Pkgupdate downgrading custom package

Software SW help
1

Hi,

I installed pbr-iptables on 7.0 RC (HBT), stangri repo, the “Add Repository (GitHub)” way.

The repo is added and visible in LuCI /etc/opkg/customfeeds.conf.

The ''pbr-iptables 1.1.4-5" is installed (LuCI >Software > Installed) by me and I can start the service, setup what is needed and it’s running well.

But did noticed in ReForis that updater perform downgrade, and then upgrade the same packages again.

As not sure if it’s OK did reinstall the pbr and set up the updates for manual approval so now it waiting for me with info:

" in the 'Package Management — Updates' menu.
 • Install jansson 2.13.1-2
 • Install nftables-json 1.0.2-2.1
 • Install kmod-nft-nat 5.15.148-1
 • Install pbr 1.1.4-5
 • Install pbr-iptables 1.1.1-7"

and from the logread:

updater-supervisor: There is no running process with stored pid. Overtaking it.
Mar 13 02:07:43 TO updater-supervisor: Running pkgupdate
Mar 13 02:07:48 TO updater[20285]: repository.lua.lua:47 (Globals): Target Turris OS: 7.0.0
Mar 13 02:07:58 TO updater[20285]: planner.lua:356 (pkg_plan): Requested package luci-i18n-vpnbypass-de that is missing, ignoring as requested.
Mar 13 02:07:58 TO updater[20285]: planner.lua:356 (pkg_plan): Requested package reforis-librespeed-plugin-l10n-de that is missing, ignoring as requested.
Mar 13 02:07:58 TO updater[20285]: planner.lua:356 (pkg_plan): Requested package reforis-diagnostics-plugin-l10n-de that is missing, ignoring as requested.
Mar 13 02:07:58 TO updater[20285]: planner.lua:356 (pkg_plan): Requested package reforis-snapshots-plugin-l10n-de that is missing, ignoring as requested.
Mar 13 02:07:58 TO updater[20285]: planner.lua:356 (pkg_plan): Requested package luci-i18n-vpnbypass-en that is missing, ignoring as requested.
Mar 13 02:07:58 TO updater[20285]: planner.lua:356 (pkg_plan): Requested package luci-i18n-vpnbypass-cs that is missing, ignoring as requested.
Mar 13 02:07:58 TO updater[20285]: updater.lua:92 (Globals): Queue install of jansson/base/2.13.1-2
Mar 13 02:07:58 TO updater[20285]: updater.lua:92 (Globals): Queue install of nftables-json/base/1.0.2-2.1
Mar 13 02:07:58 TO updater[20285]: updater.lua:92 (Globals): Queue install of kmod-nft-nat/core/5.15.148-1
Mar 13 02:07:58 TO updater[20285]: updater.lua:92 (Globals): Queue install of pbr/stangri_repo/1.1.4-5
Mar 13 02:07:58 TO updater[20285]: updater.lua:92 (Globals): Queue downgrade of pbr-iptables/packages/1.1.1-7[1.1.4-5]
Mar 13 02:07:58 TO updater[20285]: updater.lua:132 (Globals): Downloading packages
Mar 13 02:07:59 TO updater[20285]: src/lib/logging.c:162 (log_subproc_open): Executing preupdate hook: 05_schnapps.sh
Mar 13 02:07:59 TO updater[20285]: transaction.lua:63 (fun): Unpacking download packages
Mar 13 02:07:59 TO updater[20285]: transaction.lua:134 (fun): Checking for file collisions between packages
Mar 13 02:08:00 TO updater[20285]: src/pkgupdate/main.c:182 (main): 
[string "transaction"]:334: [string "transaction"]:142: Collisions:
• /usr/share/pbr/pbr.user.aws: pbr (new-file), pbr-iptables (existing-file)
• /etc/config/pbr: pbr (new-file), pbr-iptables (existing-file)
• /etc/uci-defaults/90-pbr: pbr (new-file), pbr-iptables (existing-file)
• /usr/share/pbr/pbr.user.netflix: pbr (new-file), pbr-iptables (existing-file)
• /etc/init.d/pbr: pbr (new-file), pbr-iptables (existing-file)
Mar 13 02:08:00 TO updater-supervisor: pkgupdate exited with: -6

Can’t figure out, what is wrong with the way I did that - why updater performing this action.

Does anyone have same issues?

2

I think if you use custom repos the versions dont exactly match to what is in TOS. So an ugly fix would be to force specific versions for the updater or prioritise specific repo. Because I think that normally packages have priority of 60 so you could set up lets say 80 for this repo with pbr.

But basically you are doing something that is called creating a FrankenOpenWRT glued together from different releases. Errors are expected if you dont do additional setup.

And I strongly believe that you are the first person in the world to try that on TurrisOS. But HF GL

1 Like
3

Tips could be found already on your router:
/etc/updater/conf.d/example.lua

4

Looking at it in /etc/updater/conf.d/example.lua
(The link for documentation from here doesn’t working.)

that normally packages have priority of 60

“In default all repositories has priority 50 and you can specify any value from 0 to 100.”

Thanks for pointing out - missed that option completely, will try it this way.

basically you are doing / Freifunk Franken

Interesting - it’s something like community WAN (private mesh(?)). Will look into that more deeply later. What does it have common with my set up?

you are the first person in the world

Gosh, pity me!

Reading from /etc/updater/conf.d/opkg.lua

"
– Repositories configured in opkg configuration.
– We read only customfeeds.conf as that should be only file where user should add additional repositories to
"
Well as expecting it to be handled by updater (as somehow having this in mind from LuCI seeing there the option considering it automatically as added with priority - as obviously would like to have this otherwise will use what is already in upstream) - meaning the priority could be automatically above the distfeeds. Because beta/never version could be only added via this way and thus I don’t expecting fighting between versions.

custom repos the versions don’t exactly match to what is in TOS

Do believe I’m doing custom repo because PBR doesn’t show for me in LuCI so figure out had to do it this way. Maybe didn’t see the -iptables version as this one should be used with 7.0 RC because “We are still keeping iptables and we are still on 5.15 kernels” noted in RC thread release info.
(1st mistake, should resolve that in before going for custom repo.)

But in Index of /hbt/omnia/packages/luci/ - pbr is here (but no --iptables), as it should be, cos updater having the issue about it.

But HF GL

As you can see, enjoying it so much even can’t remember how ended up in this situation.

5

I was reffering more to FrankenDebian as a name of system glued together from different releases. Not Freifunk at all

6

So after a while ended up with:

Repository("stangri_repo_", "https://repo.openwrt.melmac.net", { priority = 60, ocsp = false })

Install("pbr-iptables", { priority = 60, repository = "stangri_repo_" })

Inspiration from the Tailscale package solution basically (GH here - .lua and readme) from this thread

After reboot the update (pkgupdate or in reForis UI) is done with no errors so maybe it’s OK.

Not sure if should remove entry from customfeeds.conf or if this only add for repo the priority.

To distinguish the customfeeds.conf vs this one in user.lua - added ‘_’ for the name. So hopefully if there’s a catch will se which one is in conflict.

Not sure how secure it is: ocsp = false, no verification from options working for me (don’t know how to properly configure it tbh).

The actual up-to-date documentation I used for verification settings, referenced in example.lua, is here.