Update to 26.7 fails and cannot login anymore after some reboots

Started by ANOMPI, July 26, 2026, 11:01:08 PM

Previous topic - Next topic
Hello,

I have several OPNsense firewalls and most of them do upgrade from 26.1 to 26.7 but one fails, scrolling on the console goes very fast, so I captured it in a video and hope that it helps to give me some hints.  For now i roll back a snapshot of this opnsense unit.

https://drive.google.com/file/d/1jjizi3W1PxyN8KlQsWSi4uj2NHP8QHeX/view?usp=drivesdk

At 1:30 the config is not loaed, configd is not started?  Seen that with other updates as well, but via Ctrl-C (2:28) and after reboot going into single user mode check if config is there and then reboot again solved it for my other routers.
Then at 3:00 i see some errors and I step into single user mode
Then at 5:34 the last part of logging appears with several errors, about dnsmasq and setup_hostwatch.sh and then the login prompt, but the prompt does not accept my password, nor the default opnsense password.

And no WebGUI available as well, as if network adapters are not initialized it seems.

As side note, Zenarmor is installed, but it was installed on another node as well and did not give issues.


What to do?
Marco.

if you were able to go back to a running environment using a snapshot...I would remove the os-cpu-microcode-intel plugin, run a health check...if all is good, try the upgrade again...I have read where many people had isues with the intel microcode installed...once removed , the upgrade worked...Good Luck.

Quote from: richaras on July 27, 2026, 01:55:29 AMremove the os-cpu-microcode-intel plugin

I did not expect this to be the solution, but it was.  Thanks!!

I removed it also from my other OPNsense appliances to be sure for the future.
Marco.

There's a bug in the boot loader in FreeBSD that under specific circumstances with the plugin installed makes the system hang at boot.
There is a workaround in the updated plugin in 26.7.1, so you should IMHO definitely re-add that. Also consider updating your boot loaders.

Running without microcode updates for known CPU bugs is probably not a good idea.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)