
        py39-anyio: 4.0.0 -> 4.2.0
        py39-certifi: 2023.7.22 -> 2023.11.17
        py39-charset-normalizer: 3.3.0 -> 3.3.2
        py39-cryptography: 41.0.4,1 -> 41.0.7_2,1
        py39-cython: 0.29.36 -> 0.29.37
        py39-exceptiongroup: 1.1.3 -> 1.2.0
        py39-h2: 4.0.0 -> 4.1.0
        py39-httpcore: 0.18.0 -> 1.0.2
        py39-httpx: 0.25.0 -> 0.26.0
        py39-idna: 3.4_1 -> 3.6
        py39-netaddr: 0.9.0 -> 0.10.1
        py39-numexpr: 2.8.7 -> 2.8.8
        py39-numpy: 1.25.0,1 -> 1.25.0_4,1
        py39-outcome: 1.2.0 -> 1.3.0_1
        py39-pylsqpack: 0.3.17 -> 0.3.18
        py39-trio: 0.22.2 -> 0.24.0
        py39-tzdata: 2023.3_1 -> 2023.4
        py39-ujson: 5.8.0 -> 5.9.0
        py39-urllib3: 1.26.17,1 -> 1.26.18,1
        py39-yaml: 6.0 -> 6.0.1
        readline: 8.2.1 -> 8.2.7
        rrdtool: 1.8.0_2 -> 1.8.0_3
        sqlite3: 3.43.1,1 -> 3.44.0_1,1
        squid: 5.9 -> 6.6
        strongswan: 5.9.11_2 -> 5.9.13
        sudo: 1.9.14p3 -> 1.9.15p5
        suricata: 6.0.14 -> 6.0.17
        unbound: 1.18.0 -> 1.19.3
        wpa_supplicant: 2.10_9 -> 2.10_10

Installed packages to be REINSTALLED:
        cpdup-1.22 (direct dependency changed: openssl111)
        cyrus-sasl-gssapi-2.1.28 (direct dependency changed: openssl111)
        gmp-6.3.0 (option added: INFO)
        hostapd-2.10_8 (direct dependency changed: openssl111)
        isc-dhcp44-server-4.4.3P1 (direct dependency changed: openssl111)
        krb5-1.21.2 (direct dependency changed: openssl111)
        ldns-1.8.3 (direct dependency changed: openssl111)
        libevent-2.1.12 (direct dependency changed: openssl111)
        monit-5.33.0 (direct dependency changed: openssl111)
        ntp-4.2.8p17_1 (direct dependency changed: openssl111)
        openldap26-client-2.6.6 (direct dependency changed: openssl111)
        python39-3.9.18 (direct dependency changed: openssl111)
        syslog-ng-4.4.0 (direct dependency changed: openssl111)

Number of packages to be installed: 7
Number of packages to be upgraded: 75
Number of packages to be reinstalled: 13

The process will require 19 MiB more space.
36 MiB to be downloaded.
[1/22] Fetching py39-Babel-2.14.0.pkg: .......... done
pkg-static: cached package py39-Babel-2.14.0: missing or size mismatch, fetching from remote
[2/22] Fetching py39-Babel-2.14.0.pkg: .......... done
pkg-static: cached package py39-Babel-2.14.0: missing or size mismatch, cannot continue
Consider running 'pkg update -f'
Starting web GUI...done.
Generating RRD graphs...done.


Not sure how to proceed from here to update the DEC580. This forum seems to be the closest version number of what is installed (23.10) but please move the thread if this is incorrect.

[franco]

Can you try to issue this from the console:

# pkg clean -ya

And try again? it will get rid of the cached packages so that it would continue under normal circumstances.


Cheers,
Franco

[charles.adams]

I performed pkg clean -ya:

Code Select Expand

root@*****:~ # pkg clean -ya
The following package files will be deleted:
        /var/cache/pkg/gmp-6.3.0~498c46bd67.pkg
        /var/cache/pkg/mpd5-5.9_17.pkg
        /var/cache/pkg/krb5-1.21.2.pkg
        /var/cache/pkg/openssh-portable-9.6.p1_1,1~915372e451.pkg
        /var/cache/pkg/php82-8.2.14~a9e752868c.pkg
        /var/cache/pkg/choparp-20150613_1~b7435fd133.pkg
        /var/cache/pkg/wpa_supplicant-2.10_10~a6a3a2a7d6.pkg
        /var/cache/pkg/py39-httpcore-1.0.2~241a7e2716.pkg
        /var/cache/pkg/py39-pyasn1-modules-0.3.0.pkg
        /var/cache/pkg/py39-bottleneck-1.3.7_1.pkg
        /var/cache/pkg/libxml2-2.10.4_2.pkg
        /var/cache/pkg/py39-yaml-6.0.1~d90923b817.pkg
        /var/cache/pkg/gettext-runtime-0.22.3~2a9aa1778b.pkg
        /var/cache/pkg/php82-xml-8.2.14~5ace09e2f4.pkg
        /var/cache/pkg/libpsl-0.21.2_4~f017d9aca1.pkg
        /var/cache/pkg/syslog-ng-4.4.0.pkg
        /var/cache/pkg/openssh-portable-9.6.p1_1,1.pkg
        /var/cache/pkg/flock-2.37.2~4cfd284702.pkg
        /var/cache/pkg/cpdup-1.22.pkg
        /var/cache/pkg/php82-dom-8.2.14~ef3eeaffa8.pkg
        /var/cache/pkg/php82-ldap-8.2.14.pkg
        /var/cache/pkg/php82-pear-Crypt_CHAP-1.5.0_1~0234255663.pkg
        /var/cache/pkg/cyrus-sasl-gssapi-2.1.28~8da4c6bfea.pkg
        /var/cache/pkg/libnghttp2-1.58.0~295b183de8.pkg
        /var/cache/pkg/libyaml-0.2.5~8b2610ba49.pkg
        /var/cache/pkg/py39-tzdata-2023.4.pkg
        /var/cache/pkg/libfido2-1.14.0~789220b9e5.pkg
        /var/cache/pkg/php82-curl-8.2.14.pkg
        /var/cache/pkg/python39-3.9.18.pkg
        /var/cache/pkg/py39-openssl-23.2.0,1~422778608c.pkg
        /var/cache/pkg/openvpn-2.6.8_1.pkg
        /var/cache/pkg/unbound-1.19.3.pkg
        /var/cache/pkg/libevent-2.1.12.pkg
        /var/cache/pkg/py39-pylsqpack-0.3.18.pkg
        /var/cache/pkg/choparp-20150613_1.pkg
        /var/cache/pkg/py39-urllib3-1.26.18,1.pkg
        /var/cache/pkg/beep-1.0_2~c44ab54fc1.pkg
        /var/cache/pkg/py39-ujson-5.9.0.pkg
        /var/cache/pkg/py39-bottleneck-1.3.7_1~e7245666a1.pkg
        /var/cache/pkg/py39-pylsqpack-0.3.18~5182f12312.pkg
        /var/cache/pkg/py39-httpx-0.26.0.pkg
        /var/cache/pkg/php82-phpseclib-3.0.34~a7626a0f35.pkg
        /var/cache/pkg/pkg-1.19.2_1~6c501f4b59.pkg
        /var/cache/pkg/php82-phpseclib-3.0.34.pkg
        /var/cache/pkg/ivykis-0.42.4_1.pkg
        /var/cache/pkg/py39-ujson-5.9.0~a65018d20c.pkg
        /var/cache/pkg/py39-pyasn1-modules-0.3.0~3b2ab1d0b5.pkg
        /var/cache/pkg/opnsense-business-23.10.3_1~38d2cccd3b.pkg
        /var/cache/pkg/py39-numpy-1.25.0_4,1.pkg
        /var/cache/pkg/php82-sockets-8.2.14~415651dda4.pkg
        /var/cache/pkg/cyrus-sasl-2.1.28_1.pkg
        /var/cache/pkg/mpdecimal-2.5.1.pkg
        /var/cache/pkg/py39-pyasn1-0.5.0~f8c88a2a02.pkg
        /var/cache/pkg/e2fsprogs-libuuid-1.47.0.pkg
        /var/cache/pkg/os-OPNBEcore-1.3.pkg
        /var/cache/pkg/nss-3.95~880a5e56ac.pkg
        /var/cache/pkg/php82-session-8.2.14~9419a6427f.pkg
        /var/cache/pkg/lighttpd-1.4.73~71d52bdc88.pkg
        /var/cache/pkg/nettle-3.9.1~9dba8a9b0d.pkg
        /var/cache/pkg/php82-session-8.2.14.pkg
        /var/cache/pkg/php82-pdo-8.2.14~5bb563bc4c.pkg
        /var/cache/pkg/py39-exceptiongroup-1.2.0~acf1915a9c.pkg
        /var/cache/pkg/ivykis-0.42.4_1~4605b98c8c.pkg
        /var/cache/pkg/py39-numpy-1.25.0_4,1~e964a4d6b8.pkg
        /var/cache/pkg/py39-aioquic-0.9.24.pkg
        /var/cache/pkg/py39-trio-0.24.0~8f5a78e036.pkg
        /var/cache/pkg/py39-exceptiongroup-1.2.0.pkg
        /var/cache/pkg/py39-hpack-4.0.0.pkg
        /var/cache/pkg/py39-anyio-4.2.0~861f85e097.pkg
        /var/cache/pkg/py39-urllib3-1.26.18,1~5af8fe4113.pkg
        /var/cache/pkg/php82-zlib-8.2.14.pkg
        /var/cache/pkg/mpdecimal-2.5.1~a15461a395.pkg
        /var/cache/pkg/php82-pcntl-8.2.14.pkg
        /var/cache/pkg/suricata-6.0.17~56cd58d053.pkg
        /var/cache/pkg/py39-Jinja2-3.1.2~0b8de42f0f.pkg
        /var/cache/pkg/opnsense-update-23.7.10_1.pkg
        /var/cache/pkg/dpinger-3.3.pkg
        /var/cache/pkg/libpfctl-0.8.pkg
        /var/cache/pkg/krb5-1.21.2~a73ffbceb1.pkg
        /var/cache/pkg/libfido2-1.14.0.pkg
        /var/cache/pkg/easy-rsa-3.1.7~ecfad91a2c.pkg
        /var/cache/pkg/filterlog-0.7_1.pkg
        /var/cache/pkg/suricata-6.0.17.pkg
        /var/cache/pkg/php82-sqlite3-8.2.14.pkg
        /var/cache/pkg/syslog-ng-4.4.0~8f6ac558d5.pkg
        /var/cache/pkg/php82-mbstring-8.2.14.pkg
        /var/cache/pkg/ntp-4.2.8p17_1.pkg
        /var/cache/pkg/php82-simplexml-8.2.14~0a0fc78812.pkg
        /var/cache/pkg/py39-pyasn1-0.5.0.pkg
        /var/cache/pkg/php82-curl-8.2.14~a09d1f968d.pkg
        /var/cache/pkg/rrdtool-1.8.0_3~10892ade99.pkg
        /var/cache/pkg/py39-cython-0.29.37~ea6328ec67.pkg
        /var/cache/pkg/monit-5.33.0~5db92ebf18.pkg
        /var/cache/pkg/libpfctl-0.8~7cb09d349f.pkg
        /var/cache/pkg/php82-mbstring-8.2.14~aa2edad8b2.pkg
        /var/cache/pkg/libiconv-1.17.pkg
        /var/cache/pkg/py39-attrs-23.1.0.pkg
        /var/cache/pkg/openvpn-2.6.8_1~17de3f0550.pkg
        /var/cache/pkg/cyrus-sasl-gssapi-2.1.28.pkg
        /var/cache/pkg/php82-8.2.14.pkg
        /var/cache/pkg/curl-8.6.0.pkg
        /var/cache/pkg/py39-service-identity-23.1.0~8a76a148bb.pkg
        /var/cache/pkg/php82-pdo-8.2.14.pkg
        /var/cache/pkg/ntp-4.2.8p17_1~31baa87896.pkg
        /var/cache/pkg/flowd-0.9.1_3.pkg
        /var/cache/pkg/ldns-1.8.3~74135574ac.pkg
        /var/cache/pkg/libyaml-0.2.5.pkg
        /var/cache/pkg/py39-outcome-1.3.0_1~3ca96c0bc6.pkg
        /var/cache/pkg/php82-dom-8.2.14.pkg
        /var/cache/pkg/lighttpd-1.4.73.pkg
        /var/cache/pkg/gmp-6.3.0.pkg
        /var/cache/pkg/php82-pear-Crypt_CHAP-1.5.0_1.pkg
        /var/cache/pkg/libnet-1.3,1.pkg
        /var/cache/pkg/wpa_supplicant-2.10_10.pkg
        /var/cache/pkg/py39-anyio-4.2.0.pkg
        /var/cache/pkg/lzo2-2.10_1.pkg
        /var/cache/pkg/filterlog-0.7_1~28275c9141.pkg
        /var/cache/pkg/dpinger-3.3~cb882cb4c4.pkg
        /var/cache/pkg/py39-tzdata-2023.4~b93d3a1f46.pkg
        /var/cache/pkg/libcbor-0.10.2.pkg
        /var/cache/pkg/isc-dhcp44-server-4.4.3P1~53a17125e1.pkg
        /var/cache/pkg/php82-pcntl-8.2.14~db10631da0.pkg
        /var/cache/pkg/py39-aioquic-0.9.24~dc80f97719.pkg
        /var/cache/pkg/py39-openssl-23.2.0,1.pkg
        /var/cache/pkg/sqlite3-3.44.0_1,1.pkg
        /var/cache/pkg/hostapd-2.10_8~38c4635b58.pkg
        /var/cache/pkg/libnghttp2-1.58.0.pkg
        /var/cache/pkg/py39-cryptography-41.0.7_2,1~36e2b7bb37.pkg
        /var/cache/pkg/json-c-0.17.pkg
        /var/cache/pkg/cpustats-0.1~3a7decf5dd.pkg
        /var/cache/pkg/gettext-runtime-0.22.3.pkg
        /var/cache/pkg/cpustats-0.1.pkg
        /var/cache/pkg/py39-async_generator-1.10~b4a08f05a2.pkg
        /var/cache/pkg/libcbor-0.10.2~6e81150bb0.pkg
        /var/cache/pkg/py39-cryptography-41.0.7_2,1.pkg
        /var/cache/pkg/easy-rsa-3.1.7.pkg
        /var/cache/pkg/opnsense-business-23.10.3_1.pkg
        /var/cache/pkg/pkcs11-helper-1.29.0_1.pkg
        /var/cache/pkg/py39-hpack-4.0.0~ad6381df73.pkg
        /var/cache/pkg/lzo2-2.10_1~66d9551b8b.pkg
        /var/cache/pkg/php82-zlib-8.2.14~5f9fe2ca50.pkg
        /var/cache/pkg/py39-charset-normalizer-3.3.2.pkg
        /var/cache/pkg/py39-httpx-0.26.0~14c45022a2.pkg
        /var/cache/pkg/py39-async_generator-1.10.pkg
        /var/cache/pkg/py39-charset-normalizer-3.3.2~5ac4daa215.pkg
        /var/cache/pkg/opnsense-update-23.7.10_1~9a0dcef969.pkg
        /var/cache/pkg/py39-numexpr-2.8.8~361e8d2c92.pkg
        /var/cache/pkg/py39-service-identity-23.1.0.pkg
        /var/cache/pkg/php82-ldap-8.2.14~142ab4d1b1.pkg
        /var/cache/pkg/hostapd-2.10_8.pkg
        /var/cache/pkg/py39-yaml-6.0.1.pkg
        /var/cache/pkg/mpd5-5.9_17~b9dd64940a.pkg
        /var/cache/pkg/os-OPNBEcore-1.3~f17f84973e.pkg
        /var/cache/pkg/json-c-0.17~e13cd2337d.pkg
        /var/cache/pkg/libunistring-1.1.pkg
        /var/cache/pkg/nss-3.95.pkg
        /var/cache/pkg/py39-markupsafe-2.1.3.pkg
        /var/cache/pkg/php82-xml-8.2.14.pkg
        /var/cache/pkg/php82-simplexml-8.2.14.pkg
        /var/cache/pkg/isc-dhcp44-server-4.4.3P1.pkg
        /var/cache/pkg/curl-8.6.0~76dc6cf4f1.pkg
        /var/cache/pkg/pkcs11-helper-1.29.0_1~0a69a9cb9d.pkg
        /var/cache/pkg/beep-1.0_2.pkg
        /var/cache/pkg/nettle-3.9.1.pkg
        /var/cache/pkg/libpsl-0.21.2_4.pkg
        /var/cache/pkg/libevent-2.1.12~19700e67f7.pkg
        /var/cache/pkg/py39-markupsafe-2.1.3~510d9ec2b9.pkg
        /var/cache/pkg/ldns-1.8.3.pkg
        /var/cache/pkg/py39-Jinja2-3.1.2.pkg
        /var/cache/pkg/rrdtool-1.8.0_3.pkg
        /var/cache/pkg/libiconv-1.17~099609728f.pkg
        /var/cache/pkg/py39-attrs-23.1.0~1f3496f0de.pkg
        /var/cache/pkg/php82-sockets-8.2.14.pkg
        /var/cache/pkg/pkg-1.19.2_1.pkg
        /var/cache/pkg/flowd-0.9.1_3~8e7a76d467.pkg
        /var/cache/pkg/cyrus-sasl-2.1.28_1~11d351a0a9.pkg
        /var/cache/pkg/py39-cython-0.29.37.pkg
        /var/cache/pkg/e2fsprogs-libuuid-1.47.0~df18e592ce.pkg
        /var/cache/pkg/libnet-1.3,1~4572c8653d.pkg
        /var/cache/pkg/flock-2.37.2.pkg
        /var/cache/pkg/py39-outcome-1.3.0_1.pkg
        /var/cache/pkg/php82-sqlite3-8.2.14~0366ba07db.pkg
        /var/cache/pkg/unbound-1.19.3~b16863e84c.pkg
        /var/cache/pkg/cpdup-1.22~24ac9d04c1.pkg
        /var/cache/pkg/libidn2-2.3.4~3829f2c82a.pkg
        /var/cache/pkg/monit-5.33.0.pkg
        /var/cache/pkg/py39-httpcore-1.0.2.pkg
        /var/cache/pkg/libidn2-2.3.4.pkg
        /var/cache/pkg/sqlite3-3.44.0_1,1~e59677153f.pkg
        /var/cache/pkg/libxml2-2.10.4_2~87f240d317.pkg
        /var/cache/pkg/libunistring-1.1~2de6bdcac8.pkg
        /var/cache/pkg/python39-3.9.18~66962bb4e2.pkg
        /var/cache/pkg/py39-trio-0.24.0.pkg
        /var/cache/pkg/py39-numexpr-2.8.8.pkg
The cleanup will free 64 MiB
Deleting files: 100%
All done


and tried updating from the console again:

Code Select Expand

  0) Logout                              7) Ping host
  1) Assign interfaces                   8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Update from console
  6) Reboot system                      13) Restore a backup

Enter an option: 12

Fetching change log information, please wait... done

This will automatically fetch all available updates and apply them.

This update requires a reboot.

Proceed with this action? [y/N]: y

This business release is based on the OPNsense 23.7.12 community version
with additional reliability improvements.

Here are the full patch notes:

o system: fix handling of empty "serialusb" node set during import
o system: fix assorted PHP deprecation warnings
o system: add issuer and logo to OTP link
o system: prevent empty "user" node to crash during boot
o system: allow 0 length voucher passwords in authentication server
o reporting: update traffic graph colors to be contrast and consistent (contributed by brotherla)
o interfaces: add missing ACL entries for ARP/NDP tables
o interfaces: prevent modal x-axis overflow on packet capture page
o firewall: add optional advanced property "State policy" to influence state creation on a per rule base
o firewall: change default traffic normalization behavior and choose "in" as standard direction for manual rules
o firewall: refactor schedule matching and fix an end-of-the-month bug
o firewall: fix incorrect packet counters statistics collection
o firewall: fix virtual IP API use with subnet/subnet_bits usage
o firewall: fix floating rule display (contributed by lin-xianming)
o firewall: fix display of ICMP tooltip (contributed by lin-xianming)
on
o ipsec: show EAP-RADIUS settings only when legacy tunnels are being used
hon module
artup problems
o unbound: fix missing /lib nullfs mount in chroot
o unbound: add aggressive-nsec option toggle (contributed by kulikov-a)
o mvc: fix PHP_FLOAT_MIN being unreliable
ming)
o ui: fix epoch support as number in bootgrid
o plugins: os-OPNProxy 1.0.4 removes ident support
o plugins: os-OPNWAF 1.3 adds SSLVerifyDepth
o ports: curl 8.6.0[1]
o ports: suricata 6.0.17[2]
o ports: unbound 1.19.3[3]

A hotfix release was issued as 23.10.3_1:

o firmware: add fingerprint, migration notes and upgrade hint for 24.4


Stay safe,
Your OPNsense team

--
[1] https://curl.se/changes.html#8_6_0
[2] https://suricata.io/2024/03/19/suricata-7-0-4-and-6-0-17-released/
[3] https://nlnetlabs.nl/projects/unbound/download/#unbound-1-19-3

Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 873 packages processed.
All repositories are up to date.
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 873 packages processed.
All repositories are up to date.
Checking for upgrades (145 candidates): .......... done
Processing candidates (145 candidates): ....... done
The following 95 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
        libpfctl: 0.8
        openssl111: 1.1.1w
        py39-pyasn1: 0.5.0
        py39-pyasn1-modules: 0.3.0
        py39-service-identity: 23.1.0
        py39-typing-extensions: 4.9.0
        squid-langpack: 7.0.0.20240307

Installed packages to be UPGRADED:
        beep: 1.0_1 -> 1.0_2
        choparp: 20150613 -> 20150613_1
        curl: 8.3.0 -> 8.6.0
        cyrus-sasl: 2.1.28 -> 2.1.28_1
        easy-rsa: 3.1.6 -> 3.1.7
        gettext-runtime: 0.22_1 -> 0.22.3
        glib: 2.78.0,2 -> 2.78.3,2
        ivykis: 0.42.4 -> 0.42.4_1
        libfido2: 1.13.0 -> 1.14.0
        libnet: 1.2,1 -> 1.3,1
        libnghttp2: 1.56.0 -> 1.58.0
        libpsl: 0.21.2_3 -> 0.21.2_4
        libxml2: 2.10.4_1 -> 2.10.4_2
        lighttpd: 1.4.71 -> 1.4.73
        mpd5: 5.9_16 -> 5.9_17
        nss: 3.93 -> 3.95
        oniguruma: 6.9.8_1 -> 6.9.9
        openssh-portable: 9.3.p2_1,1 -> 9.6.p1_1,1
        openvpn: 2.6.6 -> 2.6.8_1
        opnsense-business: 23.10 -> 23.10.3_1
        opnsense-installer: 23.1 -> 24.1
        opnsense-lang: 23.7.4 -> 23.7.11
        opnsense-update: 23.7.4 -> 23.7.10_1
        os-OPNBEcore: 1.2 -> 1.3
        perl5: 5.34.1_3 -> 5.36.3_1
        pftop: 0.8_4 -> 0.10
        php82: 8.2.11 -> 8.2.14
        php82-ctype: 8.2.11 -> 8.2.14
        php82-curl: 8.2.11 -> 8.2.14
        php82-dom: 8.2.11 -> 8.2.14
        php82-filter: 8.2.11 -> 8.2.14
        php82-gettext: 8.2.11 -> 8.2.14
        php82-ldap: 8.2.11 -> 8.2.14
        php82-mbstring: 8.2.11 -> 8.2.14
        php82-pcntl: 8.2.11 -> 8.2.14
        php82-pdo: 8.2.11 -> 8.2.14
        php82-phpseclib: 3.0.23 -> 3.0.34
        php82-session: 8.2.11 -> 8.2.14
        php82-simplexml: 8.2.11 -> 8.2.14
        php82-sockets: 8.2.11 -> 8.2.14
        php82-sqlite3: 8.2.11 -> 8.2.14
        php82-xml: 8.2.11 -> 8.2.14
        php82-zlib: 8.2.11 -> 8.2.14
        pkcs11-helper: 1.29.0 -> 1.29.0_1
        py39-Babel: 2.13.0 -> 2.14.0
        py39-aioquic: 0.9.21 -> 0.9.24
        py39-anyio: 4.0.0 -> 4.2.0
        py39-certifi: 2023.7.22 -> 2023.11.17
        py39-charset-normalizer: 3.3.0 -> 3.3.2
        py39-cryptography: 41.0.4,1 -> 41.0.7_2,1
        py39-cython: 0.29.36 -> 0.29.37
        py39-exceptiongroup: 1.1.3 -> 1.2.0
        py39-h2: 4.0.0 -> 4.1.0
        py39-httpcore: 0.18.0 -> 1.0.2
        py39-httpx: 0.25.0 -> 0.26.0
        py39-idna: 3.4_1 -> 3.6
        py39-netaddr: 0.9.0 -> 0.10.1
        py39-numexpr: 2.8.7 -> 2.8.8
        py39-numpy: 1.25.0,1 -> 1.25.0_4,1
        py39-outcome: 1.2.0 -> 1.3.0_1
        py39-pylsqpack: 0.3.17 -> 0.3.18
        py39-trio: 0.22.2 -> 0.24.0
        py39-tzdata: 2023.3_1 -> 2023.4
        py39-ujson: 5.8.0 -> 5.9.0
        py39-urllib3: 1.26.17,1 -> 1.26.18,1
        py39-yaml: 6.0 -> 6.0.1
        readline: 8.2.1 -> 8.2.7
        rrdtool: 1.8.0_2 -> 1.8.0_3
        sqlite3: 3.43.1,1 -> 3.44.0_1,1
        squid: 5.9 -> 6.6
        strongswan: 5.9.11_2 -> 5.9.13
        sudo: 1.9.14p3 -> 1.9.15p5
        suricata: 6.0.14 -> 6.0.17
        unbound: 1.18.0 -> 1.19.3
        wpa_supplicant: 2.10_9 -> 2.10_10

Installed packages to be REINSTALLED:
        cpdup-1.22 (direct dependency changed: openssl111)
        cyrus-sasl-gssapi-2.1.28 (direct dependency changed: openssl111)
        gmp-6.3.0 (option added: INFO)
        hostapd-2.10_8 (direct dependency changed: openssl111)
        isc-dhcp44-server-4.4.3P1 (direct dependency changed: openssl111)
        krb5-1.21.2 (direct dependency changed: openssl111)
        ldns-1.8.3 (direct dependency changed: openssl111)
        libevent-2.1.12 (direct dependency changed: openssl111)
        monit-5.33.0 (direct dependency changed: openssl111)
        ntp-4.2.8p17_1 (direct dependency changed: openssl111)
        openldap26-client-2.6.6 (direct dependency changed: openssl111)
        python39-3.9.18 (direct dependency changed: openssl111)
        syslog-ng-4.4.0 (direct dependency changed: openssl111)

Number of packages to be installed: 7
Number of packages to be upgraded: 75
Number of packages to be reinstalled: 13

The process will require 19 MiB more space.
93 MiB to be downloaded.
[1/95] Fetching py39-httpx-0.26.0.pkg: .......... done
[2/95] Fetching unbound-1.19.3.pkg: .......... done
[3/95] Fetching php82-session-8.2.14.pkg: ..... done
[4/95] Fetching wpa_supplicant-2.10_10.pkg: .......... done
[5/95] Fetching opnsense-business-23.10.3_1.pkg: .......... done
[6/95] Fetching lighttpd-1.4.73.pkg: .......... done
[7/95] Fetching py39-pyasn1-0.5.0.pkg: .......... done
[8/95] Fetching py39-exceptiongroup-1.2.0.pkg: ... done
[9/95] Fetching opnsense-update-23.7.10_1.pkg: ..... done
[10/95] Fetching hostapd-2.10_8.pkg: .......... done
[11/95] Fetching py39-httpcore-1.0.2.pkg: .......... done
[12/95] Fetching py39-cryptography-41.0.7_2,1.pkg: .......... done
[13/95] Fetching monit-5.33.0.pkg: .......... done
[14/95] Fetching py39-service-identity-23.1.0.pkg: ... done
[15/95] Fetching nss-3.95.pkg: .......... done
[16/95] Fetching cpdup-1.22.pkg: .... done
[17/95] Fetching py39-pyasn1-modules-0.3.0.pkg: .......... done
[18/95] Fetching php82-zlib-8.2.14.pkg: ... done
[19/95] Fetching php82-dom-8.2.14.pkg: ......... done
[20/95] Fetching php82-simplexml-8.2.14.pkg: ... done
[21/95] Fetching py39-numpy-1.25.0_4,1.pkg: .......... done
pkg-static: cached package py39-numpy-1.25.0_4,1: missing or size mismatch, fetching from remote
[22/95] Fetching py39-numpy-1.25.0_4,1.pkg: .......... done
pkg-static: cached package py39-numpy-1.25.0_4,1: missing or size mismatch, cannot continue
Consider running 'pkg update -f'
Starting web GUI...done.
Generating RRD graphs...done.


It did more packages but still failed.

What can I try next?

[newsense]

How does a connectivity check look like ?

[charles.adams]

How does a connectivity check look like ?

passes

[newsense]

Not what I asked really

[charles.adams]

Not what I asked really

If you can be more specific in your question I would be happy to provide exactly what you seek.

[newsense]

Please post the whole output from the connectivity check

[charles.adams]

Please post the whole output from the connectivity check

Where do I find that feature? It does not show in the serial console and I haven't spotted it in the WebGUI.

[newsense]

Over SSH/console

Select option 12, answer with c to the y/n prompt.

In the GUI

System -Firmware - Status

Run an Audit - Connectivity

[franco]

Disk full?


Cheers,
Franco

[charles.adams]

Over SSH/console

Select option 12, answer with c to the y/n prompt.

In the GUI

System -Firmware - Status

Run an Audit - Connectivity

So before I ran the test below I tried option 12 again and it completed the upgrade to the latest 23.10 branch. However, when trying again to upgrade to 24.4 it is giving the same failure as the start of the thread.

The DEC850 is fresh from OPNSense shop. I hope it doesn't have a full disk!

As requested from the serial console:

Code Select Expand


Enter an option: 12

Fetching change log information, please wait... done

This will automatically fetch all available updates and apply them.

This update requires a reboot.

Proceed with this action? [y/N]: c

Checking connectivity for host: opnsense-update.deciso.com -> 89.149.211.205
PING 89.149.211.205 (89.149.211.205): 1500 data bytes

--- 89.149.211.205 ping statistics ---
4 packets transmitted, 0 packets received, 100.0% packet loss
Checking connectivity for repository (IPv4): https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 849 packages processed.
All repositories are up to date.
Checking connectivity for host: opnsense-update.deciso.com -> 2001:1af8:4f00:a005:5::
ping: UDP connect: No route to host
Checking connectivity for repository (IPv6): https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4
Updating OPNsense repository catalogue...
pkg: https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4/latest/meta.txz: Non-recoverable resolver failure
repository OPNsense has no meta file, using default settings
pkg: https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4/latest/packagesite.pkg: Non-recoverable resolver failure
pkg: https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4/latest/packagesite.txz: Non-recoverable resolver failure
Unable to update repository OPNsense
Error updating repositories!

Press any key to return to menu.


However, right before this and right after it (after performing a pkg clean -ya) it gets at least part way through the upgrade process. I am also able to access the internet to post to this form and perform searches via DuckDuckGo while this connection audit is running.

The DEC850 is connected directly to a Netgear Nighthawk M6 Pro that is configured to output a direct public IP via it's ethernet port in power cord only mode (this is how FirstNet directs using it in a fixed configuration as a modem only)

[newsense]

IPv6 is causing the issue there.

Checking connectivity for repository (IPv6): https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4
Updating OPNsense repository catalogue...
pkg: https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4/latest/meta.txz: Non-recoverable resolver failure
repository OPNsense has no meta file, using default settings
pkg: https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4/latest/packagesite.pkg: Non-recoverable resolver failure
pkg: https://opnsense-update.deciso.com/SUBSCRIPTION/FreeBSD:13:amd64/24.4/latest/packagesite.txz: Non-recoverable resolver failure
Unable to update repository OPNsense
Error updating repositories!

Go to System-Settings-General and make sure Prefer to use IPv4 even if IPv6 is available is checked. Save settings and try to update again.


https://<Your IP here>/system_general.php

[franco]

Sorry, I had to go into the posts to scrub the subscription key from the URL.

package py39-numpy-1.25.0_4,1 is definitely there, but let me try to replay an update there to see what happens. BRB.


Cheers,
Franco

[newsense]

My bad, tunnel vision and forgot the key would show up