freebsd stable - Dec 2016 - freebsd-update <bleep>

Basic symptom:

    #  /usr/sbin/freebsd-update fetch
    Looking up update.FreeBSD.org mirrors... none found.
    Fetching metadata signature for 10.3-STABLE from update.FreeBSD.org...
failed.
    No mirrors remaining, giving up.

Trace:

    # sh -x /usr/sbin/freebsd-update fetch
    ...
    + echo -n 'Looking up update.FreeBSD.org mirrors... '
    Looking up update.FreeBSD.org mirrors... +
MLIST=_http._tcp.update.FreeBSD.org
    + host -t srv _http._tcp.update.FreeBSD.org
    + sed -nE 's/_http._tcp.update.FreeBSD.org (has SRV record|server
selection) //p'
    + cut -f 1,2,4 -d ' '
    + sed -e 's/\.$//'
    + sort
    + wc -l
    + [ 0 -eq 0 ]
    + echo 'none found.'
    none found.

Diagnosis:

The sed regexp is doing case-sensitive matching against DNS names
returned by "host" (don't even get me started about using
"host").

After flushing DNS and retrying, one gets:

    #  /usr/sbin/freebsd-update fetch
    Looking up update.FreeBSD.org mirrors... 4 mirrors found.
    Fetching metadata signature for 10.3-STABLE from update4.freebsd.org...
failed.
    Fetching metadata signature for 10.3-STABLE from update5.freebsd.org...
failed.
    Fetching metadata signature for 10.3-STABLE from update6.freebsd.org...
failed.
    Fetching metadata signature for 10.3-STABLE from update3.freebsd.org...
failed.
    No mirrors remaining, giving up.

Which the Net of a Million Lies translates as "Oops, bad update" and
suggests rollback, which doesn't work so well when this is the first
update after switching to binary updates.

boys and girls, please do not make it so hard to stay on freebsd.

oh, and yesterday, i had the 10.3-p12 to -13 patch neglect to upgrad
libpixc.so from 4 to 5.  little things such as ifconfig broke.

randy

On Dec 8, 2016, at 4:13 PM, Randy Bush <randy at psg.com> wrote:
> Basic symptom:
> 
>    #  /usr/sbin/freebsd-update fetch
>    Looking up update.FreeBSD.org mirrors... none found.
>    Fetching metadata signature for 10.3-STABLE from update.FreeBSD.org...
failed.
>    No mirrors remaining, giving up.

I had this problem a while ago.  In my case, it turned out that my upstream DNS
was filtering out SRV requests, which breaks freebsd-update mirror handling.  My
upstream DNS was via an OpenWRT box.  According to their documentation
(https://wiki.openwrt.org/doc/howto/dhcp.dnsmasq) in the "SIP-Phones and
dnsmasq" section they say, "By default, the option filterwin2k in
dnsmasq is activated, which seems to cause to block queries for SRV
records."  True enough, disabling "filterwin2k" in
/etc/config/dhcp "fixed" my problem.

I don't know if this is related to your problem, but in my case I wasn't
getting *any* SRV records returned for _http._tcp.update.FreeBSD.org... :-(

I believe freebsd-update falls back to a standard server if no mirrors can be
enumerated, but this server tends to get overloaded when security advisories
come out (at least that was my experience when I had the SRV records problem)
and so freebsd-update can fail.

Cheers,

Paul.

the problems were
  o op error trying to binary on stable not release
  o freebsf-update fetch should not be dns case sensitive no matter what
  o the libipx.so.4/5 lack of update in 10-release.p13

i am sure there are other problems including yours.  it's getting
sloppy.

randy