The upgrade has finished and your device is being rebooted at the moment, please

[newsense]

First and foremost, if your SSD is on its last leg, go to System - Configuration - Backups and click on Download Configuration --- unencrypted.

Then you can try the following:

Verify you're not running out of free space.

Code Select Expand

df -hT

Then try reinstalling these packages.

Code Select Expand

pkg install -f pkg icu python311 py311-pandas
When done, do another healthcheck and post here the results you got following these 3 steps.

Code Select Expand

/usr/local/opnsense/scripts/system/firmware/health.sh

[gillbot]

root@OPNsense:~ # df -hT
Filesystem                 Type       Size    Used   Avail Capacity  Mounted on
zroot/ROOT/default         zfs        222G    1.4G    221G     1%    /
devfs                      devfs      1.0K      0B    1.0K     0%    /dev
/dev/gpt/efiboot0          msdosfs    260M    1.3M    259M     1%    /boot/efi
zroot/tmp                  zfs        221G    964K    221G     0%    /tmp
zroot/var/log              zfs        221G    677M    221G     0%    /var/log
zroot                      zfs        221G     96K    221G     0%    /zroot
zroot/var/audit            zfs        221G     96K    221G     0%    /var/audit
zroot/var/mail             zfs        221G     96K    221G     0%    /var/mail
zroot/usr/ports            zfs        221G     96K    221G     0%    /usr/ports
zroot/usr/src              zfs        221G     96K    221G     0%    /usr/src
zroot/var/crash            zfs        221G     96K    221G     0%    /var/crash
zroot/home                 zfs        221G     96K    221G     0%    /home
zroot/var/tmp              zfs        221G     96K    221G     0%    /var/tmp
devfs                      devfs      1.0K      0B    1.0K     0%    /var/dhcpd/dev
devfs                      devfs      1.0K      0B    1.0K     0%    /var/unbound/dev
/usr/local/lib/python3.11  nullfs     222G    1.4G    221G     1%    /var/unbound/usr/local/lib/python3.11
/lib                       nullfs     222G    1.4G    221G     1%    /var/unbound/lib
root@OPNsense:~ #

[gillbot]

how do I free space, no idea what could be using so much

[gillbot]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 25.1.2 (amd64) at Sat Mar  8 19:20:29 EST 2025
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 25.1.2 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 25.1.2 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
>>> Check installed plugins
os-etpro-telemetry 1.7_5
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 25.1.2 has 69 dependencies to check.
Checking packages: ...................................................................... done
***DONE***

[gillbot]

Noticed intrusion detection service was stopped on the dashboard so I started it and re-ran the health check.

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 25.1.2 (amd64) at Sat Mar  8 19:28:15 EST 2025
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 25.1.2 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 25.1.2 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
>>> Check installed plugins
os-etpro-telemetry 1.7_5
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .
isc-dhcp44-server-4.4.3P1_2: checksum mismatch for /usr/local/bin/omshell
Checking all packages.......
php83-google-api-php-client-2.4.0: missing file /usr/local/share/google-api-php-client/ve~dor/monolog/monolog/src/Monolog/Handler/PushoverHandler.php
Child process pid=3838 terminated abnormally: Segmentation fault
>>> Check for core packages consistency
Core package "opnsense" at 25.1.2 has 69 dependencies to check.
Checking packages: ...................................................................... done
***DONE***

[newsense]

Unsure why you have two different health checks there...

Reinstall the google and isc packages and do one more check

Code Select Expand

pkg install -f php83-google-api-php-client-2.4.0 isc-dhcp44-server-4.4.3P1_2

[gillbot]

There were two because the first completed ok, then I looked on the web ui dashboard and saw intrusion detection service had stopped, so I started it and ran the health check again

[gillbot]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 25.1.2 (amd64) at Sat Mar  8 20:23:49 EST 2025
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 25.1.2 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 25.1.2 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
>>> Check installed plugins
os-etpro-telemetry 1.7_5
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 25.1.2 has 69 dependencies to check.
Checking packages: ...................................................................... done
***DONE***

[newsense]

Looks like you're all set for now.

[gillbot]

Thank you !

[gillbot]

Back to not rebooting after an update, latest health check:
***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 25.1.5_4 (amd64) at Mon Apr 21 08:00:20 EDT 2025
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 25.1.5 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 25.1.5 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
>>> Check installed plugins
os-etpro-telemetry 1.7_5
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 25.1.5_4 has 70 dependencies to check.
Checking packages: ........................
opnsense-25.1.5_4 version mismatch, expected 25.1.5_5
Checking packages: ............................................... done
***DONE***

[Patrick M. Hausen]

Always start a root shell via ssh before an update. When that happens use ps to identify the hanging process preventing the reboot and kill it.

[newsense]

Suricata is the likely culprit there. Stop it before the next couple upgrades - unsure if 25.1.6 will require a reboot - and see if that solves the issue. Make sure Suricata is not running before doing the update.

[gillbot]

Suricata is the likely culprit there. Stop it before the next couple upgrades - unsure if 25.1.6 will require a reboot - and see if that solves the issue. Make sure Suricata is not running before doing the update.

ok thank you. Sorry for the delayed response, i was traveling for work. Luckily the internet stayed up or the kiddos would have been restless!

[gillbot]

Suricata is the likely culprit there. Stop it before the next couple upgrades - unsure if 25.1.6 will require a reboot - and see if that solves the issue. Make sure Suricata is not running before doing the update.

How do I stop it? If everything has to be done via ssh or other method I may as well just unplug it. I primarily browse from an iPad so ssh is a pain. Every update seems to revert it to this hang behavior and it's getting really tiring have to do a hard reboot or manual updates over and over.