25.7.8 upgrade

[franco]

I haven't seen or heard from any main mirror issues but if it's solved that's good.


Cheers,
Franco

[TekunoKage]

I would like to bring to your attention an issue I encountered during a recent upgrade. Unfortunately, I lost all connection to the firewall before the reboot. This is the first time I've experienced such a situation in my six years of using OPNsense.

Code Select Expand

***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.7.7_4 (amd64) at Fri Nov 28 12:58:02 AST 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (118 candidates): .......... done
Processing candidates (118 candidates): .... done
The following 42 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
    py311-pyopenssl: 25.3.0_1,1

Installed packages to be UPGRADED:
    brotli: 1.1.0,1 -> 1.2.0,1
    ca_root_nss: 3.117 -> 3.117_2
    curl: 8.16.0 -> 8.17.0
    libiconv: 1.17_1 -> 1.18_1
    liblz4: 1.10.0,1 -> 1.10.0_2,1
    nspr: 4.37 -> 4.38.2
    nss: 3.117 -> 3.118.1
    ntp: 4.2.8p18_4 -> 4.2.8p18_5
    openvpn: 2.6.15 -> 2.6.16
    opnsense: 25.7.7_4 -> 25.7.8
    opnsense-update: 25.7.5_1 -> 25.7.8
    pcre2: 10.46 -> 10.47
    php83: 8.3.27 -> 8.3.28
    php83-ctype: 8.3.27 -> 8.3.28
    php83-curl: 8.3.27 -> 8.3.28
    php83-dom: 8.3.27 -> 8.3.28
    php83-filter: 8.3.27 -> 8.3.28
    php83-gettext: 8.3.27 -> 8.3.28
    php83-ldap: 8.3.27 -> 8.3.28
    php83-mbstring: 8.3.27 -> 8.3.28
    php83-pcntl: 8.3.27 -> 8.3.28
    php83-pdo: 8.3.27 -> 8.3.28
    php83-session: 8.3.27 -> 8.3.28
    php83-simplexml: 8.3.27 -> 8.3.28
    php83-sockets: 8.3.27 -> 8.3.28
    php83-sqlite3: 8.3.27 -> 8.3.28
    php83-xml: 8.3.27 -> 8.3.28
    php83-zlib: 8.3.27 -> 8.3.28
    pkcs11-helper: 1.29.0_3 -> 1.31.0
    py311-aioquic: 1.3.0 -> 1.3.0_1
    py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1
    py311-dnspython: 2.8.0,1 -> 2.8.0_1,1
    py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1
    py311-trio: 0.31.0 -> 0.32.0
    py311-vici: 5.9.11_1 -> 6.0.3
    qemu-guest-agent: 10.1.2 -> 10.1.2_1
    readline: 8.2.13_2 -> 8.3.1
    sqlite3: 3.50.4,1 -> 3.50.4_2,1
    strongswan: 6.0.3 -> 6.0.3_1
    sudo: 1.9.17p2_1 -> 1.9.17p2_2
    zstd: 1.5.7 -> 1.5.7_1

Number of packages to be installed: 1
Number of packages to be upgraded: 41

The operation will free 1 MiB.
35 MiB to be downloaded.
[1/42] Fetching py311-cryptography-45.0.7_1,1.pkg: .......... done
[2/42] Fetching php83-filter-8.3.28.pkg: . done
[3/42] Fetching opnsense-update-25.7.8.pkg: . done
[4/42] Fetching php83-curl-8.3.28.pkg: . done
[5/42] Fetching py311-numpy-1.26.4_10,1.pkg: .......... done
[6/42] Fetching nss-3.118.1.pkg: .......... done
[7/42] Fetching libiconv-1.18_1.pkg: ......... done
[8/42] Fetching php83-ldap-8.3.28.pkg: ... done
[9/42] Fetching py311-aioquic-1.3.0_1.pkg: ....... done
[10/42] Fetching openvpn-2.6.16.pkg: ......... done
[11/42] Fetching php83-simplexml-8.3.28.pkg: . done
[12/42] Fetching php83-pdo-8.3.28.pkg: .. done
[13/42] Fetching ntp-4.2.8p18_5.pkg: ......... done
[14/42] Fetching php83-sockets-8.3.28.pkg: .. done
[15/42] Fetching php83-pcntl-8.3.28.pkg: . done
[16/42] Fetching ca_root_nss-3.117_2.pkg: .... done
[17/42] Fetching php83-sqlite3-8.3.28.pkg: .. done
[18/42] Fetching py311-vici-6.0.3.pkg: . done
[19/42] Fetching py311-trio-0.32.0.pkg: .......... done
[20/42] Fetching py311-dnspython-2.8.0_1,1.pkg: ....... done
[21/42] Fetching php83-session-8.3.28.pkg: . done
[22/42] Fetching php83-mbstring-8.3.28.pkg: .......... done
[23/42] Fetching php83-gettext-8.3.28.pkg: . done
[24/42] Fetching liblz4-1.10.0_2,1.pkg: ... done
[25/42] Fetching pkcs11-helper-1.31.0.pkg: .... done
[26/42] Fetching php83-zlib-8.3.28.pkg: . done
[27/42] Fetching zstd-1.5.7_1.pkg: ........ done
[28/42] Fetching pcre2-10.47.pkg: .......... done
[29/42] Fetching php83-ctype-8.3.28.pkg: . done
[30/42] Fetching brotli-1.2.0,1.pkg: ....... done
[31/42] Fetching curl-8.17.0.pkg: .......... done
[32/42] Fetching nspr-4.38.2.pkg: ......... done
[33/42] Fetching php83-8.3.28.pkg: .......... done
[34/42] Fetching php83-xml-8.3.28.pkg: . done
[35/42] Fetching php83-dom-8.3.28.pkg: .. done
[36/42] Fetching sqlite3-3.50.4_2,1.pkg: .......... done
[37/42] Fetching opnsense-25.7.8.pkg: .......... done
[38/42] Fetching qemu-guest-agent-10.1.2_1.pkg: ..... done
[39/42] Fetching readline-8.3.1.pkg: ......... done
[40/42] Fetching strongswan-6.0.3_1.pkg: .......... done
[41/42] Fetching sudo-1.9.17p2_2.pkg: ........ done
[42/42] Fetching py311-pyopenssl-25.3.0_1,1.pkg: .. done
Checking integrity... done (1 conflicting)
  - py311-pyopenssl-25.3.0_1,1 conflicts with py311-openssl-25.0.0_1,1 on /usr/local/lib/python3.11/site-packages/OpenSSL/SSL.py
Checking integrity... done (0 conflicting)
Conflicts with the existing packages have been found.
One more solver iteration is needed to resolve them.
The following 43 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
    py311-pyopenssl: 25.3.0_1,1

Installed packages to be UPGRADED:
    brotli: 1.1.0,1 -> 1.2.0,1
    ca_root_nss: 3.117 -> 3.117_2
    curl: 8.16.0 -> 8.17.0
    libiconv: 1.17_1 -> 1.18_1
    liblz4: 1.10.0,1 -> 1.10.0_2,1
    nspr: 4.37 -> 4.38.2
    nss: 3.117 -> 3.118.1
    ntp: 4.2.8p18_4 -> 4.2.8p18_5
    openvpn: 2.6.15 -> 2.6.16
    opnsense: 25.7.7_4 -> 25.7.8
    opnsense-update: 25.7.5_1 -> 25.7.8
    pcre2: 10.46 -> 10.47
    php83: 8.3.27 -> 8.3.28
    php83-ctype: 8.3.27 -> 8.3.28
    php83-curl: 8.3.27 -> 8.3.28
    php83-dom: 8.3.27 -> 8.3.28
    php83-filter: 8.3.27 -> 8.3.28
    php83-gettext: 8.3.27 -> 8.3.28
    php83-ldap: 8.3.27 -> 8.3.28
    php83-mbstring: 8.3.27 -> 8.3.28
    php83-pcntl: 8.3.27 -> 8.3.28
    php83-pdo: 8.3.27 -> 8.3.28
    php83-session: 8.3.27 -> 8.3.28
    php83-simplexml: 8.3.27 -> 8.3.28
    php83-sockets: 8.3.27 -> 8.3.28
    php83-sqlite3: 8.3.27 -> 8.3.28
    php83-xml: 8.3.27 -> 8.3.28
    php83-zlib: 8.3.27 -> 8.3.28
    pkcs11-helper: 1.29.0_3 -> 1.31.0
    py311-aioquic: 1.3.0 -> 1.3.0_1
    py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1
    py311-dnspython: 2.8.0,1 -> 2.8.0_1,1
    py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1
    py311-trio: 0.31.0 -> 0.32.0
    py311-vici: 5.9.11_1 -> 6.0.3
    qemu-guest-agent: 10.1.2 -> 10.1.2_1
    readline: 8.2.13_2 -> 8.3.1
    sqlite3: 3.50.4,1 -> 3.50.4_2,1
    strongswan: 6.0.3 -> 6.0.3_1
    sudo: 1.9.17p2_1 -> 1.9.17p2_2
    zstd: 1.5.7 -> 1.5.7_1

Installed packages to be REMOVED:
    py311-openssl: 25.0.0_1,1

Number of packages to be removed: 1
Number of packages to be installed: 1
Number of packages to be upgraded: 41

The operation will free 2 MiB.
Checking integrity... done (0 conflicting)
[1/46] Upgrading brotli from 1.1.0,1 to 1.2.0,1...
[1/46] Extracting brotli-1.2.0,1: .......... done
[2/46] Upgrading libiconv from 1.17_1 to 1.18_1...
[2/46] Extracting libiconv-1.18_1: .......... done
[3/46] Upgrading nspr from 4.37 to 4.38.2...
[3/46] Extracting nspr-4.38.2: .......... done
[4/46] Upgrading pcre2 from 10.46 to 10.47...
[4/46] Extracting pcre2-10.47: .......... done
[5/46] Upgrading php83 from 8.3.27 to 8.3.28...
[5/46] Extracting php83-8.3.28: .......... done
[6/46] Upgrading php83-mbstring from 8.3.27 to 8.3.28...
[6/46] Extracting php83-mbstring-8.3.28: .......... done
[7/46] Upgrading pkcs11-helper from 1.29.0_3 to 1.31.0...
[7/46] Extracting pkcs11-helper-1.31.0: .......... done
[8/46] Upgrading qemu-guest-agent from 10.1.2 to 10.1.2_1...
[8/46] Extracting qemu-guest-agent-10.1.2_1: .......... done
[9/46] Upgrading readline from 8.2.13_2 to 8.3.1...
[9/46] Extracting readline-8.3.1: .......... done
[10/46] Upgrading sqlite3 from 3.50.4,1 to 3.50.4_2,1...
[10/46] Extracting sqlite3-3.50.4_2,1: .......... done
[11/46] Upgrading nss from 3.117 to 3.118.1...
[11/46] Extracting nss-3.118.1: .......... done
[12/46] Upgrading zstd from 1.5.7 to 1.5.7_1...
[12/46] Extracting zstd-1.5.7_1: .......... done
[13/46] Upgrading curl from 8.16.0 to 8.17.0...
[13/46] Extracting curl-8.17.0: .......... done
[14/46] Upgrading liblz4 from 1.10.0,1 to 1.10.0_2,1...
[14/46] Extracting liblz4-1.10.0_2,1: .......... done
[15/46] Deinstalling opnsense-25.7.7_4...

As can be seen, the moment I lost connection to the firewall was when "Deinstalling opnsense-25.7.7_4" was running.

These are the prompts when trying to access by console:

Code Select Expand

FreeBSD/amd64 (ACME-OPNsense-01.example.net) (ttyu0)

login: root
Password:
sh: /usr/local/libexec/opnsense-auth: not found
Login incorrect
login: root
Password:
sh: /usr/local/libexec/opnsense-auth: not found
Login incorrect
login:

After about 25 minutes, the interface came back online normally. It was just a brief moment of uncertainty, during which I was able to continue watching the upgrade process until it rebooted as expected. Below is a capture when it came back. I was unable to retrieve the last messages because the reboot prevented me from copying the output to the clipboard.

Code Select Expand

***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.7.7_4 (amd64) at Fri Nov 28 12:58:02 AST 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (118 candidates): .......... done
Processing candidates (118 candidates): .... done
The following 42 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
    py311-pyopenssl: 25.3.0_1,1

Installed packages to be UPGRADED:
    brotli: 1.1.0,1 -> 1.2.0,1
    ca_root_nss: 3.117 -> 3.117_2
    curl: 8.16.0 -> 8.17.0
    libiconv: 1.17_1 -> 1.18_1
    liblz4: 1.10.0,1 -> 1.10.0_2,1
    nspr: 4.37 -> 4.38.2
    nss: 3.117 -> 3.118.1
    ntp: 4.2.8p18_4 -> 4.2.8p18_5
    openvpn: 2.6.15 -> 2.6.16
    opnsense: 25.7.7_4 -> 25.7.8
    opnsense-update: 25.7.5_1 -> 25.7.8
    pcre2: 10.46 -> 10.47
    php83: 8.3.27 -> 8.3.28
    php83-ctype: 8.3.27 -> 8.3.28
    php83-curl: 8.3.27 -> 8.3.28
    php83-dom: 8.3.27 -> 8.3.28
    php83-filter: 8.3.27 -> 8.3.28
    php83-gettext: 8.3.27 -> 8.3.28
    php83-ldap: 8.3.27 -> 8.3.28
    php83-mbstring: 8.3.27 -> 8.3.28
    php83-pcntl: 8.3.27 -> 8.3.28
    php83-pdo: 8.3.27 -> 8.3.28
    php83-session: 8.3.27 -> 8.3.28
    php83-simplexml: 8.3.27 -> 8.3.28
    php83-sockets: 8.3.27 -> 8.3.28
    php83-sqlite3: 8.3.27 -> 8.3.28
    php83-xml: 8.3.27 -> 8.3.28
    php83-zlib: 8.3.27 -> 8.3.28
    pkcs11-helper: 1.29.0_3 -> 1.31.0
    py311-aioquic: 1.3.0 -> 1.3.0_1
    py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1
    py311-dnspython: 2.8.0,1 -> 2.8.0_1,1
    py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1
    py311-trio: 0.31.0 -> 0.32.0
    py311-vici: 5.9.11_1 -> 6.0.3
    qemu-guest-agent: 10.1.2 -> 10.1.2_1
    readline: 8.2.13_2 -> 8.3.1
    sqlite3: 3.50.4,1 -> 3.50.4_2,1
    strongswan: 6.0.3 -> 6.0.3_1
    sudo: 1.9.17p2_1 -> 1.9.17p2_2
    zstd: 1.5.7 -> 1.5.7_1

Number of packages to be installed: 1
Number of packages to be upgraded: 41

The operation will free 1 MiB.
35 MiB to be downloaded.
[1/42] Fetching py311-cryptography-45.0.7_1,1.pkg: .......... done
[2/42] Fetching php83-filter-8.3.28.pkg: . done
[3/42] Fetching opnsense-update-25.7.8.pkg: . done
[4/42] Fetching php83-curl-8.3.28.pkg: . done
[5/42] Fetching py311-numpy-1.26.4_10,1.pkg: .......... done
[6/42] Fetching nss-3.118.1.pkg: .......... done
[7/42] Fetching libiconv-1.18_1.pkg: ......... done
[8/42] Fetching php83-ldap-8.3.28.pkg: ... done
[9/42] Fetching py311-aioquic-1.3.0_1.pkg: ....... done
[10/42] Fetching openvpn-2.6.16.pkg: ......... done
[11/42] Fetching php83-simplexml-8.3.28.pkg: . done
[12/42] Fetching php83-pdo-8.3.28.pkg: .. done
[13/42] Fetching ntp-4.2.8p18_5.pkg: ......... done
[14/42] Fetching php83-sockets-8.3.28.pkg: .. done
[15/42] Fetching php83-pcntl-8.3.28.pkg: . done
[16/42] Fetching ca_root_nss-3.117_2.pkg: .... done
[17/42] Fetching php83-sqlite3-8.3.28.pkg: .. done
[18/42] Fetching py311-vici-6.0.3.pkg: . done
[19/42] Fetching py311-trio-0.32.0.pkg: .......... done
[20/42] Fetching py311-dnspython-2.8.0_1,1.pkg: ....... done
[21/42] Fetching php83-session-8.3.28.pkg: . done
[22/42] Fetching php83-mbstring-8.3.28.pkg: .......... done
[23/42] Fetching php83-gettext-8.3.28.pkg: . done
[24/42] Fetching liblz4-1.10.0_2,1.pkg: ... done
[25/42] Fetching pkcs11-helper-1.31.0.pkg: .... done
[26/42] Fetching php83-zlib-8.3.28.pkg: . done
[27/42] Fetching zstd-1.5.7_1.pkg: ........ done
[28/42] Fetching pcre2-10.47.pkg: .......... done
[29/42] Fetching php83-ctype-8.3.28.pkg: . done
[30/42] Fetching brotli-1.2.0,1.pkg: ....... done
[31/42] Fetching curl-8.17.0.pkg: .......... done
[32/42] Fetching nspr-4.38.2.pkg: ......... done
[33/42] Fetching php83-8.3.28.pkg: .......... done
[34/42] Fetching php83-xml-8.3.28.pkg: . done
[35/42] Fetching php83-dom-8.3.28.pkg: .. done
[36/42] Fetching sqlite3-3.50.4_2,1.pkg: .......... done
[37/42] Fetching opnsense-25.7.8.pkg: .......... done
[38/42] Fetching qemu-guest-agent-10.1.2_1.pkg: ..... done
[39/42] Fetching readline-8.3.1.pkg: ......... done
[40/42] Fetching strongswan-6.0.3_1.pkg: .......... done
[41/42] Fetching sudo-1.9.17p2_2.pkg: ........ done
[42/42] Fetching py311-pyopenssl-25.3.0_1,1.pkg: .. done
Checking integrity... done (1 conflicting)
  - py311-pyopenssl-25.3.0_1,1 conflicts with py311-openssl-25.0.0_1,1 on /usr/local/lib/python3.11/site-packages/OpenSSL/SSL.py
Checking integrity... done (0 conflicting)
Conflicts with the existing packages have been found.
One more solver iteration is needed to resolve them.
The following 43 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
    py311-pyopenssl: 25.3.0_1,1

Installed packages to be UPGRADED:
    brotli: 1.1.0,1 -> 1.2.0,1
    ca_root_nss: 3.117 -> 3.117_2
    curl: 8.16.0 -> 8.17.0
    libiconv: 1.17_1 -> 1.18_1
    liblz4: 1.10.0,1 -> 1.10.0_2,1
    nspr: 4.37 -> 4.38.2
    nss: 3.117 -> 3.118.1
    ntp: 4.2.8p18_4 -> 4.2.8p18_5
    openvpn: 2.6.15 -> 2.6.16
    opnsense: 25.7.7_4 -> 25.7.8
    opnsense-update: 25.7.5_1 -> 25.7.8
    pcre2: 10.46 -> 10.47
    php83: 8.3.27 -> 8.3.28
    php83-ctype: 8.3.27 -> 8.3.28
    php83-curl: 8.3.27 -> 8.3.28
    php83-dom: 8.3.27 -> 8.3.28
    php83-filter: 8.3.27 -> 8.3.28
    php83-gettext: 8.3.27 -> 8.3.28
    php83-ldap: 8.3.27 -> 8.3.28
    php83-mbstring: 8.3.27 -> 8.3.28
    php83-pcntl: 8.3.27 -> 8.3.28
    php83-pdo: 8.3.27 -> 8.3.28
    php83-session: 8.3.27 -> 8.3.28
    php83-simplexml: 8.3.27 -> 8.3.28
    php83-sockets: 8.3.27 -> 8.3.28
    php83-sqlite3: 8.3.27 -> 8.3.28
    php83-xml: 8.3.27 -> 8.3.28
    php83-zlib: 8.3.27 -> 8.3.28
    pkcs11-helper: 1.29.0_3 -> 1.31.0
    py311-aioquic: 1.3.0 -> 1.3.0_1
    py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1
    py311-dnspython: 2.8.0,1 -> 2.8.0_1,1
    py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1
    py311-trio: 0.31.0 -> 0.32.0
    py311-vici: 5.9.11_1 -> 6.0.3
    qemu-guest-agent: 10.1.2 -> 10.1.2_1
    readline: 8.2.13_2 -> 8.3.1
    sqlite3: 3.50.4,1 -> 3.50.4_2,1
    strongswan: 6.0.3 -> 6.0.3_1
    sudo: 1.9.17p2_1 -> 1.9.17p2_2
    zstd: 1.5.7 -> 1.5.7_1

Installed packages to be REMOVED:
    py311-openssl: 25.0.0_1,1

Number of packages to be removed: 1
Number of packages to be installed: 1
Number of packages to be upgraded: 41

The operation will free 2 MiB.
Checking integrity... done (0 conflicting)
[1/46] Upgrading brotli from 1.1.0,1 to 1.2.0,1...
[1/46] Extracting brotli-1.2.0,1: .......... done
[2/46] Upgrading libiconv from 1.17_1 to 1.18_1...
[2/46] Extracting libiconv-1.18_1: .......... done
[3/46] Upgrading nspr from 4.37 to 4.38.2...
[3/46] Extracting nspr-4.38.2: .......... done
[4/46] Upgrading pcre2 from 10.46 to 10.47...
[4/46] Extracting pcre2-10.47: .......... done
[5/46] Upgrading php83 from 8.3.27 to 8.3.28...
[5/46] Extracting php83-8.3.28: .......... done
[6/46] Upgrading php83-mbstring from 8.3.27 to 8.3.28...
[6/46] Extracting php83-mbstring-8.3.28: .......... done
[7/46] Upgrading pkcs11-helper from 1.29.0_3 to 1.31.0...
[7/46] Extracting pkcs11-helper-1.31.0: .......... done
[8/46] Upgrading qemu-guest-agent from 10.1.2 to 10.1.2_1...
[8/46] Extracting qemu-guest-agent-10.1.2_1: .......... done
[9/46] Upgrading readline from 8.2.13_2 to 8.3.1...
[9/46] Extracting readline-8.3.1: .......... done
[10/46] Upgrading sqlite3 from 3.50.4,1 to 3.50.4_2,1...
[10/46] Extracting sqlite3-3.50.4_2,1: .......... done
[11/46] Upgrading nss from 3.117 to 3.118.1...
[11/46] Extracting nss-3.118.1: .......... done
[12/46] Upgrading zstd from 1.5.7 to 1.5.7_1...
[12/46] Extracting zstd-1.5.7_1: .......... done
[13/46] Upgrading curl from 8.16.0 to 8.17.0...
[13/46] Extracting curl-8.17.0: .......... done
[14/46] Upgrading liblz4 from 1.10.0,1 to 1.10.0_2,1...
[14/46] Extracting liblz4-1.10.0_2,1: .......... done
[15/46] Deinstalling opnsense-25.7.7_4...
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
[15/46] Deleting files for opnsense-25.7.7_4: .......... done
[16/46] Upgrading ca_root_nss from 3.117 to 3.117_2...
[16/46] Extracting ca_root_nss-3.117_2: ..... done
[17/46] Upgrading ntp from 4.2.8p18_4 to 4.2.8p18_5...
[17/46] Extracting ntp-4.2.8p18_5: .......... done
[18/46] Upgrading openvpn from 2.6.15 to 2.6.16...
===> Creating groups
Using existing group 'openvpn'
===> Creating users
Using existing user 'openvpn'
[18/46] Extracting openvpn-2.6.16: .......... done
[19/46] Upgrading opnsense-update from 25.7.5_1 to 25.7.8...
[19/46] Extracting opnsense-update-25.7.8: .......... done
[20/46] Upgrading php83-ctype from 8.3.27 to 8.3.28...
[20/46] Extracting php83-ctype-8.3.28: ........ done
[21/46] Upgrading php83-curl from 8.3.27 to 8.3.28...
[21/46] Extracting php83-curl-8.3.28: .......... done
[22/46] Upgrading php83-dom from 8.3.27 to 8.3.28...
[22/46] Extracting php83-dom-8.3.28: .......... done
[23/46] Upgrading php83-filter from 8.3.27 to 8.3.28...
[23/46] Extracting php83-filter-8.3.28: ......... done
[24/46] Upgrading php83-gettext from 8.3.27 to 8.3.28...
[24/46] Extracting php83-gettext-8.3.28: ........ done
[25/46] Upgrading php83-ldap from 8.3.27 to 8.3.28...
[25/46] Extracting php83-ldap-8.3.28: ........ done
[26/46] Upgrading php83-pcntl from 8.3.27 to 8.3.28...
[26/46] Extracting php83-pcntl-8.3.28: ......... done
[27/46] Upgrading php83-pdo from 8.3.27 to 8.3.28...
[27/46] Extracting php83-pdo-8.3.28: .......... done
[28/46] Upgrading php83-session from 8.3.27 to 8.3.28...
[28/46] Extracting php83-session-8.3.28: .......... done
[29/46] Upgrading php83-simplexml from 8.3.27 to 8.3.28...
[29/46] Extracting php83-simplexml-8.3.28: ......... done
[30/46] Upgrading php83-sockets from 8.3.27 to 8.3.28...
[30/46] Extracting php83-sockets-8.3.28: .......... done
[31/46] Upgrading php83-sqlite3 from 8.3.27 to 8.3.28...
[31/46] Extracting php83-sqlite3-8.3.28: ......... done
[32/46] Upgrading php83-xml from 8.3.27 to 8.3.28...
[32/46] Extracting php83-xml-8.3.28: ......... done
[33/46] Upgrading php83-zlib from 8.3.27 to 8.3.28...
[33/46] Extracting php83-zlib-8.3.28: ........ done
[34/46] Upgrading py311-numpy from 1.26.4_7,1 to 1.26.4_10,1...
[34/46] Extracting py311-numpy-1.26.4_10,1: .......... done
[35/46] Upgrading py311-vici from 5.9.11_1 to 6.0.3...
[35/46] Extracting py311-vici-6.0.3: .......... done
[36/46] Upgrading strongswan from 6.0.3 to 6.0.3_1...
[36/46] Extracting strongswan-6.0.3_1: .......... done
[37/46] Upgrading sudo from 1.9.17p2_1 to 1.9.17p2_2...
[37/46] Extracting sudo-1.9.17p2_2: .......... done
[38/46] Deinstalling py311-dnspython-2.8.0,1...
[38/46] Deleting files for py311-dnspython-2.8.0,1: .......... done
[39/46] Upgrading py311-trio from 0.31.0 to 0.32.0...
[39/46] Extracting py311-trio-0.32.0: .......... done
[40/46] Deinstalling py311-aioquic-1.3.0...
[40/46] Deleting files for py311-aioquic-1.3.0: .......... done
[41/46] Deinstalling py311-openssl-25.0.0_1,1...
[41/46] Deleting files for py311-openssl-25.0.0_1,1: .......... done
[42/46] Upgrading py311-cryptography from 44.0.3_4,1 to 45.0.7_1,1...
[42/46] Extracting py311-cryptography-45.0.7_1,1: .......... done
[43/46] Installing py311-pyopenssl-25.3.0_1,1...
[43/46] Extracting py311-pyopenssl-25.3.0_1,1: .......... done
[44/46] Installing py311-aioquic-1.3.0_1...
[44/46] Extracting py311-aioquic-1.3.0_1: .......... done
[45/46] Installing py311-dnspython-2.8.0_1,1...
[45/46] Extracting py311-dnspython-2.8.0_1,1: .......... done
[46/46] Installing opnsense-25.7.8...
[46/46] Extracting opnsense-25.7.8: .......... done
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh.sh'
Migrated OPNsense\Unbound\Unbound from 1.0.12 to 1.0.13
Flushing all caches...done.
Writing firmware settings: FreeBSD OPNsense
Writing trust files...done.
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
certctl: No changes to trust store were made.
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring cron...done.
Configuring system logging...done.
You may need to manually remove /usr/local/etc/ssl/cert.pem if it is no longer needed.
=====
Message from openvpn-2.6.16:

--
Note that OpenVPN now configures a separate user and group "openvpn",
which should be used instead of the NFS user "nobody"
when an unprivileged user account is desired.

It is advisable to review existing configuration files and
to consider adding/changing user openvpn and group openvpn.
=====
Message from strongswan-6.0.3_1:

--
The default strongSwan configuration interface have been updated to vici.
To use the stroke interface by default either compile the port without the vici option or
set 'strongswan_interface="stroke"' in your rc.conf file.
=====
Message from opnsense-25.7.8:

--
Some will win, some will lose, some are born to sing the blues
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
    /var/cache/pkg/py311-cryptography-45.0.7_1,1~c815f3235b.pkg
    /var/cache/pkg/php83-filter-8.3.28~4a8f33be7d.pkg
    /var/cache/pkg/py311-cryptography-45.0.7_1,1.pkg
    /var/cache/pkg/opnsense-update-25.7.8.pkg
    /var/cache/pkg/php83-filter-8.3.28.pkg
    /var/cache/pkg/opnsense-update-25.7.8~fee3f6a970.pkg
    /var/cache/pkg/php83-curl-8.3.28~6accc1b1ac.pkg
    /var/cache/pkg/py311-numpy-1.26.4_10,1.pkg
    /var/cache/pkg/php83-curl-8.3.28.pkg
    /var/cache/pkg/py311-numpy-1.26.4_10,1~448cb68ef2.pkg
    /var/cache/pkg/nss-3.118.1~5ad385b9f3.pkg
    /var/cache/pkg/libiconv-1.18_1.pkg
    /var/cache/pkg/nss-3.118.1.pkg
    /var/cache/pkg/libiconv-1.18_1~f25bb554f1.pkg
    /var/cache/pkg/php83-ldap-8.3.28~8c8d10b5e9.pkg
    /var/cache/pkg/py311-aioquic-1.3.0_1.pkg
    /var/cache/pkg/php83-ldap-8.3.28.pkg
    /var/cache/pkg/py311-aioquic-1.3.0_1~254dacaf7b.pkg
    /var/cache/pkg/openvpn-2.6.16~4f8aacf57c.pkg
    /var/cache/pkg/php83-pdo-8.3.28.pkg
    /var/cache/pkg/openvpn-2.6.16.pkg
    /var/cache/pkg/php83-simplexml-8.3.28~270147682b.pkg
    /var/cache/pkg/php83-pdo-8.3.28~af0a7d61fb.pkg
    /var/cache/pkg/php83-simplexml-8.3.28.pkg
    /var/cache/pkg/ntp-4.2.8p18_5~53ce7b3a74.pkg
    /var/cache/pkg/pcre2-10.47.pkg
    /var/cache/pkg/php83-pcntl-8.3.28.pkg
    /var/cache/pkg/ntp-4.2.8p18_5.pkg
    /var/cache/pkg/php83-sockets-8.3.28~be778264e4.pkg
    /var/cache/pkg/py311-vici-6.0.3~b2271437be.pkg
    /var/cache/pkg/php83-sockets-8.3.28.pkg
    /var/cache/pkg/php83-pcntl-8.3.28~93eff41d3d.pkg
    /var/cache/pkg/ca_root_nss-3.117_2~f94361d547.pkg
    /var/cache/pkg/ca_root_nss-3.117_2.pkg
    /var/cache/pkg/php83-sqlite3-8.3.28~a9398ff640.pkg
    /var/cache/pkg/php83-sqlite3-8.3.28.pkg
    /var/cache/pkg/php83-session-8.3.28.pkg
    /var/cache/pkg/py311-vici-6.0.3.pkg
    /var/cache/pkg/py311-trio-0.32.0~379cd91a24.pkg
    /var/cache/pkg/py311-trio-0.32.0.pkg
    /var/cache/pkg/py311-dnspython-2.8.0_1,1~e877f271aa.pkg
    /var/cache/pkg/php83-session-8.3.28~a99ce5be66.pkg
    /var/cache/pkg/py311-dnspython-2.8.0_1,1.pkg
    /var/cache/pkg/php83-mbstring-8.3.28~aea088c9f8.pkg
    /var/cache/pkg/php83-mbstring-8.3.28.pkg
    /var/cache/pkg/php83-gettext-8.3.28~f630bfacb2.pkg
    /var/cache/pkg/php83-gettext-8.3.28.pkg
    /var/cache/pkg/liblz4-1.10.0_2,1~665677c9bb.pkg
    /var/cache/pkg/liblz4-1.10.0_2,1.pkg
    /var/cache/pkg/pkcs11-helper-1.31.0~e98973b0f9.pkg
    /var/cache/pkg/php83-zlib-8.3.28~0ace26b122.pkg
    /var/cache/pkg/pkcs11-helper-1.31.0.pkg
    /var/cache/pkg/zstd-1.5.7_1~788f890814.pkg
    /var/cache/pkg/php83-zlib-8.3.28.pkg
    /var/cache/pkg/zstd-1.5.7_1.pkg
    /var/cache/pkg/pcre2-10.47~81f85770cc.pkg
    /var/cache/pkg/php83-ctype-8.3.28~b4ea07e69e.pkg
    /var/cache/pkg/php83-ctype-8.3.28.pkg
    /var/cache/pkg/brotli-1.2.0,1~6e6393bc03.pkg
    /var/cache/pkg/brotli-1.2.0,1.pkg
    /var/cache/pkg/curl-8.17.0~0363fce9c2.pkg
    /var/cache/pkg/curl-8.17.0.pkg
    /var/cache/pkg/nspr-4.38.2~38753a629c.pkg
    /var/cache/pkg/nspr-4.38.2.pkg
    /var/cache/pkg/php83-8.3.28~9dc92cfc41.pkg
    /var/cache/pkg/php83-xml-8.3.28~c5ef2658e7.pkg
    /var/cache/pkg/php83-8.3.28.pkg
    /var/cache/pkg/php83-xml-8.3.28.pkg
    /var/cache/pkg/php83-dom-8.3.28~847af91472.pkg
    /var/cache/pkg/php83-dom-8.3.28.pkg
    /var/cache/pkg/sqlite3-3.50.4_2,1~3c97aae41e.pkg
    /var/cache/pkg/sqlite3-3.50.4_2,1.pkg
    /var/cache/pkg/opnsense-25.7.8~c4e566826f.pkg
    /var/cache/pkg/opnsense-25.7.8.pkg
    /var/cache/pkg/qemu-guest-agent-10.1.2_1~b37217a222.pkg
    /var/cache/pkg/readline-8.3.1~f2b679163f.pkg
    /var/cache/pkg/qemu-guest-agent-10.1.2_1.pkg
    /var/cache/pkg/readline-8.3.1.pkg
    /var/cache/pkg/strongswan-6.0.3_1~51975838ce.pkg
    /var/cache/pkg/strongswan-6.0.3_1.pkg
    /var/cache/pkg/sudo-1.9.17p2_2~c026b03dc3.pkg
    /var/cache/pkg/sudo-1.9.17p2_2.pkg
    /var/cache/pkg/py311-pyopenssl-25.3.0_1,1~d4e6f43fa1.pkg
    /var/cache/pkg/py311-pyopenssl-25.3.0_1,1.pkg
The cleanup will free 35 MiB
Deleting files: .......... done
Nothing to do.
Starting web GUI...done.
Fetching base-25.7.8-amd64.txz: .............................. done
Fetching kernel-25.7.8-amd64.txz: ........ done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-25.7.8-amd64.txz... done
Installing base-25.7.8-amd64.txz...

I just wanted to share some thoughts regarding a specific behavior I've noticed. I believe it's important for anyone planning a maintenance window to be aware of this. It's not meant as criticism—on the contrary, I truly appreciate the great work the OPNsense team is doing!

If it's deemed appropriate, I encourage the team to evaluate this behavior for potential improvements. It could further enhance the already fantastic software we've come to rely on. Thank you for all your hard work, OPNsense team!

[Jose]

Hello, I will post here a similar update issue just for reference.

This past Nov. 26 I did performed an routine update from 25.7.7_4 through the dashboard and a Danger popup appeared during pkg files extraction/upgrade, the Danger popup disappeared itself after and I let the update to complete till system reboot.
You cannot view this attachment.

Regardless of this Danger error popup, the system seems to success the operation, unfortunately I did not find anything useful related to the error and `dmesg` was clean after reboot.
You cannot view this attachment.
You cannot view this attachment.
The Dashboard the [System:Firmware] page and the console all shows that the system upgrade have success regardless.

PS My system is a VM on ZFS so I always perform updates/upgrades under new ZFS/BE's, so trying to reproduce this can easy though haven't done that.
Also I perform min-version updates through the dashboard while major-version upgrades from the console to minimize errors but that's just me.

Regards

[ayanami_rei]

@Jose

same here, error message but update complete.

greetings