Sophos UTM 9.211003-304009 Up2date failed

Samuel Heinrich

Hatte heute ein Problem auf einer Sophos UTM220 beim Update von 9.211003 nach 9.304009 via Up2date Funktion.

Der Fehler:

2015:03:11-12:28:11 lxfw01 auisys[25578]: >=========================================================================
2015:03:11-12:28:11 lxfw01 auisys[25578]: id="371J" severity="error" sys="system" sub="up2date" name="Fatal: Version conflict: required version: 9.302002 <=> current version: 9.211003" status="failed" action="install" package="sys"
2015:03:11-12:28:11 lxfw01 auisys[25578]: 
2015:03:11-12:28:11 lxfw01 auisys[25578]:  1. main::alf:75() auisys.pl
2015:03:11-12:28:11 lxfw01 auisys[25578]:  2. main::perform_work:1068() auisys.pl
2015:03:11-12:28:11 lxfw01 auisys[25578]:  3. main::auisys_prepare_and_work:560() auisys.pl
2015:03:11-12:28:11 lxfw01 auisys[25578]:  4. main::top-level:37() auisys.pl
2015:03:11-12:43:02 lxfw01 audld[27848]: Starting Up2Date Package Downloader
2015:03:11-12:43:02 lxfw01 audld[27848]: patch up2date possible
2015:03:11-12:43:10 lxfw01 audld[27848]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
2015:03:11-12:43:10 lxfw01 audld[27848]: id="3707" severity="info" sys="system" sub="up2date" name="Successfully synchronized fileset" status="success" action="download" package="avira3"
2015:03:11-12:43:11 lxfw01 auisys[27892]: Starting Up2Date Package Installer
2015:03:11-12:43:11 lxfw01 auisys[27892]: Searching for available up2date packages for type 'sys'
2015:03:11-12:43:11 lxfw01 auisys[27892]: Installing up2date package file '/var/up2date//sys/u2d-sys-9.302002-303002.tgz.gpg'
2015:03:11-12:43:11 lxfw01 auisys[27892]: Verifying up2date package signature
2015:03:11-12:43:12 lxfw01 auisys[27892]: Unpacking installation instructions
2015:03:11-12:43:12 lxfw01 auisys[27892]: >=========================================================================
2015:03:11-12:43:12 lxfw01 auisys[27892]: id="371J" severity="error" sys="system" sub="up2date" name="Fatal: Version conflict: required version: 9.302002 <=> current version: 9.211003" status="failed" action="install" package="sys"
2015:03:11-12:43:12 lxfw01 auisys[27892]:

 

Die Analyse:

Du bist jetzt auf Version:  9.211003
Willst auf: 9.304-9
Musst jedoch dazu erst auf:  9.302002

Komischerweise gibt es gar kein 9.303002 zum Download!

Die Lösung:

Via SSH auf die Sophos als root User verbinden und Files von Hand aus dem Up2Date Cache Verzeichnis löschen:

lxfw01:/home/login # 
lxfw01:/home/login # cd /var/up2date/sys
lxfw01:/var/up2date/sys # ls
u2d-sys-9.211003-304009.tgz.gpg  u2d-sys-9.302002-303002.tgz.gpg
lxfw01:/var/up2date/sys # ls
u2d-sys-9.211003-304009.tgz.gpg  u2d-sys-9.302002-303002.tgz.gpg
lxfw01:/var/up2date/sys # rm *
lxfw01:/var/up2date/sys # ls
lxfw01:/var/up2date/sys #

Versuchen einen Download neuer Files zu triggern:

lxfw01:/var/up2date/sys # audld.plx --trigger
Starting Up2Date Package Downloader
Authenticating ...
Authentication successful!
No new packages available, exiting.

Wenn das nicht funktioniert, das entsprechende File von Hand via wget herunterladen oder über den Webadmin hochzuladen:

lxfw01:/var/up2date/sys # wget ftp://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.211003-304009.tgz.gpg
--2015-03-12 20:12:36--  ftp://ftp.astaro.de/UTM/v9/up2date/u2d-sys-9.211003-304009.tgz.gpg
           => `u2d-sys-9.211003-304009.tgz.gpg'
Resolving ftp.astaro.de... 79.125.108.166
Connecting to ftp.astaro.de|79.125.108.166|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD /UTM/v9/up2date ... done.
==> SIZE u2d-sys-9.211003-304009.tgz.gpg ... 193084154
==> PASV ... done.    ==> RETR u2d-sys-9.211003-304009.tgz.gpg ... done.
Length: 193084154 (184M)

100%[===================================================================================================================================================>] 193,084,154 7.67M/s   in 24s     

2015-03-12 20:13:01 (7.60 MB/s) - `u2d-sys-9.211003-304009.tgz.gpg' saved [193084154]

Danach kann man ein Update Simulieren:

lxfw01:/var/up2date/sys # Searching for available up2date packages for type 'man9'
There are no 'man9' packages available for installation
Searching for available up2date packages for type 'appctrl3'
There are no 'appctrl3' packages available for installation
Searching for available up2date packages for type 'ohelp9'
There are no 'ohelp9' packages available for installation
Searching for available up2date packages for type 'cadata'
There are no 'cadata' packages available for installation
Searching for available up2date packages for type 'sys'

Installing up2date package version 9.304009
  Verifying up2date package signature
  Unpacking installation instructions
  Unpacking up2date package container
  Running pre-installation checks
  Starting up2date package installation
    Would do  0, 0 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libapr-util1-1.5.3-0.163086977.g26c6a07.rb3.i686.rpm
    Would do  0, 1 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libapr1-1.5.1-0.171540270.ga078e80.rb2.i686.rpm
    Would do  0, 2 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libaptp-9.25-3.g297f84b.i686.rpm
    Would do  0, 3 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libaviraglue-9.30-1.g28d2430.rb1.i686.rpm
    Would do  0, 4 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libharu-2.4.0-0.180796595.g0915d4a.rb1.i686.rpm
    Would do  0, 5 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libnavlextensions-9.30-7.g4818041.rb1.i686.rpm
    Would do  0, 6 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libnl-3.2.24-1.2.ga37d3c2.rb1.i686.rpm
    Would do  0, 7 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libnuma1-2.0.7-0.9.1.1198.g32d2279.rb1.i686.rpm
    Would do  0, 8 [ENV   300] rpm --test -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/libopenssl1_0_0-1.0.1j-1.gddc1804.rb3.i686.rpm
— gekürzt weil unintressant, hier prüft er jedes Paket einzeln.----
   Would do  4,131 [ENV   300] rpm -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/quagga-chroot-0.99.23-1.gb3c145a.rb2.i686.rpm
    Would do  4,132 [ENV   300] rpm -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/kernel-smp64-3.12.30-31.g9ece5aa.rb1.x86_64.rpm
    Would do  4,133 [ENV   300] rpm -U --nodeps /var/up2date//sys-install/u2d-sys-9.304009/rpms/ep-release-9.304-9.noarch.rpm
    Would do  5, 0 [ENV   300] sh -c exec /var/up2date//sys-install/u2d-sys-9.304009/./update9.304009pre_start
    Would do  7, 0 [ENV   300] sh -c exec /var/up2date//sys-install/u2d-sys-9.304009/./update9.304009post_start
    Would do  9, 0 [NOENV  no] rm /var/up2date//sys/u2d-sys-9.211003-304009.tgz.gpg
    Would do  9, 1 [NOENV  no] sync
    Would touch '/tmp/.u2d-sys-9.211-9.304-3.9.1.tgz'
    Would mark for reboot now
Searching for available up2date packages for type 'geoip'
There are no 'geoip' packages available for installation
Searching for available up2date packages for type 'avira3'
There are no 'avira3' packages available for installation
Searching for available up2date packages for type 'savi'
There are no 'savi' packages available for installation
Would do a reboot now

Up2Date Package Installer finished, exiting

lxfw01:/var/up2date/sys #

Müsste nun Funktionieren. Das Problem war in diesem Fall wohl ein das corrupte Paket „9.302002“ das auf welche Weise auch immer auf der Box im Up2Date cache lag!

 

Samuel Heinrich
Senior Network Engineer at Selution AG (Switzerland)
Arbeitet in Raum Basel (Switzerland) als Senior Network Engineer mit über 15 Jahren Erfahrung im Bereich Netzwerk

Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert

Diese Website verwendet Akismet, um Spam zu reduzieren. Erfahre mehr darüber, wie deine Kommentardaten verarbeitet werden.