Update to 25.7.6...

[meyergru]

...went fine, but I got a an error message after the "pkg" update saying "The release type "opnsense" is not available on this repository.".

Asking for an update again does the trick.

This was reproducible on at least three machines.

[Q-Feeds]

...went fine, but I got a an error message after the "pkg" update saying "The release type "opnsense" is not available on this repository.".

Asking for an update again does the trick.

This was reproducible on at least three machines.

Yes same here as well!

[Monviech (Cedrik)]

I mean you could read the release notes

"Please be aware that during the update check the new package manager will be
installed, but will fail to report the update status like it always had before
and so you will end up with an error that will require checking for updates
again"

[franco]

Same for everyone :)

[caplam]

upgrading from 25.7.5 and curiously i didn't have to apply the upgrade twice.

pkg was upgraded yesterday and don't remember having done this.

Code Select Expand

2025-10-23T12:10:19 Notice pkg-static bash upgraded: 5.3.3_1 -> 5.3.3_2
2025-10-22T18:27:36 Notice pkg pkg upgraded: 1.19.2_6 -> 2.3.1
2025-10-15T13:50:27 Notice pkg-static opnsense upgraded: 25.7.4 -> 25.7.5

[bringha]

Hi there,

well ... mine went somewhat different:

While after the dpkg update the update process needed to be started a second time as described here too, then the packages were downloaded and the upgrade started, suddenly a window popped up with a message 'Danger <some unspecific explanation, don't remember> ....' and then the GUI became unreponsive. Reload of the page gave 'address not reachable'. Fix was Option 11 'Reload all services' from console. After that, GUI dashboard showed version 25.7.6. Interesting was that also DHCPv6 server had to be restarted manually

Never seen that little danger window in any update before ...

Check reveals that update has been at the end successful.

Br br

[franco]

@caplam the firmware updates cron job or check for updastes API call would also do the pkg upgrade on its own. That's where it lives.


Cheers,
Franco

[SLONet]

***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.7.6 (amd64) at Thu Oct 23 13:17:02 CEST 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
Waiting for another process to update repository SunnyValley
Updating ntop repository catalogue...
Waiting for another process to update repository ntop
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
Updating ntop repository catalogue...
Waiting for another process to update repository ntop
All repositories are up to date.
Checking for upgrades (151 candidates): .......... done
Processing candidates (151 candidates): . done
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
   libgpg-error: 1.56 [OPNsense]
   libunwind: 20240221_2 [OPNsense]

Number of packages to be installed: 2

The process will require 2 MiB more space.
401 KiB to be downloaded.
[1/2] Fetching libunwind-20240221_2.pkg: .......... done
[2/2] Fetching libgpg-error-1.56.pkg: .......... done
Checking integrity... done (0 conflicting)
[1/2] Installing libgpg-error-1.56...
[1/2] Extracting libgpg-error-1.56: .......... done
[2/2] Installing libunwind-20240221_2...
[2/2] Extracting libunwind-20240221_2: .......... done
Checking integrity... done (0 conflicting)
Deinstallation has been requested for the following 2 packages:

Installed packages to be REMOVED:
   libgpg-error: 1.56
   libunwind: 20240221_2

Number of packages to be removed: 2

The operation will free 2 MiB.
[1/2] Deinstalling libgpg-error-1.56...
[1/2] Deleting files for libgpg-error-1.56: .......... done
[2/2] Deinstalling libunwind-20240221_2...
[2/2] Deleting files for libunwind-20240221_2: .......... done
Checking all packages: .......... done
The following package files will be deleted:
   /var/cache/pkg/libgpg-error-1.56.pkg
   /var/cache/pkg/libunwind-20240221_2~36c1f6d1d0.pkg
   /var/cache/pkg/libunwind-20240221_2.pkg
   /var/cache/pkg/libgpg-error-1.56~6c519a621d.pkg
The cleanup will free 401 KiB
Deleting files: .... done
Nothing to do.
Starting web GUI...done.
***DONE***

[apunkt]

Mine went well, too,
however, it was a bit scary when the UI told me during upgrade process at pkg #13 "unkown error" occured and then went to http 403 forbidden error.
I was still able to login via SSH, but it only showed the welcome banner

Code Select Expand

------------------------------------------------
|       Hello, this is OPNsense 25.7           |           :::::::.
|                                              |           :::::::::.
|  Website:     https://opnsense.org/          |        :::        :::
|  Handbook:    https://docs.opnsense.org/     |        :::        :::
|  Forums:      https://forum.opnsense.org/    |        :::        :::
|  Code:        https://github.com/opnsense    |         `:::::::::
|  Reddit:      https://reddit.com/r/opnsense  |           `:::::::
------------------------------------------------
and nothing more.
Took 2min to automatically recover. Internet access was not affected during this process.

[SLONet]

Additionally, when I check for system updates, I'm repeatedly prompted to update the following packages:

libgpg-error: 1.56
libunwind: 20240221_2

But Suricata still won't start, and the package update loop is confusing. Could this be related to the pkg system or a caching issue?
Has anyone else experienced this combination of issues? Any advice would be appreciated.

[franco]

remove mimugmail repo?

[axsdenied]

After reading this thread, I got prepped and braced to deal with whatever.  Snapshotted, backed up, already ssh'd in, etc.  But when I went to update...it just updated, no errors, no need to recheck for updates and was on 25.7.6 with no issue?  I also use the mimugmail repo.

[franco]

Some people have cron jobs, even checking for updates will install the new pkg and when you go to the GUI and update it will not stall for that reason.

Also, there's two mimugmail repos and one is much more problematic.  ;)


Cheers,
Franco

[drosophila]

...didn't go smoothly at all. First, the pkg was updated but threw some errors trying to follow-up the upgrade (so it hadn't already updated itself, I have no cron set up, OK). Then the second, "actual" update popped the respective note but after updating the first package I also got the "Danger" message like apunkt described, but with a "404 Not Found". However, I was still logged in over ssh, but only as normal user. Trying to su failed with "/usr/local/libexec/opnsense-auth: not found". Uh-oh. Investigating revealed that indeed that file wasn't there. So I waited a while (sadly, with thumbdrives, you don't see if the system actually is doing anything, but the CPU being 100% idle in top didn't bode well). 30 minutes later: the same situation, so I decided to reboot. As expected, the boot popped a bunch of errors about missing this and not finding that. "No problem, I got backups". So I yanked the thumbdrive and shoved the 25.7-nano image back onto it. Back in the system, reconfigured the interfaces and went to the GUI to restore the config, only to be greeted by

Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/etc/inc/rrd.inc:56 Stack trace: #0 /usr/local/www/diag_backup.php(337): rrd_import() #1 {main} thrown in /usr/local/etc/inc/rrd.inc on line 56

Oh, c'mon! So what is this file, anyway?

global $config;
    foreach ($config['rrddata']['rrddatafile'] as $rrd) {
        if (!empty($rrd['xmldata'])) {

Right, so it's parsing some part of the file in a loop. Inserting some logging messages revealed that it wasn't even getting into the loop. So what is this "rrddata", anyway? Looking at the config after manually decrypting it revealed this, right at the end:

<syslog/>
        <rrddata>
        </rrddata>
</opnsense>

So it choked on the tag being there but empty. Therefore I just removed these two lines, and loading the config finally worked. Then I recall having unchecked "Do not backup RRD data." in the config backup setup, which is checked by default. So by trying to make sure I lost nothing, I seem to have found a small bug. In fact, the restore had restored all settings (the ones I checked, anyway), but the dashboard and service changes hadn't been applied yet (it failed, so didn't bother/dare to reload/restart anything).

Anyway, the system is now restoring and I'm going to try the upgrade again, hopefully with better results this time... ;)

Edit: uhm, no.

Code Select Expand

***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.7 (amd64) at Fri Oct 24 04:34:27 CEST 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (171 candidates): .......... done
Processing candidates (171 candidates): ..... done
The following 77 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
    boost-libs: 1.88.0_1 -> 1.88.0_2
    ca_root_nss: 3.108 -> 3.115_3
    curl: 8.14.1 -> 8.16.0
    easy-rsa: 3.2.3,1 -> 3.2.4,1
    expat: 2.7.1 -> 2.7.3
    ivykis: 0.43.2 -> 0.43.2_1
    jq: 1.8.0 -> 1.8.1
    kea: 2.6.3_1 -> 3.0.1_1
    krb5: 1.21.3_1 -> 1.22.1
    libcbor: 0.12.0_2 -> 0.13.0
    libinotify: 20240724_2 -> 20240724_3
    libnghttp2: 1.66.0 -> 1.67.1
    libpfctl: 0.15 -> 0.17
    libucl: 0.9.2_1 -> 0.9.2_2
    libunistring: 1.3 -> 1.4.1
    lighttpd: 1.4.79 -> 1.4.82
    nspr: 4.36 -> 4.37
    nss: 3.113.1_1 -> 3.117
    openssh-portable: 10.0.p1_1,1 -> 10.2.p1,1
    openssl: 3.0.17,1 -> 3.0.18,1
    openvpn: 2.6.14 -> 2.6.15
    opnsense: 25.7 -> 25.7.6
    opnsense-lang: 25.1.11 -> 25.7.4
    opnsense-update: 25.7 -> 25.7.5_1
    pcre2: 10.45_1 -> 10.46
    perl5: 5.40.2_2 -> 5.42.0_1
    php83: 8.3.23 -> 8.3.26
    php83-ctype: 8.3.23 -> 8.3.26
    php83-curl: 8.3.23 -> 8.3.26
    php83-dom: 8.3.23 -> 8.3.26
    php83-filter: 8.3.23 -> 8.3.26
    php83-gettext: 8.3.23 -> 8.3.26
    php83-ldap: 8.3.23 -> 8.3.26
    php83-mbstring: 8.3.23 -> 8.3.26
    php83-pcntl: 8.3.23 -> 8.3.26
    php83-pdo: 8.3.23 -> 8.3.26
    php83-phpseclib: 3.0.46 -> 3.0.47
    php83-session: 8.3.23 -> 8.3.26
    php83-simplexml: 8.3.23 -> 8.3.26
    php83-sockets: 8.3.23 -> 8.3.26
    php83-sqlite3: 8.3.23_1 -> 8.3.26
    php83-xml: 8.3.23 -> 8.3.26
    php83-zlib: 8.3.23 -> 8.3.26
    py311-anyio: 4.9.0 -> 4.11.0
    py311-certifi: 2025.6.15 -> 2025.8.3
    py311-charset-normalizer: 3.4.2 -> 3.4.3
    py311-cryptography: 44.0.3_2,1 -> 44.0.3_4,1
    py311-dnspython: 2.7.0,1 -> 2.8.0,1
    py311-duckdb: 1.3.1_1 -> 1.3.2
    py311-jq: 1.8.0_1 -> 1.10.0
    py311-markupsafe: 3.0.2 -> 3.0.3
    py311-numexpr: 2.11.0 -> 2.13.0
    py311-numpy: 1.26.4_6,1 -> 1.26.4_7,1
    py311-pandas: 2.2.3_2,1 -> 2.2.3_3,1
    py311-pycparser: 2.22 -> 2.23
    py311-pyyaml: 6.0.1_1 -> 6.0.3
    py311-requests: 2.32.4 -> 2.32.5
    py311-sqlite3: 3.11.13_11 -> 3.11.14_11
    py311-trio: 0.30.0 -> 0.31.0
    py311-truststore: 0.10.1 -> 0.10.4
    py311-typing-extensions: 4.14.0 -> 4.15.0
    py311-ujson: 5.10.0_1 -> 5.11.0
    py311-urllib3: 1.26.20,1 -> 2.5.0,1
    python311: 3.11.13 -> 3.11.14
    strongswan: 5.9.14 -> 6.0.1
    sudo: 1.9.17p1 -> 1.9.17p2
    suricata: 7.0.11_1 -> 8.0.1
    syslog-ng: 4.8.2_3 -> 4.10.2
    unbound: 1.23.1 -> 1.24.0
    wpa_supplicant: 2.11_5 -> 2.11_7

Installed packages to be REINSTALLED:
    cyrus-sasl-2.1.28_5 (provided shared library changed)
    cyrus-sasl-gssapi-2.1.28 (provided shared library changed)
    dnsmasq-2.91_1,1 (required shared library changed)
    glib-2.84.1_3,2 (required shared library changed)
    ntp-4.2.8p18_4 (direct dependency changed: perl5)
    openldap26-client-2.6.10 (required shared library changed)
    rrdtool-1.9.0_1 (direct dependency changed: perl5)

Number of packages to be upgraded: 70
Number of packages to be reinstalled: 7

The process will require 9 MiB more space.
155 MiB to be downloaded.
[1/77] Fetching py311-sqlite3-3.11.14_11.pkg: ..... done
[2/77] Fetching py311-anyio-4.11.0.pkg: .......... done
[3/77] Fetching unbound-1.24.0.pkg: .......... done
[4/77] Fetching wpa_supplicant-2.11_7.pkg: .......... done
[5/77] Fetching py311-cryptography-44.0.3_4,1.pkg: .......... done
[6/77] Fetching lighttpd-1.4.82.pkg: .......... done
[7/77] Fetching php83-filter-8.3.26.pkg: ... done
[8/77] Fetching opnsense-update-25.7.5_1.pkg: ..... done
[9/77] Fetching py311-pandas-2.2.3_3,1.pkg: .......... done
[10/77] Fetching openssl-3.0.18,1.pkg: .......... done
[11/77] Fetching php83-curl-8.3.26.pkg: ...... done
[12/77] Fetching boost-libs-1.88.0_2.pkg: .......... done
[13/77] Fetching py311-numpy-1.26.4_7,1.pkg: .......... done
[14/77] Fetching py311-pycparser-2.23.pkg: .......... done
[15/77] Fetching nss-3.117.pkg: .......... done
[16/77] Fetching libunistring-1.4.1.pkg: ......... done
[17/77] Fetching py311-charset-normalizer-3.4.3.pkg: .......... done
[18/77] Fetching php83-ldap-8.3.26.pkg: ..... done
[19/77] Fetching easy-rsa-3.2.4,1.pkg: ....... done
[20/77] Fetching libcbor-0.13.0.pkg: ....... done
[21/77] Fetching py311-pyyaml-6.0.3.pkg: .......... done
[22/77] Fetching cyrus-sasl-gssapi-2.1.28.pkg: .... done
[23/77] Fetching openvpn-2.6.15.pkg: .......... done
[24/77] Fetching jq-1.8.1.pkg: .......... done
[25/77] Fetching krb5-1.22.1.pkg: .......... done
[26/77] Fetching libnghttp2-1.67.1.pkg: .......... done
[27/77] Fetching dnsmasq-2.91_1,1.pkg: .......... done
[28/77] Fetching php83-simplexml-8.3.26.pkg: .... done
[29/77] Fetching php83-pdo-8.3.26.pkg: ....... done
[30/77] Fetching rrdtool-1.9.0_1.pkg: .......... done
[31/77] Fetching ntp-4.2.8p18_4.pkg: .......... done
[32/77] Fetching syslog-ng-4.10.2.pkg: .......... done
[33/77] Fetching py311-markupsafe-3.0.3.pkg: ... done
[34/77] Fetching php83-sockets-8.3.26.pkg: ...... done
[35/77] Fetching py311-jq-1.10.0.pkg: ....... done
[36/77] Fetching py311-requests-2.32.5.pkg: .......... done
[37/77] Fetching php83-pcntl-8.3.26.pkg: ... done
[38/77] Fetching ca_root_nss-3.115_3.pkg: .......... done
[39/77] Fetching php83-sqlite3-8.3.26.pkg: .... done
[40/77] Fetching libinotify-20240724_3.pkg: .... done
[41/77] Fetching python311-3.11.14.pkg: .......... done
[42/77] Fetching py311-trio-0.31.0.pkg: .......... done
[43/77] Fetching py311-dnspython-2.8.0,1.pkg: .......... done
[44/77] Fetching ivykis-0.43.2_1.pkg: .......... done
[45/77] Fetching php83-phpseclib-3.0.47.pkg: .......... done
[46/77] Fetching php83-session-8.3.26.pkg: ..... done
[47/77] Fetching py311-certifi-2025.8.3.pkg: .......... done
[48/77] Fetching kea-3.0.1_1.pkg: .......... done
[49/77] Fetching php83-mbstring-8.3.26.pkg: .......... done
[50/77] Fetching php83-gettext-8.3.26.pkg: . done
[51/77] Fetching php83-zlib-8.3.26.pkg: ... done
[52/77] Fetching pcre2-10.46.pkg: .......... done
[53/77] Fetching php83-ctype-8.3.26.pkg: . done
[54/77] Fetching curl-8.16.0.pkg: .......... done
[55/77] Fetching nspr-4.37.pkg: .......... done
[56/77] Fetching py311-numexpr-2.13.0.pkg: .......... done
[57/77] Fetching php83-8.3.26.pkg: .......... done
[58/77] Fetching libpfctl-0.17.pkg: .. done
[59/77] Fetching py311-truststore-0.10.4.pkg: ..... done
[60/77] Fetching py311-urllib3-2.5.0,1.pkg: .......... done
[61/77] Fetching cyrus-sasl-2.1.28_5.pkg: ........ done
[62/77] Fetching openssh-portable-10.2.p1,1.pkg: .......... done
[63/77] Fetching php83-xml-8.3.26.pkg: ... done
[64/77] Fetching php83-dom-8.3.26.pkg: ......... done
[65/77] Fetching suricata-8.0.1.pkg: .......... done
[66/77] Fetching openldap26-client-2.6.10.pkg: .......... done
[67/77] Fetching glib-2.84.1_3,2.pkg: .......... done
[68/77] Fetching libucl-0.9.2_2.pkg: .......... done
[69/77] Fetching perl5-5.42.0_1.pkg: .......... done
[70/77] Fetching py311-ujson-5.11.0.pkg: ....... done
[71/77] Fetching opnsense-25.7.6.pkg: .......... done
[72/77] Fetching py311-duckdb-1.3.2.pkg: .......... done
[73/77] Fetching py311-typing-extensions-4.15.0.pkg: .......... done
[74/77] Fetching strongswan-6.0.1.pkg: .......... done
[75/77] Fetching sudo-1.9.17p2.pkg: .......... done
[76/77] Fetching opnsense-lang-25.7.4.pkg: .......... done
[77/77] Fetching expat-2.7.3.pkg: .......... done
Checking integrity... done (0 conflicting)
[1/136] Upgrading libcbor from 0.12.0_2 to 0.13.0...
[1/136] Extracting libcbor-0.13.0: .......... done
[2/136] Upgrading libpfctl from 0.15 to 0.17...
[2/136] Extracting libpfctl-0.17: ...... done
[3/136] Upgrading libunistring from 1.3 to 1.4.1...
[3/136] Extracting libunistring-1.4.1: .......... doneThen the "Danger" message pops up and things are failing again. Seems like it's one of those days. I'll go to bed now.

[Quaxman]

Same Problem as above here on an original opnsense DEC675 HW.
Any Hints?