Opkg failed to update after upgrade

GreenCode · December 8, 2024, 2:18pm

I am now using v23.05.4 x86-64 openwrt. Recently i upgrade my router & it is succeded. But now i can't update anymore, what's up? Anyone here experienced anything like this? Here is the logs & things i have done, on the bellow i also tried Packages.gz and it's ok, so i guess theres a problem with the key. How to resolve this?

root@rt10:~# opkg update
Downloading https://downloads.openwrt.org/releases/23.05.4/targets/x86/64/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_core
Downloading https://downloads.openwrt.org/releases/23.05.4/targets/x86/64/packages/Packages.sig
Signature file download failed.
Remove wrong Signature file.
Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/base/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/base/Packages.gz

Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/luci/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/luci/Packages.gz

Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_packages
Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/packages/Packages.sig
Signature file download failed.
Remove wrong Signature file.
Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/routing/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_routing
Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/routing/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/telephony/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/telephony/Packages.gz

Collected errors:
 * opkg_download: Failed to download https://downloads.openwrt.org/releases/23.05.4/targets/x86/64/packages/Packages.sig, wget returned 4.
 * opkg_download: Check your network settings and connectivity.

 * opkg_download: Failed to download https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/base/Packages.gz, wget returned 4.
 * opkg_download: Check your network settings and connectivity.

 * opkg_download: Failed to download https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/luci/Packages.gz, wget returned 4.
 * opkg_download: Check your network settings and connectivity.

 * opkg_download: Failed to download https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/packages/Packages.sig, wget returned 4.
 * opkg_download: Check your network settings and connectivity.

 * opkg_download: Failed to download https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/telephony/Packages.gz, wget returned 4.
 * opkg_download: Check your network settings and connectivity.

root@rt10:~# wget https://downloads.openwrt.org/releases/23.05.4/targets/x86/64/p
ackages/Packages.gz
Downloading 'https://downloads.openwrt.org/releases/23.05.4/targets/x86/64/packages/Packages.gz'
Connecting to 146.75.46.132:443
Writing to 'Packages.gz'
Packages.gz          100% |*******************************| 99502   0:00:00 ETA
Download completed (99502 bytes)

Its solved now. The problem is on adguardhome dns. I added google to my adguardhome dns forwarder. Of course you can try other dns server which is working.

brada4 · December 8, 2024, 2:43pm

OpenWrt 23.05.4 - Service Release - 20. July 2024

So it took you five months to notice?

porshuram · December 8, 2024, 2:50pm

try to edit the file /etc/opkg.conf

and remove the last line containing
option check_signature
and save it properly using nano

GreenCode · December 8, 2024, 3:21pm

Still failed,

root@rt10:/tmp/opkg-lists# opkg update
Downloading https://downloads.openwrt.org/releases/23.05.4/targets/x86/64/packages/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/releases/23.05.4/targets/x86/64/packages/Packages.gz

Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/base/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_base
Downloading https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/luci/Packages.gz
*** Failed to download the package list from https://downloads.openwrt.org/releases/23.05.4/packages/x86_64/luci/Packages.gz

...

GreenCode · December 8, 2024, 3:25pm

actually i already read it somewhere, but just because at that time it's not effected so i ignored it. But never thought it happens after the last update.

brada4 · December 8, 2024, 3:38pm

echo nameserver 1.2 > /etc/resolv.conf

Better use auc/luci-app-attendedsysupgrade to upgrade whole system keeping configuration.

GreenCode · December 8, 2024, 3:56pm

I don't know what it means? Should i temporary use public dns?

My dns is no problem, i can download what failed to download with opkg using wget. Look at my first log, on the last line.

echo nameserver 1.2 > /etc/resolv.conf

GreenCode · December 8, 2024, 4:33pm

You are right. After i replace my dns with google.dns it is running. I have checked at my adguardhome logs and it wasn't blocked all. What is the problem then?

brada4 · December 8, 2024, 4:51pm

Adguard home was not noted in initial post.
Please add output of

ubus call system board
cat /etc/config/network
cat /etc/config/dhcp
cat /etc/config/firewall
opkg list-installed adguardhome

GreenCode · December 8, 2024, 8:56pm

Ok,

ubus call system board

{
        "kernel": "5.15.162",
        "hostname": "rt10",
        "system": "Intel(R) Core(TM)2 Duo CPU     E4500  @ 2.20GHz",
        "rootfs_type": "ext4",
        "release": {
                "distribution": "OpenWrt",
                "version": "23.05.4",
                "revision": "r24012-d8dd03c46f",
                "target": "x86/64",
                "description": "OpenWrt 23.05.4 r24012-d8dd03c46f"
        }
}

cat /etc/config/network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr '127.0.0.1'
        option netmask '255.0.0.0'

config globals 'globals'
        option ula_prefix 'fd5f:8e73:aeef::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        list ports 'eth0'
        list ports 'eth2'
        option promisc '1'
        option ip6segmentrouting '1'

config interface 'lan'
        option device 'br-lan'
        option proto 'static'
        option netmask '255.255.255.0'
        option ip6assign '64'
        option ipaddr '192.168.1.10'
        option defaultroute '0'
        option metric '10'

config device
        option name 'eth2'
        option multicast '1'
        option ipv6 '1'
        option promisc '1'

config interface 'wan'
        option proto 'static'
        option device 'eth1'
        option force_link '0'
        option ipaddr '192.168.18.104'
        option netmask '255.255.255.0'
        option gateway '192.168.18.100'
        option delegate '0'
        list dns '192.168.1.10'

config device
        option name 'eth1'
        option promisc '1'

config device
        option name 'eth0'
        option promisc '1'
        option ipv6 '1'

cat /etc/config/dhcp

config dnsmasq 'rt10'
        option localservice '1'
        option domainneeded '1'
        option localise_queries '1'
        option local '/lan/'
        option domain 'lan'
        option authoritative '1'
        option leasefile '/tmp/dhcp.leases'
        option ednspacket_max '1232'
        option nonegcache '1'
        option max_ttl '86400'
        option cachesize '10'
        option logfacility 'DAEMON'
        option expandhosts '1'
        option dnsseccheckunsigned '0'
        option rebind_protection '0'
        option noresolv '1'
        option boguspriv '0'
        option port '54'
        list notinterface 'wan'

config dhcp 'lan'
        option interface 'lan'
        option start '100'
        option limit '150'
        option dhcpv4 'server'
        option ra 'hybrid'
        option leasetime '1d'
        option force '1'
        option netmask '255.255.255.0'
        list dhcp_option '3,192.168.1.10'
        list dhcp_option '6,192.168.1.10'
        list dhcp_option '4,192.168.1.10'
        list dhcp_option '42,192.168.1.10'
        list dhcp_option '15,lan'
        list dhcp_option '119,lan'
        option dhcpv6 'hybrid'
        option master '1'
        option ra_useleasetime '1'
        option preferred_lifetime '1d'

config dhcp 'wan'
        option interface 'wan'
        option ignore '1'
        option ra_useleasetime '1'
        option start '100'
        option limit '150'
        option leasetime '12h'

config odhcpd 'odhcpd'
        option maindhcp '0'
        option leasefile '/tmp/hosts/odhcpd'
        option leasetrigger '/usr/sbin/odhcpd-update'
        option loglevel '4'

>>>> Ip registration list is deleted...

cat /etc/config/firewall


config defaults
        option synflood_protect '1'
        option drop_invalid '1'
        option input 'REJECT'
        option output 'ACCEPT'
        option forward 'REJECT'
        option flow_offloading '1'
        option auto_includes '1'

config zone
        option name 'lan'
        option forward 'REJECT'
        option input 'REJECT'
        option output 'ACCEPT'
        list network 'lan'

config zone
        option name 'wan'
        option forward 'REJECT'
        option mtu_fix '1'
        option masq '1'
        option input 'REJECT'
        option output 'ACCEPT'
        list network 'wan'

config include
        option enabled '1'
        option type 'script'
        option path '/etc/fw4.user'
        option fw4_compatible '1'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'wan'
        option proto 'udp'
        option dest_port '68'
        option target 'ACCEPT'
        option family 'ipv4'
        option enabled '0'

config rule
        option name 'Allow-DHCPv6'
        option src 'wan'
        option proto 'udp'
        option dest_port '546'
        option family 'ipv6'
        option target 'ACCEPT'
        option enabled '0'

config rule
        option name 'Allow-Ping'
        option src 'wan'
        option proto 'icmp'
        option icmp_type 'echo-request'
        option family 'ipv4'
        option target 'ACCEPT'

config rule
        option name 'Allow-ICMPv6-Input'
        option src 'wan'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        list icmp_type 'router-solicitation'
        list icmp_type 'neighbour-solicitation'
        list icmp_type 'router-advertisement'
        list icmp_type 'neighbour-advertisement'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'
        option enabled '0'

config rule
        option name 'Allow-ICMPv6-Forward'
        option src 'wan'
        option dest '*'
        option proto 'icmp'
        list icmp_type 'echo-request'
        list icmp_type 'echo-reply'
        list icmp_type 'destination-unreachable'
        list icmp_type 'packet-too-big'
        list icmp_type 'time-exceeded'
        list icmp_type 'bad-header'
        list icmp_type 'unknown-header-type'
        option limit '1000/sec'
        option family 'ipv6'
        option target 'ACCEPT'
        option enabled '0'

config rule
        option name 'Allow-IGMP'
        option src 'wan'
        option proto 'igmp'
        option family 'ipv4'
        option target 'ACCEPT'
        option enabled '0'

config rule
        option name 'Allow-MLD'
        option src 'wan'
        option proto 'icmp'
        option src_ip 'fe80::/10'
        list icmp_type '130/0'
        list icmp_type '131/0'
        list icmp_type '132/0'
        list icmp_type '143/0'
        option family 'ipv6'
        option target 'ACCEPT'
        option enabled '0'

config rule
        option name 'Allow-IPSec-ESP'
        option src 'wan'
        option dest 'lan'
        option proto 'esp'
        option target 'ACCEPT'

config rule
        option name 'Allow-ISAKMP'
        option src 'wan'
        option dest 'lan'
        option dest_port '500'
        option proto 'udp'
        option target 'ACCEPT'

config rule
        option name 'Allow-DHCP-Renew'
        option src 'lan'
        option proto 'udp'
        option target 'ACCEPT'
        option family 'ipv4'
        option dest_port '67'

config rule
        option name 'Allow dhcpv6-renew'
        option family 'ipv6'
        list proto 'udp'
        option src 'lan'
        option dest_port '547'
        option target 'ACCEPT'

config rule
        list proto 'udp'
        option src 'lan'
        option dest_port '123'
        option target 'ACCEPT'
        option name 'Allow ntp'

config rule
        option src 'lan'
        option dest_port '53'
        option target 'ACCEPT'
        option name 'Allow dns'

config rule
        option name 'Allow DNS local resolver'
        option src 'lan'
        option dest_port '54'
        option target 'ACCEPT'
        option enabled '0'

config rule
        option name 'Allow VerusProxy'
        option src 'lan'
        option dest_port '8000'
        option target 'ACCEPT'

config rule
        option name 'Allow icmp'
        list proto 'icmp'
        option src 'lan'
        option target 'ACCEPT'

config rule
        option src 'lan'
        option target 'ACCEPT'
        option name 'Allow a2lt to local service ports'
        option family 'ipv4'
        option ipset 'ServicePorts'
        list src_mac 'xx:xx'
        list src_mac 'xx:xx'

config rule
        option src 'lan'
        option target 'ACCEPT'
        option name 'Allow a2lt to local service ports v6'
        option family 'ipv6'
        option ipset 'ServicePorts6'
        list src_mac '0x:xx'
        list src_mac 'xx:xx:xx'

config rule
        option name 'Scheduled tv'
        option src 'lan'
        option dest 'wan'
        option target 'DROP'
        option start_time '19:30:00'
        option stop_time '05:00:00'
        list src_mac 'Cx:xx'

config rule
        option name 'Allow this device'
        option src 'lan'
        option target 'ACCEPT'
        option dest 'wan'
        list src_mac 'xx:xx:xx'
        list proto 'all'

config redirect
        option target 'DNAT'
        option src 'lan'
        option src_dport '53'
        option name 'Dns'
        list proto 'tcp'
        list proto 'udp'
        option reflection_src 'external'
        option dest_ip '192.168.1.10'
        option src_dip '!192.168.1.10'
        option dest 'lan'

config redirect
        option target 'DNAT'
        option name 'Ntp'
        list proto 'udp'
        option src 'lan'
        option src_dport '123'
        option dest_ip '192.168.1.10'
        option src_dip '!192.168.1.10'
        option reflection_src 'external'
        option dest 'lan'

config ipset
        option name 'Blacklist'
        option family 'ipv4'
        option loadfile '/etc/luci-uploads/blacklist'
        option counters '1'
        list match 'src_net'

config ipset
        option name 'Ip-blacklist'
        option family 'ipv4'
        option loadfile '/etc/luci-uploads/ip-blacklist'
        option counters '1'
        list match 'src_ip'

config ipset
        option name 'Samba'
        option family 'ipv4'
        list match 'dest_port'
        option loadfile '/etc/luci-uploads/samba-ports'

config ipset
        option name 'dns_server'
        option family 'ipv4'
        list match 'dest_ip'
        option counters '1'
        list entry '94.140.14.140'
        list entry '94.140.14.141'
        list entry '104.16.132.229'
        list entry '104.16.133.229'
        list entry '185.199.108.153'
        list entry '185.199.109.153'
        list entry '185.199.110.153'
        list entry '185.199.111.153'

config ipset
        option name 'Dns_server_src'
        option family 'ipv4'
        list match 'src_ip'
        option counters '1'
        list entry '94.140.14.140'
        list entry '94.140.14.141'
        list entry '104.16.132.229'
        list entry '104.16.133.229'
        list entry '185.199.108.153'
        list entry '185.199.109.153'
        list entry '185.199.110.153'
        list entry '185.199.111.153'

config ipset
        option name 'ServicePorts'
        option comment 'Local service ports'
        option family 'ipv4'
        list match 'dest_port'
        option loadfile '/etc/luci-uploads/servicePorts'
        option counters '1'

config ipset
        option name 'ServicePorts6'
        option comment 'Local service ports v6'
        option family 'ipv6'
        list match 'dest_port'
        option loadfile '/etc/luci-uploads/servicePorts'
        option counters '1'

opkg list-installed adguardhome

adguardhome - 0.107.46-1

brada4 · December 8, 2024, 9:22pm

The default for all services is own IP in all DHCP options. What are you expecting from setting them?

GreenCode · December 8, 2024, 9:30pm

list dhcp_option '3,192.168.1.10'
list dhcp_option '6,192.168.1.10'
list dhcp_option '4,192.168.1.10'
list dhcp_option '42,192.168.1.10'
list dhcp_option '15,lan'
list dhcp_option '119,lan'

Are those what you mean? Iif true, i just want to direct them to local