core: Cannot upgrade to 23.7.7 without removing opnsense package

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

Describe the bug

Latest update tries to replace “openssl” package with “openssl111” package and this somehow breaks the package manager logic.

To Reproduce

Steps to reproduce the behavior:

  1. Try updating to 23.7.7

Expected behavior

Update happens

Describe alternatives you considered

-n/a

Screenshots

Relevant log files

***GOT REQUEST TO UPDATE***
Currently running OPNsense 23.7.7 at Wed Oct 25 10:42:55 CEST 2023
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (112 candidates): .......... done
Processing candidates (112 candidates): ..... done
Checking integrity... done (1 conflicting)
  - openssl111-1.1.1w conflicts with openssl-1.1.1w,1 on /usr/local/bin/c_rehash
Checking integrity... done (0 conflicting)
The following 53 package(s) will be affected (of 0 checked):

Installed packages to be REMOVED:
	mpd5: 5.9_16
	openssl: 1.1.1w,1
	opnsense: 23.7.7

New packages to be INSTALLED:
	openssl111: 1.1.1w

Installed packages to be UPGRADED:
	curl: 8.3.0 -> 8.4.0
	easy-rsa: 3.1.6 -> 3.1.7
	gettext-runtime: 0.22_1 -> 0.22.3
	libnet: 1.2,1 -> 1.3,1
	libnghttp2: 1.56.0 -> 1.57.0
	lighttpd: 1.4.71 -> 1.4.72
	node_exporter: 1.5.0_7 -> 1.6.1
	nss: 3.93 -> 3.94
	opnsense-lang: 23.7.4 -> 23.7.7
	opnsense-update: 23.7.4 -> 23.7.7
	os-wireguard: 2.3 -> 2.4
	perl5: 5.34.1_3 -> 5.36.1_1
	py39-numpy: 1.25.0,1 -> 1.25.0_2,1
	py39-outcome: 1.2.0 -> 1.3.0
	suricata: 6.0.14 -> 6.0.15
	unbound: 1.18.0 -> 1.18.0_1
	vim: 9.0.1994 -> 9.0.2050
	xxd: 9.0.1994 -> 9.0.2050

Installed packages to be REINSTALLED:
	cpdup-1.22 (direct dependency changed: openssl111)
	cyrus-sasl-2.1.28 (direct dependency changed: openssl111)
	cyrus-sasl-gssapi-2.1.28 (direct dependency changed: openssl111)
	gmp-6.3.0 (option added: INFO)
	hostapd-2.10_8 (direct dependency changed: openssl111)
	hw-probe-1.6.5 (direct dependency changed: perl5)
	iperf3-3.15 (direct dependency changed: openssl111)
	isc-dhcp44-server-4.4.3P1 (direct dependency changed: openssl111)
	krb5-1.21.2 (direct dependency changed: openssl111)
	ldns-1.8.3 (direct dependency changed: openssl111)
	libevent-2.1.12 (direct dependency changed: openssl111)
	libfido2-1.13.0 (direct dependency changed: openssl111)
	liboping-1.8.0_2 (direct dependency changed: perl5)
	miniupnpd-2.3.3_1,1 (direct dependency changed: openssl111)
	monit-5.33.0 (direct dependency changed: openssl111)
	ntp-4.2.8p17_1 (direct dependency changed: openssl111)
	openldap26-client-2.6.6 (direct dependency changed: openssl111)
	openssh-portable-9.3.p2_1,1 (direct dependency changed: openssl111)
	openvpn-2.6.6 (direct dependency changed: openssl111)
	php82-8.2.11 (direct dependency changed: openssl111)
	pkcs11-helper-1.29.0 (direct dependency changed: openssl111)
	py39-aioquic-0.9.21 (direct dependency changed: openssl111)
	py39-cryptography-41.0.4,1 (direct dependency changed: openssl111)
	python39-3.9.18 (direct dependency changed: openssl111)
	rrdtool-1.8.0_2 (direct dependency changed: perl5)
	ruby-3.1.4_1,1 (direct dependency changed: openssl111)
	squid-5.9 (direct dependency changed: openssl111)
	strongswan-5.9.11_2 (direct dependency changed: openssl111)
	syslog-ng-4.4.0 (direct dependency changed: openssl111)
	tor-0.4.8.7 (direct dependency changed: openssl111)
	wpa_supplicant-2.10_9 (direct dependency changed: openssl111)

Number of packages to be removed: 3
Number of packages to be installed: 1
Number of packages to be upgraded: 18
Number of packages to be reinstalled: 31

The operation will free 22 MiB.
pkg-static: Cannot delete vital package: opnsense!
pkg-static: If you are sure you want to remove opnsense, 
pkg-static: unset the 'vital' flag with: pkg set -v 0 opnsense
Starting web GUI...done.
Generating RRD graphs...done.
***DONE***

Additional context

I could update to opnsense 23.7.7 manually by using pkg install, but it will still want to remove opnsense.

Environment

I was running 23.7.6

About this issue

  • Original URL
  • State: closed
  • Created 8 months ago
  • Reactions: 4
  • Comments: 22 (8 by maintainers)

Commits related to this issue

Most upvoted comments

Can you try the following?

pkg install -f mpd5

It seems that I have a test machine with a similar problem, which did pull itself through the upgrade after forcing a reinstall of mpd5

Official plugins like os-tor are not third party and work fine on 23.7.7 itself, provided the openssl111 update was properly installed.

Let’s give third party repo maintainers the time to update their packages. This is just a transient issue.

I don’t have time for this. Please be patient. Everything will sort itself out when you give others the time to rebuild their repos that you’ve added to your install.

Same issue Tried a completely new installation now. Downloaded the latest iso from opnsense. Installed and tried to upgrade.

Getting the same issue. Clean installation.

Same here for what it’s worth (sorry for adding more noise). Stock install - can’t update with similar issues relating to openssl111.

I don’t have time for this. Please be patient. Everything will sort itself out when you give others the time to rebuild their repos…

Yeah, no worries or hurries, I’m just confused is all. I’m only using packages installed from the opnsense web interface.

And I’ve managed to fix it by manually updating “pkg” to the latest version and then running the upgrade showed no conflicts. I guess somehow I had an outdated pkg version which couldn’t handle the openssl -> openssl111 rename?

image