Install/Deinstall Loop (libdeflate / graphite2)

[mlenje]

Hello OPNsense Community & Developers,

I am experiencing a persistent update loop with two minor upstream shared libraries: graphite2 (v1.3.14) and libdeflate (v1.25). The WebGUI firmware status page continually prompts that these updates are available. When the update is triggered, pkg successfully fetches and extracts the files, but immediately removes them during the automatic post-install cleanup phase. Consequently, the packages reappear as missing "New" (N/A) entries on the next update check.

Environment Details:
OPNsense Version: 26.1.10-amd64
OS: FreeBSD 14.3-RELEASE-p4
OpenSSL: 3.0.18
Plugins Active: Zenarmor (Home Subscription) using a Local Elasticsearch 8.11.3 reporting database instance, running alongside Java (openjdk17).
The Behavior / Update Log CLI Output:
When running the update via the root shell, the package manager successfully pulls the files, but then explicitly lists them under Installed packages to be REMOVED directly afterward:

Processing candidates (6 candidates): .... done
The following 2 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
   graphite2: 1.3.14 [OPNsense]
   libdeflate: 1.25 [OPNsense]

Number of packages to be installed: 2

181 KiB to be downloaded.
[1/2] Fetching libdeflate-1.25.pkg: ....... done
[2/2] Fetching graphite2-1.3.14.pkg: .......... done
Checking integrity... done (0 conflicting)
[1/2] Installing graphite2-1.3.14...
[1/2] Extracting graphite2-1.3.14: .......... done
[2/2] Installing libdeflate-1.25...
[2/2] Extracting libdeflate-1.25: .......... done
Checking integrity... done (0 conflicting)
Deinstallation has been requested for the following 2 packages:

Installed packages to be REMOVED:
   graphite2: 1.3.14
   libdeflate: 1.25

Number of packages to be removed: 2
[1/2] Deinstalling graphite2-1.3.14...
[1/2] Deleting files for graphite2-1.3.14: .......... done
[2/2] Deinstalling libdeflate-1.25...
[2/2] Deleting files for libdeflate-1.25: .......... done
Checking all packages: .......... done
The following package files will be deleted:
   /var/cache/pkg/openjdk17-17.0.10+7.1_1.pkg
   /var/cache/pkg/elasticsearch8-8.11.3~ff6f5709d3.pkg
   /var/cache/pkg/libdeflate-1.25.pkg
   /var/cache/pkg/graphite2-1.3.14.pkg
   /var/cache/pkg/elasticsearch8-8.11.3.pkg
...
The cleanup will free 295 MiB
Deleting files: .......... done
Nothing to do.
Flushing temporary package files... done
***DONE***

Has anyone else utilizing local Elasticsearch deployments run into this package manager looping pattern? Is there an upcoming repository metadata sync planned to align the Java/Elasticsearch dependency tags with these specific library versions on the FreeBSD 14.3 base?

Thank you for your time and continued incredible work on the OPNsense ecosystem!

[franco]

Zenarmor repo may need a rebuild for pkg to stop trying to cope with what it thinks are update-requiring package versions.


Cheers,
Franco

[ureyni]

Hello,

Please provide the output of the following command:

pkg info -d elasticsearch8

The output should appear as follows:

elasticsearch8-8.11.3:
        bash-5.3.15
        openjdk17-17.0.10+7.1_1
        jna-5.15.0_2

[mlenje]

I can confirm this is the output of pkg info -d elasticsearch8
 
elasticsearch8-8.11.3:
        bash-5.3.15
        openjdk17-17.0.10+7.1_1
        jna-5.15.0_2

[ureyni]

Hi Mlenje,
You can check repo as following command.

root@OPNsense:~ # opnsense-version
OPNsense 26.1.10 (amd64)
root@OPNsense:~ # pkg -d search -r SunnyValley opnsense
DBG(1)[49299]> PkgRepo: verifying update for SunnyValley
DBG(1)[49299]> Pkgrepo, begin update of '/var/db/pkg/repos/SunnyValley/db'
DBG(1)[49299]> (fetch) Request to fetch https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/4e4bfb87-55a8-4f2a-8c1a-a09178f596f1/meta.conf
DBG(1)[49299]> (fetch) Fetch: fetcher used: https
DBG(1)[49299]> (fetch) Request to fetch https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/4e4bfb87-55a8-4f2a-8c1a-a09178f596f1/data.pkg
DBG(1)[49299]> (fetch) Fetch: fetcher used: https
root@OPNsense:~ # pkg -d search -r OPNsense graphite2
DBG(1)[49440]> PkgRepo: verifying update for OPNsense
DBG(1)[49440]> Pkgrepo, begin update of '/var/db/pkg/repos/OPNsense/db'
DBG(1)[49440]> (fetch) Request to fetch https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest/meta.conf
DBG(1)[49440]> (fetch) Fetch: fetcher used: https
DBG(1)[49440]> (fetch) Request to fetch https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest/data.pkg
DBG(1)[49440]> (fetch) Fetch: fetcher used: https
graphite2-1.3.14               Rendering capabilities for complex non-Roman writing systems
root@OPNsense:~ #

root@OPNsense:~ # pkg -d search -r SunnyValley libdeflate
DBG(1)[97076]> PkgRepo: verifying update for SunnyValley
DBG(1)[97076]> Pkgrepo, begin update of '/var/db/pkg/repos/SunnyValley/db'
DBG(1)[97076]> (fetch) Request to fetch https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/4e4bfb87-55a8-4f2a-8c1a-a09178f596f1/meta.conf
DBG(1)[97076]> (fetch) Fetch: fetcher used: https
DBG(1)[97076]> (fetch) Request to fetch https://updates.zenarmor.net/opnsense/FreeBSD:14:amd64/26.1/4e4bfb87-55a8-4f2a-8c1a-a09178f596f1/data.pkg
DBG(1)[97076]> (fetch) Fetch: fetcher used: https
libdeflate-1.25                Fast, whole-buffer DEFLATE-based compression library
root@OPNsense:~ # pkg -d search -r OPNsense libdeflate
DBG(1)[97483]> PkgRepo: verifying update for OPNsense
DBG(1)[97483]> Pkgrepo, begin update of '/var/db/pkg/repos/OPNsense/db'
DBG(1)[97483]> (fetch) Request to fetch https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest/meta.conf
DBG(1)[97483]> (fetch) Fetch: fetcher used: https
DBG(1)[97483]> (fetch) Request to fetch https://pkg.opnsense.org/FreeBSD:14:amd64/26.1/latest/data.pkg
DBG(1)[97483]> (fetch) Fetch: fetcher used: https
libdeflate-1.25                Fast, whole-buffer DEFLATE-based compression library
root@OPNsense:~ #

graphite2 doesn't exist in Sunnyvalley Repo.
libdeflate is exist both of repos

libdeflate will removed from Sunnyvalley Repo Zenarmor 2.6.1

Could you check your opnsense ?