Repository access error

[w0l]

Hi,

After 24.7.10 update from 24.7.9, I now cannot access any repository with a "Permission denied" error.

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 24.7.10_2 (amd64) at Sat Dec 14 20:47:22 AEDT 2024
Fetching changelog information, please wait... fetch: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/sets/changelog.txz: Permission denied
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/meta.txz: Permission denied
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: Permission denied
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.txz: Permission denied
Unable to update repository OPNsense
Updating SunnyValley repository catalogue...
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/meta.txz: Permission denied
repository SunnyValley has no meta file, using default settings
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/packagesite.pkg: Permission denied
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/packagesite.txz: Permission denied
Unable to update repository SunnyValley
Error updating repositories!
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
pkg: Repository OPNsense cannot be opened. 'pkg update' required
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***

Manual pkg update fails in the same way as either user or root.

Any thoughts?

Cheers,

[franco]

Can you do a connectivity audit? Seeing two separate sites on the Internet misbehaving the same way is certainly odd.


Cheers,
Franco

[w0l]

***GOT REQUEST TO AUDIT CONNECTIVITY***
Currently running OPNsense 24.7.10_2 (amd64) at Sun Dec 15 00:15:00 AEDT 2024
Checking connectivity for host: pkg.opnsense.org -> 89.149.222.99
PING 89.149.222.99 (89.149.222.99): 1500 data bytes
1508 bytes from 89.149.222.99: icmp_seq=0 ttl=47 time=281.324 ms
1508 bytes from 89.149.222.99: icmp_seq=1 ttl=47 time=281.122 ms
1508 bytes from 89.149.222.99: icmp_seq=2 ttl=47 time=281.983 ms
1508 bytes from 89.149.222.99: icmp_seq=3 ttl=47 time=281.582 ms

--- 89.149.222.99 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 281.122/281.503/281.983/0.321 ms
Checking connectivity for repository (IPv4): https://pkg.opnsense.org/FreeBSD:14:amd64/24.7
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/meta.txz: Permission denied
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: Permission denied
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.txz: Permission denied
Unable to update repository OPNsense
Updating SunnyValley repository catalogue...
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/meta.txz: Permission denied
repository SunnyValley has no meta file, using default settings
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/packagesite.pkg: Permission denied
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/packagesite.txz: Permission denied
Unable to update repository SunnyValley
Updating ntop repository catalogue...
pkg: https://packages.ntop.org/FreeBSD/FreeBSD:14:amd64/latest/meta.txz: Permission denied
repository ntop has no meta file, using default settings
pkg: https://packages.ntop.org/FreeBSD/FreeBSD:14:amd64/latest/packagesite.pkg: Permission denied
pkg: https://packages.ntop.org/FreeBSD/FreeBSD:14:amd64/latest/packagesite.txz: Permission denied
Unable to update repository ntop
Error updating repositories!
Checking connectivity for host: pkg.opnsense.org -> 2001:1af8:5300:a010:1::1
ping: UDP connect: No route to host
Checking connectivity for repository (IPv6): https://pkg.opnsense.org/FreeBSD:14:amd64/24.7
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/meta.txz: Non-recoverable resolver failure
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: Non-recoverable resolver failure
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.txz: Non-recoverable resolver failure
Unable to update repository OPNsense
Updating SunnyValley repository catalogue...
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/meta.txz: Non-recoverable resolver failure
repository SunnyValley has no meta file, using default settings
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/packagesite.pkg: Non-recoverable resolver failure
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:14:amd64/24.7/${SUBSCRIPTION}/packagesite.txz: Non-recoverable resolver failure
Unable to update repository SunnyValley
Updating ntop repository catalogue...
pkg: https://packages.ntop.org/FreeBSD/FreeBSD:14:amd64/latest/meta.txz: Non-recoverable resolver failure
repository ntop has no meta file, using default settings
pkg: https://packages.ntop.org/FreeBSD/FreeBSD:14:amd64/latest/packagesite.pkg: Non-recoverable resolver failure
pkg: https://packages.ntop.org/FreeBSD/FreeBSD:14:amd64/latest/packagesite.txz: Non-recoverable resolver failure
Unable to update repository ntop
Error updating repositories!
Checking server certificate for host: pkg.opnsense.org
0020E1949D410000:error:8000000D:system library:BIO_connect:Permission denied:/usr/src/crypto/openssl/crypto/bio/bio_sock2.c:125:calling connect()
0020E1949D410000:error:10000067:BIO routines:BIO_connect:connect error:/usr/src/crypto/openssl/crypto/bio/bio_sock2.c:127:
connect:errno=13
Checking server certificate for host: updates.zenarmor.com
00200127BB240000:error:8000000D:system library:BIO_connect:Permission denied:/usr/src/crypto/openssl/crypto/bio/bio_sock2.c:125:calling connect()
00200127BB240000:error:10000067:BIO routines:BIO_connect:connect error:/usr/src/crypto/openssl/crypto/bio/bio_sock2.c:127:
00200127BB240000:error:8000000D:system library:BIO_connect:Permission denied:/usr/src/crypto/openssl/crypto/bio/bio_sock2.c:125:calling connect()
00200127BB240000:error:10000067:BIO routines:BIO_connect:connect error:/usr/src/crypto/openssl/crypto/bio/bio_sock2.c:127:
00200127BB240000:error:8000000D:system library:BIO_connect:Permission denied:/usr/src/crypto/openssl/crypto/bio/bio_sock2.c:125:calling connect()
00200127BB240000:error:10000067:BIO routines:BIO_connect:connect error:/usr/src/crypto/openssl/crypto/bio/bio_sock2.c:127:
connect:errno=13
***DONE***

Cheers,