Updates Not Working - Keeps updating same 19 pkgs ad infinitum but never updates

[satvrnvs]

I'm not sure what the deal is.  I go System > Firmware > Updates.  It says there are 19 updates, I update and the next time I update, same packages -- again and again and again!  I'll paste output below. 

So, I ssh into the box, and I do option 12, same thing.  I go option 8 and do in manually in the shell, same thing.

AI suggested I kill crowdsec daemon:

Code Select Expand

pkill -9 -f 'daemon: crowdsec'
pkill -9 -f 'crowdsec -c'
Still doesn't work. 

It suggested:

Code Select Expand

pkg clean -a
pkg update -f
Still doesn't work.

It suggested all sorts of stuff like this:

Code Select Expand

pkg clean -a
pkg update -f
pkg-static upgrade -f pkg
pkg bootstrap -f
Still doesn't work.

So, it suggested this:

Code Select Expand

opnsense-update -bf
opnsense-update -b  # Update base system
opnsense-update -k  # Update kernel
opnsense-update -p  # Update packages
Still doesn't work...

Any ideas???

(yes, I rebooted the system multiple times as well...)

----It just does this on and on and on.  For days now-----
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 24.7.8 at Fri Nov 15 22:45:11 CST 2024
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 851 packages processed.
Updating SunnyValley repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: ... done
Processing entries: ....... done
SunnyValley repository update completed. 66 packages processed.
Updating mimugmail repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.pkg: ........ done
Processing entries: .......... done
mimugmail repository update completed. 197 packages processed.
All repositories are up to date.
Checking integrity... done (0 conflicting)
Your packages are up to date.
Checking for upgrades (12 candidates): .......... done
Processing candidates (12 candidates): ........ done
The following 19 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
   alsa-lib: 1.2.12 [mimugmail]
   brotli: 1.1.0,1 [SunnyValley]
   fontconfig: 2.15.0_2,1 [SunnyValley]
   freetype2: 2.13.2 [SunnyValley]
   giflib: 5.2.2 [SunnyValley]
   graphite2: 1.3.14 [mimugmail]
   jbigkit: 2.1_2 [SunnyValley]
   jpeg-turbo: 3.0.3 [SunnyValley]
   lcms2: 2.16_2 [mimugmail]
   lerc: 4.0.0 [OPNsense]
   libXext: 1.3.6,1 [mimugmail]
   libXfixes: 6.0.1 [mimugmail]
   libXi: 1.8.1,1 [mimugmail]
   libXrender: 0.9.11 [mimugmail]
   libdeflate: 1.20 [SunnyValley]
   libfontenc: 1.1.8 [SunnyValley]
   png: 1.6.43 [SunnyValley]
   tiff: 4.7.0 [OPNsense]
   zstd: 1.5.6 [SunnyValley]

Number of packages to be installed: 19

The process will require 17 MiB more space.
4 MiB to be downloaded.
***DONE***

[satvrnvs]

Do you guys think this is related to the ZenArmor issue?

https://forum.opnsense.org/index.php?topic=41727.0

[franco]

mimugmail, SunnyValley .. I only see thid party repository complaints ;)

[Patrick M. Hausen]

Seems like adding more than one might not be the best idea.  ;)

Getting a consistent state across multiple repos would require a coordination effort by the responsible parties.

[satvrnvs]

mimugmail, SunnyValley .. I only see thid party repository complaints ;)

Fair enough.  I thought maybe I could get some help here.  I guess I'll have to find out who's responsible for those repos and talk to them.  At least there is nothing wrong with my OPNSense.  That's a good thing...  =)  Thanx

[satvrnvs]

Seems like adding more than one might not be the best idea.  ;)

Getting a consistent state across multiple repos would require a coordination effort by the responsible parties.

Thank you for this!  I'll do some research but if you have an idea, I'd appreciate it.  How do you propose I do this? 

[Patrick M. Hausen]

You cannot do anything about this. Max-IT (mimugmail) and Suricata would have to coordinate the versions of all packages in their respective repos. Unlikely to happen. That's what I wanted to express: best use only one third party repo.

[satvrnvs]

You cannot do anything about this. Max-IT (mimugmail) and Suricata would have to coordinate the versions of all packages in their respective repos. Unlikely to happen. That's what I wanted to express: best use only one third party repo.

I'm not well skilled in BSD...  So, I would appreciate any help you can offer with this.

Which third party repo is best and how do I use that one only??

[Patrick M. Hausen]

Do you run Suricata? Want to keep it? Then remove all plugins from the mimugmail repo and delete it. Run anything from the mimugmail repo like AdGuard Home and want to keep it? Remove Suricata and their repo.

The point I am making is that installing packages from two uncoordinated and completely unrelated third party vendors on OPNsense is asking for trouble. One third party repo will work well most of the time. Two might lead to conflicts with a higher probability.

OPNsense is an appliance OS and the only plugins guaranteed to work are the ones by Deciso/OPNsense. As soon as you install third party things (which obviously you did) you do so at your own risk.

[satvrnvs]

Thank you.  I ended up uninstalling ZenArmor and that fixed the problem.  Now everything works.  =)  Thank you so much for your help!

Do you run Suricata? Want to keep it? Then remove all plugins from the mimugmail repo and delete it. Run anything from the mimugmail repo like AdGuard Home and want to keep it? Remove Suricata and their repo.

The point I am making is that installing packages from two uncoordinated and completely unrelated third party vendors on OPNsense is asking for trouble. One third party repo will work well most of the time. Two might lead to conflicts with a higher probability.

OPNsense is an appliance OS and the only plugins guaranteed to work are the ones by Deciso/OPNsense. As soon as you install third party things (which obviously you did) you do so at your own risk.