Update from 26.7 to 26.7.1: ok

[notspam]

Update from 26.7 to 26.7.1 was fine.
Need to check if the Intel CPU microcode loading is needed.
And I need to check for some files laying around.




----------

***GOT REQUEST TO UPDATE***
Currently running OPNsense 26.7 (amd64) at Wed Jul 22 15:16:59 UTC 2026
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
Fetching meta.conf:
Fetching data.pkg:
SunnyValley repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
Fetching meta.conf:
Fetching data.pkg:
SunnyValley repository is up to date.
All repositories are up to date.
Checking for upgrades (21 candidates): .......... done
Processing candidates (21 candidates): .......... done
The following 22 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
   cpu-microcode-rc: 1.0_2 [OPNsense]

Installed packages to be UPGRADED:
   ca_root_nss: 3.124 -> 3.125 [OPNsense]
   git: 2.54.0 -> 2.55.0 [OPNsense]
   json-c: 0.18 -> 0.19 [OPNsense]
   luajit: 2.1.0.20260524 -> 2.1.0.20260629 [OPNsense]
   nginx: 1.30.3_1,3 -> 1.30.4,3 [OPNsense]
   nss: 3.124 -> 3.125 [OPNsense]
   opnsense: 26.7 -> 26.7.1 [OPNsense]
   os-bind: 1.34_3 -> 1.34_4 [OPNsense]
   os-cpu-microcode-intel: 1.1 -> 1.1_1 [OPNsense]
   os-q-feeds-connector: 1.6 -> 1.6_1 [OPNsense]
   p11-kit: 0.26.2 -> 0.26.4 [OPNsense]
   pciids: 20260624 -> 20260711 [OPNsense]
   phpunit9-php85: 9.6.34 -> 9.6.35 [OPNsense]
   py313-certifi: 2026.5.20 -> 2026.6.17 [OPNsense]
   py313-cryptography: 48.0.0_1,1 -> 48.0.1,1 [OPNsense]
   ruby33-gems: 4.0.15 -> 4.0.16 [OPNsense]
   tailscale: 1.98.8 -> 1.98.9 [OPNsense]
   telegraf: 1.39.0 -> 1.39.1_1 [OPNsense]
   turnserver: 4.10.0 -> 4.14.0 [OPNsense]
   wazuh-agent: 4.14.5 -> 4.14.6 [OPNsense]

Installed packages to be REINSTALLED:
   cpu-microcode-intel-20260512_1 [OPNsense] (options changed)

Number of packages to be installed: 1
Number of packages to be upgraded: 20
Number of packages to be reinstalled: 1

The process will require 3 MiB more space.
117 MiB to be downloaded.
[1/22] Fetching nginx-1.30.4,3.pkg: .......... done
[2/22] Fetching ruby33-gems-4.0.16.pkg: ......... done
[3/22] Fetching pciids-20260711.pkg: ......... done
[4/22] Fetching nss-3.125.pkg: .......... done
[5/22] Fetching wazuh-agent-4.14.6.pkg: .......... done
[6/22] Fetching py313-certifi-2026.6.17.pkg: ....... done
[7/22] Fetching turnserver-4.14.0.pkg: .......... done
[8/22] Fetching py313-cryptography-48.0.1,1.pkg: .......... done
[9/22] Fetching os-bind-1.34_4.pkg: ... done
[10/22] Fetching cpu-microcode-intel-20260512_1.pkg: .......... done
[11/22] Fetching json-c-0.19.pkg: ....... done
[12/22] Fetching tailscale-1.98.9.pkg: .......... done
[13/22] Fetching git-2.55.0.pkg: .......... done
[14/22] Fetching phpunit9-php85-9.6.35.pkg: .......... done
[15/22] Fetching os-cpu-microcode-intel-1.1_1.pkg: . done
[16/22] Fetching ca_root_nss-3.125.pkg: ......... done
[17/22] Fetching luajit-2.1.0.20260629.pkg: .......... done
[18/22] Fetching os-q-feeds-connector-1.6_1.pkg: . done
[19/22] Fetching telegraf-1.39.1_1.pkg: .......... done
[20/22] Fetching p11-kit-0.26.4.pkg: .......... done
[21/22] Fetching cpu-microcode-rc-1.0_2.pkg: . done
[22/22] Fetching opnsense-26.7.1.pkg: .......... done
Checking integrity... done (0 conflicting)
[1/22] Upgrading ca_root_nss from 3.124 to 3.125...
[1/22] Extracting ca_root_nss-3.125: ..... done
[2/22] Installing cpu-microcode-rc-1.0_2...
[2/22] Extracting cpu-microcode-rc-1.0_2: .... done
[3/22] Reinstalling cpu-microcode-intel-20260512_1...
[3/22] Extracting cpu-microcode-intel-20260512_1: .......... done
[4/22] Upgrading git from 2.54.0 to 2.55.0...
===> Creating groups
Using existing group 'git_daemon'
===> Creating users
Using existing user 'git_daemon'
[4/22] Extracting git-2.55.0: .......... done
[5/22] Upgrading json-c from 0.18 to 0.19...
[5/22] Extracting json-c-0.19: .......... done
[6/22] Upgrading luajit from 2.1.0.20260524 to 2.1.0.20260629...
[6/22] Extracting luajit-2.1.0.20260629: .......... done
[7/22] Upgrading nginx from 1.30.3_1,3 to 1.30.4,3...
===> Creating groups
Using existing group 'www'
===> Creating users
Using existing user 'www'
[7/22] Extracting nginx-1.30.4,3: .......... done
[8/22] Upgrading nss from 3.124 to 3.125...
[8/22] Extracting nss-3.125: .......... done
[9/22] Upgrading opnsense from 26.7 to 26.7.1...
[9/22] Extracting opnsense-26.7.1: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh.sh'
[OPNsense\WazuhAgent\WazuhAgent:general.server_address] A value is required.{}
Model OPNsense\WazuhAgent\WazuhAgent can't be saved, skip ( OPNsense\Base\ValidationException: [OPNsense\WazuhAgent\WazuhAgent:general.server_address] A value is required.{}
 in /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php:822
Stack trace:
#0 /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php(947): OPNsense\Base\BaseModel->serializeToConfig()
#1 /usr/local/opnsense/mvc/script/run_migrations.php(69): OPNsense\Base\BaseModel->runMigrations()
#2 {main} )
Failed OPNsense\WazuhAgent\WazuhAgent from 0.0.0 to 1.0.3
[OPNsense\Siproxd\General:if_inbound] A value is required.{}
[OPNsense\Siproxd\General:if_outbound] A value is required.{}
[OPNsense\Siproxd\General:use_rport] Option [] not in list.{Option1}
Model OPNsense\Siproxd\General can't be saved, skip ( OPNsense\Base\ValidationException: [OPNsense\Siproxd\General:if_inbound] A value is required.{}
[OPNsense\Siproxd\General:if_outbound] A value is required.{}
[OPNsense\Siproxd\General:use_rport] Option [] not in list.{Option1}
 in /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php:822
Stack trace:
#0 /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php(947): OPNsense\Base\BaseModel->serializeToConfig()
#1 /usr/local/opnsense/mvc/script/run_migrations.php(69): OPNsense\Base\BaseModel->runMigrations()
#2 {main} )
Failed OPNsense\Siproxd\General from 0.0.0 to 1.1.0
Migrated OPNsense\Trust\General from 1.0.1 to 1.0.2
Flushing all caches...done.
Writing firmware settings: OPNsense SunnyValley
Writing trust files...done.
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
certctl: No changes to trust store were made.
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring cron...done.
Configuring system logging...done.
[10/22] Upgrading os-bind from 1.34_3 to 1.34_4...
[10/22] Extracting os-bind-1.34_4: .......... done
Stopping configd...done
Starting configd.
Reloading plugin configuration
Flushing all caches...done.
Configuring system logging...done.
Reloading template OPNsense/Bind: OK


Reloading template OPNsense/Syslog: OK


[11/22] Upgrading os-cpu-microcode-intel from 1.1 to 1.1_1...
[11/22] Extracting os-cpu-microcode-intel-1.1_1: ... done
Reloading firmware configuration
[OPNsense\WazuhAgent\WazuhAgent:general.server_address] A value is required.{}
Model OPNsense\WazuhAgent\WazuhAgent can't be saved, skip ( OPNsense\Base\ValidationException: [OPNsense\WazuhAgent\WazuhAgent:general.server_address] A value is required.{}
 in /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php:822
Stack trace:
#0 /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php(947): OPNsense\Base\BaseModel->serializeToConfig()
#1 /usr/local/opnsense/mvc/script/run_migrations.php(69): OPNsense\Base\BaseModel->runMigrations()
#2 {main} )
Failed OPNsense\WazuhAgent\WazuhAgent from 0.0.0 to 1.0.3
[OPNsense\Siproxd\General:if_inbound] A value is required.{}
[OPNsense\Siproxd\General:if_outbound] A value is required.{}
[OPNsense\Siproxd\General:use_rport] Option [] not in list.{Option1}
Model OPNsense\Siproxd\General can't be saved, skip ( OPNsense\Base\ValidationException: [OPNsense\Siproxd\General:if_inbound] A value is required.{}
[OPNsense\Siproxd\General:if_outbound] A value is required.{}
[OPNsense\Siproxd\General:use_rport] Option [] not in list.{Option1}
 in /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php:822
Stack trace:
#0 /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php(947): OPNsense\Base\BaseModel->serializeToConfig()
#1 /usr/local/opnsense/mvc/script/run_migrations.php(69): OPNsense\Base\BaseModel->runMigrations()
#2 {main} )
Failed OPNsense\Siproxd\General from 0.0.0 to 1.1.0
Flushing all caches...done.
Writing firmware settings: OPNsense SunnyValley
Writing trust files...done.
Scanning /usr/share/certs/untrusted for certificates...
Scanning /usr/share/certs/trusted for certificates...
Scanning /usr/local/share/certs for certificates...
certctl: No changes to trust store were made.
Writing trust bundles...done.
Configuring login behaviour...done.
Configuring cron...done.
Configuring system logging...done.
[12/22] Upgrading os-q-feeds-connector from 1.6 to 1.6_1...
[12/22] Extracting os-q-feeds-connector-1.6_1: .......... done
Stopping configd...done
Starting configd.
Reloading plugin configuration
Flushing all caches...done.
Configuring system logging...done.
Reloading template OPNsense/QFeeds: OK


Service `cron' has been restarted.
[13/22] Upgrading p11-kit from 0.26.2 to 0.26.4...
[13/22] Extracting p11-kit-0.26.4: .......... done
[14/22] Upgrading pciids from 20260624 to 20260711...
[14/22] Extracting pciids-20260711: ..... done
[15/22] Upgrading phpunit9-php85 from 9.6.34 to 9.6.35...
[15/22] Extracting phpunit9-php85-9.6.35: .... done
[16/22] Upgrading py313-certifi from 2026.5.20 to 2026.6.17...
[16/22] Extracting py313-certifi-2026.6.17: .......... done
[17/22] Upgrading py313-cryptography from 48.0.0_1,1 to 48.0.1,1...
[17/22] Extracting py313-cryptography-48.0.1,1: .......... done
[18/22] Upgrading ruby33-gems from 4.0.15 to 4.0.16...
[18/22] Extracting ruby33-gems-4.0.16: .......... done
[19/22] Upgrading tailscale from 1.98.8 to 1.98.9...
[19/22] Extracting tailscale-1.98.9: ...... done
[20/22] Upgrading telegraf from 1.39.0 to 1.39.1_1...
===> Creating groups
Using existing group 'telegraf'
===> Creating users
Using existing user 'telegraf'
[20/22] Extracting telegraf-1.39.1_1: ...... done
[21/22] Upgrading turnserver from 4.10.0 to 4.14.0...
[21/22] Extracting turnserver-4.14.0: .......... done
[22/22] Upgrading wazuh-agent from 4.14.5 to 4.14.6...
===> Creating groups
Using existing group 'wazuh'
===> Creating users
Using existing user 'wazuh'
===> Creating homedir(s)
[22/22] Extracting wazuh-agent-4.14.6: ....... done
You may need to manually remove /usr/local/etc/ssl/cert.pem if it is no longer needed.
=====
Message from cpu-microcode-rc-1.0_2:

--
This port includes an RC script, which is one of two methods to update
the CPU microcode on a FreeBSD system.

1. Early loading.
   This method does not use the RC script included here.
   This is the preferred method, because it ensures that any CPU features
   added or removed by a microcode update are visible to the kernel by
   applying the update before the kernel performs CPU feature detection.

   To enable updates using early loading, add the following lines to
   /boot/loader.conf:

   cpu_microcode_load="YES"

   and the appropriate one of these lines:

   cpu_microcode_name="/boot/firmware/intel-ucode.bin"
   cpu_microcode_name="/boot/firmware/amd-ucode.bin"

   The microcode update will be loaded when the system is rebooted.

   AMD systems running FreeBSD prior to 2024-02-22 snapshot
   34467bd76 only support late loading.


2. Late loading.
   This method, which does use the RC script included here, is enabled by
   adding the following line to /etc/rc.conf:

   microcode_update_enable="YES"

   The microcode update is then applied upon reboot or when the microcode
   update service is run via:

   # service microcode_update start

   If the CPU requires a microcode update, a console message such as the
   following will appear:

   Updating CPU Microcode...
   /usr/local/share/cpucontrol/m32306c3_00000022.fw: updating cpu /dev/cpuctl0 from rev 0x17 to rev 0x22... done.
   /usr/local/share/cpucontrol/m32306c3_00000022.fw: updating cpu /dev/cpuctl2 from rev 0x17 to rev 0x22... done.
   /usr/local/share/cpucontrol/m32306c3_00000022.fw: updating cpu /dev/cpuctl4 from rev 0x17 to rev 0x22... done.
   /usr/local/share/cpucontrol/m32306c3_00000022.fw: updating cpu /dev/cpuctl6 from rev 0x17 to rev 0x22... done.
   Done.

It is safe to enable both methods.
You may need to manually remove /usr/local/etc/nginx/mime.types if it is no longer needed.
You may need to manually remove /usr/local/etc/nginx/nginx.conf if it is no longer needed.
=====
Message from opnsense-26.7.1:

--
Just a dream and the wind to carry me
You may need to manually remove /usr/local/etc/turnserver.conf if it is no longer needed.
Checking integrity... done (0 conflicting)
Nothing to do.
Checking all packages: .......... done
The following package files will be deleted:
   /var/cache/pkg/ca_root_nss-3.125~8725d4a9fe.pkg
   /var/cache/pkg/nss-3.125.pkg
   /var/cache/pkg/luajit-2.1.0.20260629~f3b48e6f2e.pkg
   /var/cache/pkg/wazuh-agent-4.14.6.pkg
   /var/cache/pkg/telegraf-1.39.1_1~4cbedcb0d0.pkg
   /var/cache/pkg/tailscale-1.98.9~8a62092a9a.pkg
   /var/cache/pkg/phpunit9-php85-9.6.35~087aef86c4.pkg
   /var/cache/pkg/cpu-microcode-intel-20260512_1~ec7bd62a9e.pkg
   /var/cache/pkg/py313-certifi-2026.6.17~58dc2bd8ba.pkg
   /var/cache/pkg/turnserver-4.14.0.pkg
   /var/cache/pkg/os-bind-1.34_4.pkg
   /var/cache/pkg/p11-kit-0.26.4~e23788585f.pkg
   /var/cache/pkg/cpu-microcode-rc-1.0_2~e75ff3975e.pkg
   /var/cache/pkg/opnsense-26.7.1.pkg
   /var/cache/pkg/ruby33-gems-4.0.16~3d37468a49.pkg
   /var/cache/pkg/json-c-0.19.pkg
   /var/cache/pkg/os-q-feeds-connector-1.6_1~8a67c2cb7f.pkg
   /var/cache/pkg/pciids-20260711.pkg
   /var/cache/pkg/ruby33-gems-4.0.16.pkg
   /var/cache/pkg/pciids-20260711~34ad3f8084.pkg
   /var/cache/pkg/cpu-microcode-intel-20260512_1.pkg
   /var/cache/pkg/nginx-1.30.4,3.pkg
   /var/cache/pkg/os-cpu-microcode-intel-1.1_1.pkg
   /var/cache/pkg/p11-kit-0.26.4.pkg
   /var/cache/pkg/telegraf-1.39.1_1.pkg
   /var/cache/pkg/py313-cryptography-48.0.1,1~b6c2f86624.pkg
   /var/cache/pkg/phpunit9-php85-9.6.35.pkg
   /var/cache/pkg/tailscale-1.98.9.pkg
   /var/cache/pkg/wazuh-agent-4.14.6~e52e175272.pkg
   /var/cache/pkg/nss-3.125~3bd727dc98.pkg
   /var/cache/pkg/turnserver-4.14.0~63568cdf01.pkg
   /var/cache/pkg/json-c-0.19~0011d31480.pkg
   /var/cache/pkg/os-q-feeds-connector-1.6_1.pkg
   /var/cache/pkg/cpu-microcode-rc-1.0_2.pkg
   /var/cache/pkg/py313-certifi-2026.6.17.pkg
   /var/cache/pkg/luajit-2.1.0.20260629.pkg
   /var/cache/pkg/py313-cryptography-48.0.1,1.pkg
   /var/cache/pkg/ca_root_nss-3.125.pkg
   /var/cache/pkg/git-2.55.0~4fe4a1faf3.pkg
   /var/cache/pkg/git-2.55.0.pkg
   /var/cache/pkg/nginx-1.30.4,3~a4e2b8cdeb.pkg
   /var/cache/pkg/os-cpu-microcode-intel-1.1_1~8ae9834ac8.pkg
   /var/cache/pkg/opnsense-26.7.1~d7ce0a8dc3.pkg
   /var/cache/pkg/os-bind-1.34_4~65de8e379f.pkg
The cleanup will free 117 MiB
Deleting files: .......... done
Nothing to do.
Flushing temporary package files... done
Starting web GUI...done.
***DONE***

--