Version 25.7.9 did not change after CLI update - core package missing

Started by kozistan, Today at 07:55:24 AM

Previous topic - Next topic
After update 25.7.9_7 and 25.7.10 system is still on 25.7.9.
Packages were updated but core system stays on 25.7.9.

When I'm checking update on GUI:
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 25.7.9 (amd64) at Fri Dec 19 07:39:30 CET 2025
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 928 packages processed.
Updating SunnyValley repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: ..... done
Processing entries: ..... done
SunnyValley repository update completed. 49 packages processed.
All repositories are up to date.
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking for upgrades (4 candidates): .... done
Processing candidates (4 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***

opnsense-version
OPNsense 25.7.9 (amd64)

cat /usr/local/opnsense/version/core
{
    "CORE_VERSION": "25.7.9",
    "CORE_HASH": "0fba32ed2",
    "CORE_PKGVERSION": "25.7.9",
    ...
}

Health audit shows base/kernel mismatch:
***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 25.7.9 (amd64) at Fri Dec 19 07:46:15 CET 2025
>>> Check installed kernel version
Version 25.7.8 is correct.
>>> Check installed base version
Version 25.7.8 is correct.
>>> Check for core packages consistency
Core package "opnsense" not known to package database.
***DONE***

Repository query confirms 25.7.10 is available:
pkg rquery -r OPNsense '%n-%v' opnsense
opnsense-25.7.10

Attempting update:
opnsense-update -t opnsense -f
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
OPNsense is up to date.
pkg-static: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
The following packages will be fetched:
New packages to be FETCHED:
opnsense: 25.7.10 (6 MiB: 100.00% of the 6 MiB to download)
Fetching opnsense-25.7.10.pkg: 100%    6 MiB   6.1MB/s    00:01
pkg-static: No package(s) matching opnsense

The package downloads but fails to install with "No package(s) matching opnsense".

System shows:
- GUI: 25.7.9
- Base: 25.7.8
- Kernel: 25.7.8
- Core version file: 25.7.9
- Core package: missing from pkg database

Last issue was pkg related: https://forum.opnsense.org/index.php?topic=50009.0
Could this be related to the database version mismatch (37 vs 36)?

How can I properly update to 25.7.10?

Since you installed something from FreeBSD repo it's already in a state that is impossible to reproduce from our end.

If you still have the update log we can try to figure out what is going on. It probably did a partial upgrade and aborted while also uninstalling a vital package. It's the same old story with the package manager.  ;)

With this command you can get the last update log:

# opnsense-update -g


Cheers,
Franco

Here's the update log from 25.7.7_4 to 25.7.8 (Nov 26, 2025):

Currently running OPNsense 25.7.7_4 (amd64) at Wed Nov 26 20:38:21 CET 2025
...
[25/56] Deinstalling opnsense-25.7.7_4...
[56/56] Installing opnsense-25.7.8...
Installing kernel-25.7.8-amd64.txz... done
Installing base-25.7.8-amd64.txz... done
***REBOOT***

The update to 25.7.8 completed successfully. All packages came from OPNsense repository, no FreeBSD repo was involved.

Subsequent updates to 25.7.9 and 25.7.10 were done using the console menu (option 12 - "Update from console"). Unfortunately, I don't have logs from these updates. The system is now in this state:
- GUI: 25.7.9
- Base/Kernel: 25.7.8
- Core package: missing from database

The console option 12 also writes a log. I don't understand why it should be missing?

> All packages came from OPNsense repository, no FreeBSD repo was involved.

Well, if you installed a package from somwhere that is NOT OPNsense repo we simply don't know how the package manager reacts on unresolvable conflicts is my main point here.

And no modified log snippets please, it hides crucial information.


Cheers,
Franco


> The console option 12 also writes a log. I don't understand why it should be missing?

I just tested this and it logs just fine.


Cheers,
Franco

Here's the complete:

opnsense-update -g
***GOT REQUEST TO UPDATE***
Currently running OPNsense 25.7.7_4 (amd64) at Wed Nov 26 20:38:21 CET 2025
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.
Checking for upgrades (165 candidates): .......... done
Processing candidates (165 candidates): .... done
The following 52 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
py311-pyopenssl: 25.3.0_1,1 [OPNsense]

Installed packages to be UPGRADED:
bind-tools: 9.20.15_1 -> 9.20.16 [OPNsense]
brotli: 1.1.0,1 -> 1.2.0,1 [OPNsense]
ca_root_nss: 3.117 -> 3.117_2 [OPNsense]
cpu-microcode-intel: 20250812 -> 20251111 [OPNsense]
curl: 8.16.0 -> 8.17.0 [OPNsense]
git: 2.51.1 -> 2.51.2 [OPNsense]
libiconv: 1.17_1 -> 1.18_1 [OPNsense]
liblz4: 1.10.0,1 -> 1.10.0_2,1 [OPNsense]
libunwind: 20240221_2 -> 20250904 [OPNsense]
mysql80-client: 8.0.43 -> 8.0.44 [OPNsense]
nano: 8.6 -> 8.7 [OPNsense]
node_exporter: 1.9.1_4 -> 1.9.1_5 [OPNsense]
nspr: 4.37 -> 4.38.2 [OPNsense]
nss: 3.117 -> 3.118.1 [OPNsense]
ntp: 4.2.8p18_4 -> 4.2.8p18_5 [OPNsense]
openvpn: 2.6.15 -> 2.6.16 [OPNsense]
opnsense: 25.7.7_4 -> 25.7.8 [OPNsense]
opnsense-update: 25.7.5_1 -> 25.7.8 [OPNsense]
os-freeradius: 1.9.27_1 -> 1.9.28 [OPNsense]
pciids: 20251018 -> 20251105 [OPNsense]
pcre2: 10.46 -> 10.47 [OPNsense]
php83: 8.3.27 -> 8.3.28 [OPNsense]
php83-ctype: 8.3.27 -> 8.3.28 [OPNsense]
php83-curl: 8.3.27 -> 8.3.28 [OPNsense]
php83-dom: 8.3.27 -> 8.3.28 [OPNsense]
php83-filter: 8.3.27 -> 8.3.28 [OPNsense]
php83-gettext: 8.3.27 -> 8.3.28 [OPNsense]
php83-ldap: 8.3.27 -> 8.3.28 [OPNsense]
php83-mbstring: 8.3.27 -> 8.3.28 [OPNsense]
php83-pcntl: 8.3.27 -> 8.3.28 [OPNsense]
php83-pdo: 8.3.27 -> 8.3.28 [OPNsense]
php83-session: 8.3.27 -> 8.3.28 [OPNsense]
php83-simplexml: 8.3.27 -> 8.3.28 [OPNsense]
php83-sockets: 8.3.27 -> 8.3.28 [OPNsense]
php83-sqlite3: 8.3.27 -> 8.3.28 [OPNsense]
php83-xml: 8.3.27 -> 8.3.28 [OPNsense]
php83-zlib: 8.3.27 -> 8.3.28 [OPNsense]
pkcs11-helper: 1.29.0_3 -> 1.31.0 [OPNsense]
py311-aioquic: 1.3.0 -> 1.3.0_1 [OPNsense]
py311-boto3: 1.40.59 -> 1.40.64 [OPNsense]
py311-botocore: 1.40.59 -> 1.40.64 [OPNsense]
py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1 [OPNsense]
py311-dnspython: 2.8.0,1 -> 2.8.0_1,1 [OPNsense]
py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1 [OPNsense]
py311-trio: 0.31.0 -> 0.32.0 [OPNsense]
py311-vici: 5.9.11_1 -> 6.0.3 [OPNsense]
readline: 8.2.13_2 -> 8.3.1 [OPNsense]
sqlite3: 3.50.4,1 -> 3.50.4_2,1 [OPNsense]
strongswan: 6.0.3 -> 6.0.3_1 [OPNsense]
sudo: 1.9.17p2_1 -> 1.9.17p2_2 [OPNsense]
zstd: 1.5.7 -> 1.5.7_1 [OPNsense]

Number of packages to be installed: 1
Number of packages to be upgraded: 51

The process will require 2 MiB more space.
84 MiB to be downloaded.
[1/52] Fetching py311-cryptography-45.0.7_1,1.pkg: .......... done
[2/52] Fetching php83-filter-8.3.28.pkg: .... done
[3/52] Fetching pciids-20251105.pkg: ......... done
[4/52] Fetching opnsense-update-25.7.8.pkg: ..... done
[5/52] Fetching py311-boto3-1.40.64.pkg: .......... done
[6/52] Fetching php83-curl-8.3.28.pkg: ..... done
[7/52] Fetching py311-numpy-1.26.4_10,1.pkg: .......... done
[8/52] Fetching nss-3.118.1.pkg: .......... done
[9/52] Fetching libiconv-1.18_1.pkg: .......... done
[10/52] Fetching php83-ldap-8.3.28.pkg: ..... done
[11/52] Fetching git-2.51.2.pkg: .......... done
[12/52] Fetching py311-aioquic-1.3.0_1.pkg: .......... done
[13/52] Fetching openvpn-2.6.16.pkg: .......... done
[14/52] Fetching py311-botocore-1.40.64.pkg: .......... done
[15/52] Fetching bind-tools-9.20.16.pkg: .......... done
[16/52] Fetching php83-simplexml-8.3.28.pkg: ... done
[17/52] Fetching php83-pdo-8.3.28.pkg: ........ done
[18/52] Fetching ntp-4.2.8p18_5.pkg: .......... done
[19/52] Fetching php83-sockets-8.3.28.pkg: .... done
[20/52] Fetching php83-pcntl-8.3.28.pkg: ... done
[21/52] Fetching ca_root_nss-3.117_2.pkg: .......... done
[22/52] Fetching php83-sqlite3-8.3.28.pkg: ... done
[23/52] Fetching py311-vici-6.0.3.pkg: ... done
[24/52] Fetching py311-trio-0.32.0.pkg: .......... done
[25/52] Fetching py311-dnspython-2.8.0_1,1.pkg: .......... done
[26/52] Fetching php83-session-8.3.28.pkg: ..... done
[27/52] Fetching php83-mbstring-8.3.28.pkg: .......... done
[28/52] Fetching php83-gettext-8.3.28.pkg: . done
[29/52] Fetching liblz4-1.10.0_2,1.pkg: .......... done
[30/52] Fetching pkcs11-helper-1.31.0.pkg: .......... done
[31/52] Fetching php83-zlib-8.3.28.pkg: ... done
[32/52] Fetching os-freeradius-1.9.28.pkg: ....... done
[33/52] Fetching node_exporter-1.9.1_5.pkg: .......... done
[34/52] Fetching libunwind-20250904.pkg: .......... done
[35/52] Fetching zstd-1.5.7_1.pkg: .......... done
[36/52] Fetching pcre2-10.47.pkg: .......... done
[37/52] Fetching php83-ctype-8.3.28.pkg: . done
[38/52] Fetching brotli-1.2.0,1.pkg: ......... done
[39/52] Fetching curl-8.17.0.pkg: .......... done
[40/52] Fetching nspr-4.38.2.pkg: .......... done
[41/52] Fetching mysql80-client-8.0.44.pkg: .......... done
[42/52] Fetching php83-8.3.28.pkg: .......... done
[43/52] Fetching nano-8.7.pkg: .......... done
[44/52] Fetching php83-xml-8.3.28.pkg: ... done
[45/52] Fetching php83-dom-8.3.28.pkg: ......... done
[46/52] Fetching sqlite3-3.50.4_2,1.pkg: .......... done
[47/52] Fetching opnsense-25.7.8.pkg: .......... done
[48/52] Fetching readline-8.3.1.pkg: .......... done
[49/52] Fetching strongswan-6.0.3_1.pkg: .......... done
[50/52] Fetching cpu-microcode-intel-20251111.pkg: .......... done
[51/52] Fetching sudo-1.9.17p2_2.pkg: .......... done
[52/52] Fetching py311-pyopenssl-25.3.0_1,1.pkg: ......... done
Checking integrity... done (1 conflicting)
  - py311-pyopenssl-25.3.0_1,1 [OPNsense] conflicts with py311-openssl-25.0.0_1,1 [installed] on /usr/local/lib/python3.11/site-packages/OpenSSL/SSL.py
Checking integrity... done (0 conflicting)
Conflicts with the existing packages have been found.
One more solver iteration is needed to resolve them.
The following 53 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
py311-pyopenssl: 25.3.0_1,1 [OPNsense]

Installed packages to be UPGRADED:
bind-tools: 9.20.15_1 -> 9.20.16 [OPNsense]
brotli: 1.1.0,1 -> 1.2.0,1 [OPNsense]
ca_root_nss: 3.117 -> 3.117_2 [OPNsense]
cpu-microcode-intel: 20250812 -> 20251111 [OPNsense]
curl: 8.16.0 -> 8.17.0 [OPNsense]
git: 2.51.1 -> 2.51.2 [OPNsense]
libiconv: 1.17_1 -> 1.18_1 [OPNsense]
liblz4: 1.10.0,1 -> 1.10.0_2,1 [OPNsense]
libunwind: 20240221_2 -> 20250904 [OPNsense]
mysql80-client: 8.0.43 -> 8.0.44 [OPNsense]
nano: 8.6 -> 8.7 [OPNsense]
node_exporter: 1.9.1_4 -> 1.9.1_5 [OPNsense]
nspr: 4.37 -> 4.38.2 [OPNsense]
nss: 3.117 -> 3.118.1 [OPNsense]
ntp: 4.2.8p18_4 -> 4.2.8p18_5 [OPNsense]
openvpn: 2.6.15 -> 2.6.16 [OPNsense]
opnsense: 25.7.7_4 -> 25.7.8 [OPNsense]
opnsense-update: 25.7.5_1 -> 25.7.8 [OPNsense]
os-freeradius: 1.9.27_1 -> 1.9.28 [OPNsense]
pciids: 20251018 -> 20251105 [OPNsense]
pcre2: 10.46 -> 10.47 [OPNsense]
php83: 8.3.27 -> 8.3.28 [OPNsense]
php83-ctype: 8.3.27 -> 8.3.28 [OPNsense]
php83-curl: 8.3.27 -> 8.3.28 [OPNsense]
php83-dom: 8.3.27 -> 8.3.28 [OPNsense]
php83-filter: 8.3.27 -> 8.3.28 [OPNsense]
php83-gettext: 8.3.27 -> 8.3.28 [OPNsense]
php83-ldap: 8.3.27 -> 8.3.28 [OPNsense]
php83-mbstring: 8.3.27 -> 8.3.28 [OPNsense]
php83-pcntl: 8.3.27 -> 8.3.28 [OPNsense]
php83-pdo: 8.3.27 -> 8.3.28 [OPNsense]
php83-session: 8.3.27 -> 8.3.28 [OPNsense]
php83-simplexml: 8.3.27 -> 8.3.28 [OPNsense]
php83-sockets: 8.3.27 -> 8.3.28 [OPNsense]
php83-sqlite3: 8.3.27 -> 8.3.28 [OPNsense]
php83-xml: 8.3.27 -> 8.3.28 [OPNsense]
php83-zlib: 8.3.27 -> 8.3.28 [OPNsense]
pkcs11-helper: 1.29.0_3 -> 1.31.0 [OPNsense]
py311-aioquic: 1.3.0 -> 1.3.0_1 [OPNsense]
py311-boto3: 1.40.59 -> 1.40.64 [OPNsense]
py311-botocore: 1.40.59 -> 1.40.64 [OPNsense]
py311-cryptography: 44.0.3_4,1 -> 45.0.7_1,1 [OPNsense]
py311-dnspython: 2.8.0,1 -> 2.8.0_1,1 [OPNsense]
py311-numpy: 1.26.4_7,1 -> 1.26.4_10,1 [OPNsense]
py311-trio: 0.31.0 -> 0.32.0 [OPNsense]
py311-vici: 5.9.11_1 -> 6.0.3 [OPNsense]
readline: 8.2.13_2 -> 8.3.1 [OPNsense]
sqlite3: 3.50.4,1 -> 3.50.4_2,1 [OPNsense]
strongswan: 6.0.3 -> 6.0.3_1 [OPNsense]
sudo: 1.9.17p2_1 -> 1.9.17p2_2 [OPNsense]
zstd: 1.5.7 -> 1.5.7_1 [OPNsense]

Installed packages to be REMOVED:
py311-openssl: 25.0.0_1,1

Number of packages to be removed: 1
Number of packages to be installed: 1
Number of packages to be upgraded: 51
Checking integrity... done (0 conflicting)
[1/56] Upgrading bind-tools from 9.20.15_1 to 9.20.16...
[1/56] Extracting bind-tools-9.20.16: .......... done
[2/56] Upgrading brotli from 1.1.0,1 to 1.2.0,1...
[2/56] Extracting brotli-1.2.0,1: .......... done
[3/56] Upgrading cpu-microcode-intel from 20250812 to 20251111...
[3/56] Extracting cpu-microcode-intel-20251111: .......... done
[4/56] Upgrading libiconv from 1.17_1 to 1.18_1...
[4/56] Extracting libiconv-1.18_1: .......... done
[5/56] Upgrading libunwind from 20240221_2 to 20250904...
[5/56] Extracting libunwind-20250904: .......... done
[6/56] Upgrading nano from 8.6 to 8.7...
[6/56] Extracting nano-8.7: .......... done
[7/56] Upgrading node_exporter from 1.9.1_4 to 1.9.1_5...
[7/56] Extracting node_exporter-1.9.1_5: ..... done
[8/56] Upgrading nspr from 4.37 to 4.38.2...
[8/56] Extracting nspr-4.38.2: .......... done
[9/56] Upgrading os-freeradius from 1.9.27_1 to 1.9.28...
[9/56] Extracting os-freeradius-1.9.28: .......... done
Stopping configd...done
Starting configd.
Migrated OPNsense\Freeradius\Ldapgroup from 0.0.0 to 1.0.0
Reloading plugin configuration
Flushing all caches...done.
Configuring system logging...done.
Reloading template OPNsense/Freeradius: OK
Reloading template OPNsense/Syslog: OK
[10/56] Upgrading pciids from 20251018 to 20251105...
[10/56] Extracting pciids-20251105: ..... done
[11/56] Upgrading pcre2 from 10.46 to 10.47...
[11/56] Extracting pcre2-10.47: .......... done
[12/56] Upgrading php83 from 8.3.27 to 8.3.28...
[12/56] Extracting php83-8.3.28: .......... done
[13/56] Upgrading php83-mbstring from 8.3.27 to 8.3.28...
[13/56] Extracting php83-mbstring-8.3.28: .......... done
[14/56] Upgrading pkcs11-helper from 1.29.0_3 to 1.31.0...
[14/56] Extracting pkcs11-helper-1.31.0: .......... done
[15/56] Upgrading py311-botocore from 1.40.59 to 1.40.64...
[15/56] Extracting py311-botocore-1.40.64: .......... done
[16/56] Upgrading py311-boto3 from 1.40.59 to 1.40.64...
[16/56] Extracting py311-boto3-1.40.64: .......... done
[17/56] Upgrading readline from 8.2.13_2 to 8.3.1...
[17/56] Extracting readline-8.3.1: .......... done
[18/56] Upgrading sqlite3 from 3.50.4,1 to 3.50.4_2,1...
[18/56] Extracting sqlite3-3.50.4_2,1: .......... done
[19/56] Upgrading nss from 3.117 to 3.118.1...
[19/56] Extracting nss-3.118.1: .......... done
[20/56] Upgrading zstd from 1.5.7 to 1.5.7_1...
[20/56] Extracting zstd-1.5.7_1: .......... done
[21/56] Upgrading curl from 8.16.0 to 8.17.0...
[21/56] Extracting curl-8.17.0: .......... done
[22/56] Upgrading git from 2.51.1 to 2.51.2...
===> Creating groups
Using existing group 'git_daemon'
===> Creating users
Using existing user 'git_daemon'
[22/56] Extracting git-2.51.2: .......... done
[23/56] Upgrading liblz4 from 1.10.0,1 to 1.10.0_2,1...
[23/56] Extracting liblz4-1.10.0_2,1: .......... done
[24/56] Upgrading mysql80-client from 8.0.43 to 8.0.44...
[24/56] Extracting mysql80-client-8.0.44: .......... done
[25/56] Deinstalling opnsense-25.7.7_4...
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
[25/56] Deleting files for opnsense-25.7.7_4: .......... done
[26/56] Upgrading ca_root_nss from 3.117 to 3.117_2...
[26/56] Extracting ca_root_nss-3.117_2: ..... done
[27/56] Upgrading ntp from 4.2.8p18_4 to 4.2.8p18_5...
[27/56] Extracting ntp-4.2.8p18_5: .......... done
[28/56] Upgrading openvpn from 2.6.15 to 2.6.16...
===> Creating groups
Using existing group 'openvpn'
===> Creating users
Using existing user 'openvpn'
[28/56] Extracting openvpn-2.6.16: .......... done
[29/56] Upgrading opnsense-update from 25.7.5_1 to 25.7.8...
[29/56] Extracting opnsense-update-25.7.8: .......... done
[30/56] Upgrading php83-ctype from 8.3.27 to 8.3.28...
[30/56] Extracting php83-ctype-8.3.28: ........ done
[31/56] Upgrading php83-curl from 8.3.27 to 8.3.28...
[31/56] Extracting php83-curl-8.3.28: .......... done
[32/56] Upgrading php83-dom from 8.3.27 to 8.3.28...
[32/56] Extracting php83-dom-8.3.28: .......... done
[33/56] Upgrading php83-filter from 8.3.27 to 8.3.28...
[33/56] Extracting php83-filter-8.3.28: ......... done
[34/56] Upgrading php83-gettext from 8.3.27 to 8.3.28...
[34/56] Extracting php83-gettext-8.3.28: ........ done
[35/56] Upgrading php83-ldap from 8.3.27 to 8.3.28...
[35/56] Extracting php83-ldap-8.3.28: ........ done
[36/56] Upgrading php83-pcntl from 8.3.27 to 8.3.28...
[36/56] Extracting php83-pcntl-8.3.28: ......... done
[37/56] Upgrading php83-pdo from 8.3.27 to 8.3.28...
[37/56] Extracting php83-pdo-8.3.28: .......... done
[38/56] Upgrading php83-session from 8.3.27 to 8.3.28...
[38/56] Extracting php83-session-8.3.28: .......... done
[39/56] Upgrading php83-simplexml from 8.3.27 to 8.3.28...
[39/56] Extracting php83-simplexml-8.3.28: ......... done
[40/56] Upgrading php83-sockets from 8.3.27 to 8.3.28...
[40/56] Extracting php83-sockets-8.3.28: .......... done
[41/56] Upgrading php83-sqlite3 from 8.3.27 to 8.3.28...
[41/56] Extracting php83-sqlite3-8.3.28: ......... done
[42/56] Upgrading php83-xml from 8.3.27 to 8.3.28...
[42/56] Extracting php83-xml-8.3.28: ......... done
[43/56] Upgrading php83-zlib from 8.3.27 to 8.3.28...
[43/56] Extracting php83-zlib-8.3.28: ........ done
[44/56] Upgrading py311-numpy from 1.26.4_7,1 to 1.26.4_10,1...
[44/56] Extracting py311-numpy-1.26.4_10,1: .......... done
[45/56] Upgrading py311-vici from 5.9.11_1 to 6.0.3...
[45/56] Extracting py311-vici-6.0.3: .......... done
[46/56] Upgrading strongswan from 6.0.3 to 6.0.3_1...
[46/56] Extracting strongswan-6.0.3_1: .......... done
[47/56] Upgrading sudo from 1.9.17p2_1 to 1.9.17p2_2...
[47/56] Extracting sudo-1.9.17p2_2: .......... done
[48/56] Deinstalling py311-dnspython-2.8.0,1...
[48/56] Deleting files for py311-dnspython-2.8.0,1: .......... done
[49/56] Upgrading py311-trio from 0.31.0 to 0.32.0...
[49/56] Extracting py311-trio-0.32.0: .......... done
[50/56] Deinstalling py311-aioquic-1.3.0...
[50/56] Deleting files for py311-aioquic-1.3.0: .......... done
[51/56] Deinstalling py311-openssl-25.0.0_1,1...
[51/56] Deleting files for py311-openssl-25.0.0_1,1: .......... done
[52/56] Upgrading py311-cryptography from 44.0.3_4,1 to 45.0.7_1,1...
[52/56] Extracting py311-cryptography-45.0.7_1,1: .......... done
[53/56] Installing py311-pyopenssl-25.3.0_1,1...
[53/56] Extracting py311-pyopenssl-25.3.0_1,1: .......... done
[54/56] Installing py311-aioquic-1.3.0_1...
[54/56] Extracting py311-aioquic-1.3.0_1: .......... done
[55/56] Installing py311-dnspython-2.8.0_1,1...
[55/56] Extracting py311-dnspython-2.8.0_1,1: .......... done
[56/56] Installing opnsense-25.7.8...
[56/56] Extracting opnsense-25.7.8: .......... done
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh.sh'
Migrated OPNsense\Unbound\Unbound from 1.0.12 to 1.0.13
Flushing all caches...done.
Writing firmware settings: FreeBSD OPNsense SunnyValley
Writing trust files...done.
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
certctl: No changes to trust store were made.
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring cron...done.
Configuring system logging...done.
=====
Message from node_exporter-1.9.1_5:

--
Text collector examples have been moved to a new repository at
https://github.com/prometheus-community/node-exporter-textfile-collector-scripts.

The netdev collector CLI argument `--collector.netdev.ignored-devices` was
renamed to `--collector.netdev.device-blacklist`.

Additional label `mountaddr` added to NFS device metrics to distinguish mounts
from the same URL, but different IP addresses.

Metrics `node_cpu_scaling_frequency_min_hrts` and
`node_cpu_scaling_frequency_max_hrts` of the cpufreq collector were renamed to
`node_cpu_scaling_frequency_min_hertz` and
`node_cpu_scaling_frequency_max_hertz`.

Collectors that are enabled, but are unable to find data to collect, now return
`0` for `node_scrape_collector_success`.
You may need to manually remove /usr/local/etc/ssl/cert.pem if it is no longer needed.
=====
Message from openvpn-2.6.16:

--
Note that OpenVPN now configures a separate user and group "openvpn",
which should be used instead of the NFS user "nobody"
when an unprivileged user account is desired.

It is advisable to review existing configuration files and
to consider adding/changing user openvpn and group openvpn.
=====
Message from strongswan-6.0.3_1:

--
The default strongSwan configuration interface have been updated to vici.
To use the stroke interface by default either compile the port without the vici option or
set 'strongswan_interface="stroke"' in your rc.conf file.
=====
Message from opnsense-25.7.8:

--
Some will win, some will lose, some are born to sing the blues
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
/var/cache/pkg/pciids-20251105~50d25a4be8.pkg
/var/cache/pkg/py311-boto3-1.40.64~e37a318ef0.pkg
/var/cache/pkg/liblz4-1.10.0_2,1~665677c9bb.pkg
/var/cache/pkg/opnsense-update-25.7.8~fee3f6a970.pkg
/var/cache/pkg/zstd-1.5.7_1.pkg
/var/cache/pkg/php83-mbstring-8.3.28~aea088c9f8.pkg
/var/cache/pkg/cpu-microcode-intel-20251111.pkg
/var/cache/pkg/php83-dom-8.3.28.pkg
/var/cache/pkg/py311-numpy-1.26.4_10,1~448cb68ef2.pkg
/var/cache/pkg/nano-8.7~1905622677.pkg
/var/cache/pkg/pkcs11-helper-1.31.0.pkg
/var/cache/pkg/php83-ctype-8.3.28~b4ea07e69e.pkg
/var/cache/pkg/nspr-4.38.2.pkg
/var/cache/pkg/php83-simplexml-8.3.28.pkg
/var/cache/pkg/libunwind-20250904.pkg
/var/cache/pkg/pcre2-10.47~81f85770cc.pkg
/var/cache/pkg/php83-zlib-8.3.28~0ace26b122.pkg
/var/cache/pkg/php83-sqlite3-8.3.28~a9398ff640.pkg
/var/cache/pkg/php83-ldap-8.3.28.pkg
/var/cache/pkg/py311-cryptography-45.0.7_1,1~c815f3235b.pkg
/var/cache/pkg/php83-curl-8.3.28.pkg
/var/cache/pkg/libiconv-1.18_1~f25bb554f1.pkg
/var/cache/pkg/openvpn-2.6.16~4f8aacf57c.pkg
/var/cache/pkg/readline-8.3.1~f2b679163f.pkg
/var/cache/pkg/php83-ctype-8.3.28.pkg
/var/cache/pkg/curl-8.17.0~0363fce9c2.pkg
/var/cache/pkg/ca_root_nss-3.117_2~f94361d547.pkg
/var/cache/pkg/sqlite3-3.50.4_2,1.pkg
/var/cache/pkg/php83-gettext-8.3.28.pkg
/var/cache/pkg/liblz4-1.10.0_2,1.pkg
/var/cache/pkg/brotli-1.2.0,1~6e6393bc03.pkg
/var/cache/pkg/py311-aioquic-1.3.0_1~254dacaf7b.pkg
/var/cache/pkg/py311-boto3-1.40.64.pkg
/var/cache/pkg/brotli-1.2.0,1.pkg
/var/cache/pkg/readline-8.3.1.pkg
/var/cache/pkg/zstd-1.5.7_1~788f890814.pkg
/var/cache/pkg/php83-xml-8.3.28.pkg
/var/cache/pkg/bind-tools-9.20.16~7af23c5d14.pkg
/var/cache/pkg/php83-simplexml-8.3.28~270147682b.pkg
/var/cache/pkg/openvpn-2.6.16.pkg
/var/cache/pkg/py311-botocore-1.40.64~0f62b87430.pkg
/var/cache/pkg/mysql80-client-8.0.44~caf92bf501.pkg
/var/cache/pkg/sudo-1.9.17p2_2~c026b03dc3.pkg
/var/cache/pkg/opnsense-25.7.8.pkg
/var/cache/pkg/os-sensei-agent-2.2~7797faf0fb.pkg
/var/cache/pkg/php83-zlib-8.3.28.pkg
/var/cache/pkg/nss-3.118.1~5ad385b9f3.pkg
/var/cache/pkg/py311-botocore-1.40.64.pkg
/var/cache/pkg/py311-cryptography-45.0.7_1,1.pkg
/var/cache/pkg/nspr-4.38.2~38753a629c.pkg
/var/cache/pkg/py311-numpy-1.26.4_10,1.pkg
/var/cache/pkg/nss-3.118.1.pkg
/var/cache/pkg/bind-tools-9.20.16.pkg
/var/cache/pkg/node_exporter-1.9.1_5~118fb321fc.pkg
/var/cache/pkg/php83-sockets-8.3.28.pkg
/var/cache/pkg/py311-pyopenssl-25.3.0_1,1~d4e6f43fa1.pkg
/var/cache/pkg/os-freeradius-1.9.28~2da921cf9c.pkg
/var/cache/pkg/py311-vici-6.0.3.pkg
/var/cache/pkg/pcre2-10.47.pkg
/var/cache/pkg/php83-ldap-8.3.28~8c8d10b5e9.pkg
/var/cache/pkg/py311-pyopenssl-25.3.0_1,1.pkg
/var/cache/pkg/php83-pcntl-8.3.28.pkg
/var/cache/pkg/strongswan-6.0.3_1~51975838ce.pkg
/var/cache/pkg/py311-vici-6.0.3~b2271437be.pkg
/var/cache/pkg/php83-dom-8.3.28~847af91472.pkg
/var/cache/pkg/py311-dnspython-2.8.0_1,1.pkg
/var/cache/pkg/opnsense-update-25.7.8.pkg
/var/cache/pkg/php83-mbstring-8.3.28.pkg
/var/cache/pkg/os-sensei-2.2~cc0a1da109.pkg
/var/cache/pkg/php83-gettext-8.3.28~f630bfacb2.pkg
/var/cache/pkg/php83-xml-8.3.28~c5ef2658e7.pkg
/var/cache/pkg/py311-trio-0.32.0.pkg
/var/cache/pkg/nano-8.7.pkg
/var/cache/pkg/git-2.51.2~284cb55370.pkg
/var/cache/pkg/php83-filter-8.3.28.pkg
/var/cache/pkg/php83-filter-8.3.28~4a8f33be7d.pkg
/var/cache/pkg/php83-8.3.28~9dc92cfc41.pkg
/var/cache/pkg/ntp-4.2.8p18_5~53ce7b3a74.pkg
/var/cache/pkg/node_exporter-1.9.1_5.pkg
/var/cache/pkg/pkcs11-helper-1.31.0~e98973b0f9.pkg
/var/cache/pkg/py311-dnspython-2.8.0_1,1~e877f271aa.pkg
/var/cache/pkg/php83-sqlite3-8.3.28.pkg
/var/cache/pkg/libiconv-1.18_1.pkg
/var/cache/pkg/strongswan-6.0.3_1.pkg
/var/cache/pkg/cpu-microcode-intel-20251111~1f802cd486.pkg
/var/cache/pkg/opnsense-25.7.8~c4e566826f.pkg
/var/cache/pkg/php83-pdo-8.3.28~af0a7d61fb.pkg
/var/cache/pkg/php83-session-8.3.28~a99ce5be66.pkg
/var/cache/pkg/curl-8.17.0.pkg
/var/cache/pkg/ntp-4.2.8p18_5.pkg
/var/cache/pkg/php83-session-8.3.28.pkg
/var/cache/pkg/py311-aioquic-1.3.0_1.pkg
/var/cache/pkg/libunwind-20250904~f1932c4865.pkg
/var/cache/pkg/os-freeradius-1.9.28.pkg
/var/cache/pkg/pciids-20251105.pkg
/var/cache/pkg/php83-8.3.28.pkg
/var/cache/pkg/os-sensei-2.2.pkg
/var/cache/pkg/os-sensei-agent-2.2.pkg
/var/cache/pkg/php83-curl-8.3.28~6accc1b1ac.pkg
/var/cache/pkg/git-2.51.2.pkg
/var/cache/pkg/py311-trio-0.32.0~379cd91a24.pkg
/var/cache/pkg/ca_root_nss-3.117_2.pkg
/var/cache/pkg/mysql80-client-8.0.44.pkg
/var/cache/pkg/sqlite3-3.50.4_2,1~3c97aae41e.pkg
/var/cache/pkg/php83-pcntl-8.3.28~93eff41d3d.pkg
/var/cache/pkg/php83-sockets-8.3.28~be778264e4.pkg
/var/cache/pkg/sudo-1.9.17p2_2.pkg
/var/cache/pkg/php83-pdo-8.3.28.pkg
The cleanup will free 225 MiB
Deleting files: .......... done
Nothing to do.
Starting web GUI...done.
Fetching base-25.7.8-amd64.txz: .... done
Fetching kernel-25.7.8-amd64.txz: ... done
!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!
! A critical upgrade is in progress. !
! Please do not turn off the system. !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Installing kernel-25.7.8-amd64.txz... done
Installing base-25.7.8-amd64.txz... done
Cleaning obsolete files... done
Please reboot.
***REBOOT***

Ok, the 25.7.8 update looks good.

The only way I can think of for it not to write the log is when "pkg upgrade" was used verbatim. But there would still be a pkg log:

# opnsense-log pkg

Maybe it gives a few clues.


Thanks,
Franco

Here's the pkg log:

root@fw:~# opnsense-log pkg
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="1"] gettext-runtime upgraded: 0.23.1 -> 0.26
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="2"] libgpg-error upgraded: 1.56 -> 1.58
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="3"] node_exporter upgraded: 1.9.1_5 -> 1.9.1_6
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="4"] os-theme-rebellion upgraded: 1.9.3 -> 1.9.4
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="5"] pciids upgraded: 20251105 -> 20251206
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="6"] py311-anyio upgraded: 4.11.0 -> 4.12.0
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="7"] py311-certifi upgraded: 2025.10.5 -> 2025.11.12
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="8"] py311-dns-lexicon upgraded: 3.21.1 -> 3.23.2
<13>1 2025-12-19T07:03:16+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="9"] py311-urllib3 upgraded: 2.5.0,1 -> 2.6.0,1
<13>1 2025-12-19T07:03:17+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="10"] py311-botocore upgraded: 1.40.64 -> 1.42.4
<13>1 2025-12-19T07:03:17+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="11"] py311-s3transfer upgraded: 0.14.0 -> 0.16.0
<13>1 2025-12-19T07:03:17+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="12"] py311-boto3 upgraded: 1.40.64 -> 1.42.4
<13>1 2025-12-19T07:03:17+01:00 fw.sloto.space pkg-static 59574 - [meta sequenceId="13"] socat upgraded: 1.8.0.3 -> 1.8.1.0
<13>1 2025-12-19T07:35:16+01:00 fw.sloto.space pkg-static 23766 - [meta sequenceId="1"] pkg reinstalled: 2.3.1_1 -> 2.3.1_1

The log only shows package upgrades from today, no core system updates (25.7.9 or 25.7.10).

This is still pretty strange. The /var/logs/pkg folder has the logs of the previous days too if you can find the day with the non-working upgrade.


Cheers,
Franco

Here are the relevant pkg logs:

Attached files:
- pkg_20251204.log: Contains the 25.7.9 upgrade (Dec 4, 2025)
- pkg_20251205.log: Package reinstall operations
- pkg_20251219.log: Today's operations

<13>1 2025-12-04T22:15:18+01:00 fw.sloto.space pkg-static 99903 - [meta sequenceId="1"] opnsense upgraded: 25.7.8 -> 25.7.9

Thanks for your support Franco

I had a similar issue going from 25.7.9_7 to 25.7.10 and had to update twice.

I started another thread as I also lost crowdsec and had to reinstall and re-configure that: https://forum.opnsense.org/index.php?topic=50150.0

Please let me know if you would like any logs and where to find them.

System is aware about the update as you na see the pic.

health audit:
***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 25.7.9 (amd64) at Fri Dec 19 14:45:56 CET 2025
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 25.7.8 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 25.7.8 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense (Priority: 11)
SunnyValley (Priority: 7)
>>> Check installed plugins
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
os-acme-client 4.11
os-cpu-microcode-intel 1.1
os-ddclient 1.28
os-etpro-telemetry 1.8
os-freeradius 1.9.28_1
os-haproxy 4.6_1
os-node_exporter 1.2
os-sensei 2.2.2
os-sensei-agent 2.2.1
os-sensei-updater 1.18
os-sftp-backup 1.1_2
os-sunnyvalley 1.5_1
os-theme-advanced 1.1
os-theme-rebellion 1.9.4
os-theme-vicuna 1.50
os-zerotier 1.3.2_6
>>> Check locked packages
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
>>> Check for missing package dependencies
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking all packages: .......... done
>>> Check for missing or altered package files
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" not known to package database.
***DONE***

and GUI update:
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 25.7.9 (amd64) at Fri Dec 19 14:49:38 CET 2025
Fetching changelog information, please wait... done
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: .......... done
Processing entries: .......... done
OPNsense repository update completed. 928 packages processed.
Updating SunnyValley repository catalogue...
Fetching meta.conf: . done
Fetching data.pkg: ....... done
Processing entries: ..... done
SunnyValley repository update completed. 49 packages processed.
All repositories are up to date.
pkg: warning: database version 37 is newer than libpkg(3) version 36, but still compatible
Checking for upgrades (4 candidates): .... done
Processing candidates (4 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***


@sarkyscouser looks is a different issue here