Opravil jsem si to rucne v /etc/config/updater, nicmene po spusteni skriptu mi to vraci 1 a ne nulu.
root@turris:~# updater.sh -n
+ [ -n = -w ]
+ WAIT_FOR_ONLINE=180
+ dirname /usr/bin/updater.sh
+ LIB_DIR=/usr/bin
+ . /usr/bin/updater-worker.sh
+ . /usr/bin/updater-utils.sh
+ PID=29452
+ PROGRAM=updater
+ FAILSAFE_MODE=false
+ TMP_DIR=/tmp/update
+ PKG_DIR=/tmp/update/packages
+ CIPHER=aes-256-cbc
+ COOLDOWN=3
+ CERT=/etc/ssl/updater.pem
+ CRL=/etc/ssl/crl.pem
+ STATE_DIR=/tmp/update-state
+ STATE_FILE=/tmp/update-state/state
+ LOG_FILE=/tmp/update-state/log2
+ PLAN_FILE=/tmp/update-state/plan
+ LOCK_DIR=/tmp/update-state/lock
+ QUEUE=
+ uci -q get updater.override.branch
+ ID=rc
+ uci -q get updater.override.revision
+ atsha204cmd hw-rev
+ REVISION=00000009
+ uci -q get updater.override.generation
+ sed -e s/\..*/\// /etc/turris-version
+ GENERATION=3/
+ uci -q get updater.override.base_url
+ echo https://api.turris.cz/updater-repo/
+ BASE_URL=https://api.turris.cz/updater-repo/
+ uci -q get updater.override.hash_url
+ echo https://api.turris.cz/hashes/
+ HASH_URL=https://api.turris.cz/hashes/
+ BASE_URL=https://api.turris.cz/updater-repo/3/00000009
+ uci -q get updater.override.list_req_url
+ echo https://api.turris.cz/getlists.cgi
+ LIST_REQ=https://api.turris.cz/getlists.cgi
+ uci -q get updater.override.disable
+ echo false
+ DISABLED=false
+ false
+ GENERIC_LIST_URL=https://api.turris.cz/updater-repo/3/00000009/lists/generic
+ SPECIFIC_LIST_URL=https://api.turris.cz/updater-repo/3/00000009/lists/rc
+ PACKAGE_URL=https://api.turris.cz/updater-repo/3/00000009/packages
+ PID_FILE=/tmp/update-state/pid
+ BACKGROUND=false
+ EXIT_CODE=1
+ BASE_PLAN_FILE=/usr/share/updater/plan
+ [ -e /tmp/offline-update-ready ]
+ [ -n = -b ]
+ echo+ sed s|^https*://\([^/]*\)/.*|\1|
https://api.turris.cz/updater-repo/3/00000009
+ PING_TEST_HOST=api.turris.cz
+ seq 1 180
+ ping -c 1 -w 1 api.turris.cz
+ break
+ [ -n = -r ]
+ /usr/bin/updater-wipe.sh
+ [ -d /tmp/update-state/lock ]
+ mkdir -p /tmp/update-state
+ mkdir /tmp/update-state/lock
+ echo 29452
+ echo startup
+ echo initial sleep
+ rm -f /tmp/update-state/log2 /tmp/update-state/last_error
+ touch /tmp/update-state/log2
+ false
+ STABLE_PACKAGES=/usr/share/updater/packages
+ STABLE_PLAN=/usr/share/updater/plan
+ trap rm -rf "$TMP_DIR" "$PID_FILE" "$LOCK_DIR" $STABLE_PACKAGES $STABLE_PLAN; exit "$EXIT_CODE" EXIT INT QUIT TERM ABRT
+ [ -n != -n ]
+ shift
+ mkdir -p /tmp/update
+ get-api-crl
+ cat /tmp/opkg-update-timestamp
+ LAST_UPDATE=1487071392
+ date +%s
+ DATE_NOW=1487073336
+ [ -z 1487071392 ]
+ expr 1487073336 - 1487071392
+ [ 1944 -gt 86400 ]
+ do_journal
+ [ -f /usr/share/updater/journal ]
+ echo get list
+ uci get updater.pkglists.lists
+ get_list_pack base core honeypot netutils majordomo dvb shell-utils cacerts luci-controls nas definitions
+ echo 3/00000009
+ [ rc != unknown-id ]
+ + uci -q get updater.override.branch
my_curl -T - https://api.turris.cz/getlists.cgi -X POST -f
+ curl --compress --cacert /etc/ssl/updater.pem --crlfile /etc/ssl/crl.pem -T - https://api.turris.cz/getlists.cgi -X POST -f
+ [ -z rc ]
+ SERIAL=rc
+ echo rc
+ mkdir -p /tmp/updater-lists
+ [ base ]
+ [ -f /tmp/updater-lists/base ]
+ HASH=-
+ echo base -
+ shift
+ [ core ]
+ [ -f /tmp/updater-lists/core ]
+ HASH=-
+ echo core -
+ shift
+ [ honeypot ]
+ [ -f /tmp/updater-lists/honeypot ]
+ HASH=-
+ echo honeypot -
+ shift
+ [ netutils ]
+ [ -f /tmp/updater-lists/netutils ]
+ HASH=-
+ echo netutils -
+ shift
+ [ majordomo ]
+ [ -f /tmp/updater-lists/majordomo ]
+ HASH=-
+ echo majordomo -
+ shift
+ [ dvb ]
+ [ -f /tmp/updater-lists/dvb ]
+ HASH=-
+ echo dvb -
+ shift
+ [ shell-utils ]
+ [ -f /tmp/updater-lists/shell-utils ]
+ HASH=-
+ echo shell-utils -
+ shift
+ [ cacerts ]
+ [ -f /tmp/updater-lists/cacerts ]
+ HASH=-
+ echo cacerts -
+ shift
+ [ luci-controls ]
+ [ -f /tmp/updater-lists/luci-controls ]
+ HASH=-
+ echo luci-controls -
+ shift
+ [ nas ]
+ [ -f /tmp/updater-lists/nas ]
+ HASH=-
+ echo nas -
+ shift
+ [ definitions ]
+ [ -f /tmp/updater-lists/definitions ]
+ HASH=-
+ echo definitions -
+ shift
+ [ ]
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (60) SSL certificate problem: unable to get certificate CRL
More details here: https://curl.haxx.se/docs/sslcerts.html
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
+ die Could not download list pack
+ echo error
+ echo Could not download list pack
+ echo Could not download list pack
Could not download list pack
+ my_logger -p daemon.err
+ + echo Could not download list pack
logger -t updater -p daemon.err
+ kill -SIGABRT 29452
+ rm -rf /tmp/update /tmp/update-state/pid /tmp/update-state/lock /usr/share/updater/packages /usr/share/updater/plan
+ exit 1
+ rm -rf /tmp/update /tmp/update-state/pid /tmp/update-state/lock /usr/share/updater/packages /usr/share/updater/plan
+ exit 1
root@turris:~# echo $?
1
Takze evidentne problem s chybejicimi certifikaty, jak je zmineno zde:
Po jejich stazeni/instalaci uz updater.sh -n hlasil nulu.
Spusten tedy updater-migrate.sh, ktery plus minus probehl, jen sem tam nejaky WARN:
> WARN:Branch overriden to rc
> WARN:Script revision-specific not found, but ignoring its absence as requested
> WARN:Script serial-specific not found, but ignoring its absence as requested
> …
> WARN:Lock on //var/lock/opkg.lock released by garbage collector
> + exec pkgupdate
> WARN:Branch overriden to rc
> WARN:Script revision-specific not found, but ignoring its absence as requested
> WARN:Script serial-specific not found, but ignoring its absence as requested
> WARN:Couldn’t load flags: cannot open /usr/share/updater/flags: No such file or directory
> …
> WARN:Config file /etc/config/updater modified by the user. Backing up the new one into /etc/config/updater-opkg
> WARN:Config file /etc/config/transmission modified by the user. Backing up the new one into /etc/config/transmission-opkg
> Output from luci-app-sqm.postinst:
> uci: Parse error (invalid command) at line 157, byte 4
> uci: Parse error (invalid character in name field) at line 12, byte 24
> INFO:Executing postupdate hooks…
> root@turris:~#
Po opetovnem spusteni updater.sh pouze tyto WARN:
WARN:Script revision-specific not found, but ignoring its absence as requested
WARN:Script serial-specific not found, but ignoring its absence as requested
WARN:Multiple candidates from same repository with same version for package shairport-sync-openssl
Snad je tedy vse v poradku 
Díky.