Upgrades into RC1 via 26.1.11 opnsense-devel

[franco]

Hi,

For the brave early testers the upgrade path is now live:

1. Switch to release type "development" and save.
2. Check for updates and install.
3. Check for updates again and it will offer 26.7.rc1 and install.
4. After upgrade switch back to release type "community" and save.
3. Check for updates and install 26.7.r1.

This will make the installed files match the published RC1 images.

A note of caution:

This is a major upgrade in the exact sense of the word: FreeBSD 15.1, PHP 8.5 and OpenSSL 3.5 are the components where we can be sure more problems are hiding somewhere, but we won't find out any other way.  If you have third party repository or plugin installed proceed with caution: we do not vet upgrades of them and they are likely not ready to make the jump.  Removing them beforehand is likely the best course of action at the moment.


Cheers,
Franco

[MoonbeamFrame]

Just upgraded my lab firewall from 26.1.11_6  to 26.7.r1 without issue.

[newsense]

>>> If you have third party repository or plugin installed proceed with caution

As usual Zenarmor users will need to wait for an official announcement.

The mimugmail repository will have to be rebuilt against openssl35.
Until that happens and there's an announcement from Michael packages depending on the openssl3.0 will be silently uninstalled during the upgrade ( i.e. Unifi controller )

[julsssark]

I upgraded my test VM from 26.1.11_6 to 26.7.r1. I have some minor observations:

1) I had to check for updates multiple times at steps 2, 3 and 5. But the update eventually completed and it is running fine.
2) Thanks @newsense for posting about the mimugmail respository. I also ran into the same problem using the single repository with just AdGuard (mimugmail-single.conf). I could not get the upgrade to complete with that repo configured and I ended up needing to delete the repo config.

Just out of curiosity, has anyone built a digital twin (or as near as possible) of their network using Proxmox's SDN to better simulate testing/rules with VLANs? I tried to create one using Proxmox v8 last year but it didn't handle VLANs well and I haven't tried again with v9.

[julsssark]

PS - The new services dashboard widget is great!

[newsense]

>>> single repository with just AdGuard (mimugmail-single.conf)


Actually AGH is the outlier that survives the upgrade to openssl35 - because AGH uses its own ssl from Go.

Still, the mimugmail repo-whichever may be in use - needs to be deleted ( as suggested above) or renamed as .bak for now in order for the OPNsense upgrade to succeed.