1.17.6 update problem

[Greg_E]

This is mostly an FYI.

I noticed today that the dashboard in Zenarmor said there was an update, so I clicked on the button to start this process... It never went farther than 30%, after about an hour, I went to system --> firmware --> status and checked for updates. This found the 1.17.6 update and was able to get this installed.

I know the Zenarmor Dashboard way has worked for me in the past, but not today.

I'm running current Business version of OPN.

[lwwarner]

Slightly different behavior for me.

Upgrade of os-sensei: 1.17.5 -> 1.17.6 [SunnyValley] failed with this error:

pkg-static: Fail to rename /usr/local/zenarmor/py_venv/lib/python3.11/site-packages/.pkgtemp.importlib_metadata-8.2.0.dist-info.t99qtdFbsCxR -> /usr/local/zenarmor/py_venv/lib/python3.11/site-packages/importlib_metadata-8.2.0.dist-info:Directory not empty

Plugin version remains at 1.17.5:
os-sensei (installed)   1.17.5   227MiB   3   SunnyValley   Next Generation Firewall Extensions for OPNsense (ZENARMOR)

Zenarmor Dashboard and all other Zenarmor pages will not load. Displays a spinning circle and nothing else.

Type    opnsense-business   
Versions    OPNsense 24.4.1_3-amd64
FreeBSD 13.2-RELEASE-p12
OpenSSL 3.0.14

[Greg_E]

That's the same version of OPN that I'm on. I'm using an Intel Xeon E3-1230v5 with 16gb of ram if that matters.

Have you tried a reboot to see if anything is recovered when it comes back up?

Did you try to update from the Zenarmor dashboard or through the system like I ended up doing?

Have you looked in system --> firmware --> packages and tried to reinstall the two Sensei packages? I'm not sure if you can uninstall the packages and then reinstall them and keep your settings.

Kind of out of ideas after that.

[lwwarner]

Update was run from System: Firmware, not the Zenaromor dashboard. Reinstalling the os-sensei package did the trick:

os-sensei   1.17.6   212MiB   SunnyValley   BSD2CLAUSE   Next Generation Firewall Extensions for OPNsense (ZENARMOR)

The plugin is now up to date and running normally again.

Thanks!

[yeraycito]

Updated without problems from System - Firmware

[Greg_E]

I've had this fail in the past, and the reinstall fixed things, but mostly the update process just works.

[really_lost]

I'm on the same versions of opnsense and zenarmor as lwwarner.  I attempted the same update via the System: Firmware.  I saw the same fail to rename error, though my random bits at the end of the directory were different.

After that no ZenArmor pages would load.

I did a reinstall of the os-sensei package.  When I went to the ZenArmor dashboard and had a splash screen over it indicating that I had a different version and needed a ZenArmor restart.  After that all attempts to load any opnsense pages gave a 503 service unavailable error.

I ssh'd into opnsense and chose menu option 11: Reload all services.  That looks to be hung at "Info: conf-yaml-loader: Including configuration file custom.yaml." just after loading suricata.  However, the web interface and ZenArmor are back up.

I have suricata enabled.  I'd played with some rules, but ultimately disabled all rules.

I'm hoping my reload all services eventually comes back to a command prompt.  If it doesn't, I may pretend this is a Windows system and just restart.