Updates

How gate42 gets security fixes and new releases, and how to install them.

Where updates come from

gate42 installs its updates from the official OPNsense package mirror. The packages are signed by Deciso, the company behind OPNsense, and gate42 checks the signature before it installs anything. So a security fix that OPNsense publishes is available to every gate42 at the same time, free.

The version a gate42 reports is upstream's, for example gate42 26.7.8_2, so updates and plugins work exactly as in OPNsense.

Install updates

Before an update, take a snapshot of the VM, or create a boot environment (System › Snapshots): if the update goes wrong, you can start the previous system again.

• In the web GUI: open https://<address>:8443/ui/core/firmware, click Check for updates, then Update. Keep the page open: the firewall may reboot.
• On the console: log in as root and choose 12) Update from console.

Plan updates in a maintenance window: a kernel update reboots the firewall.

New gate42 images

For every OPNsense release, our pipeline builds a new gate42 image, tests it and publishes it on the download page and in all releases. Use the newest image for new firewalls. A running gate42 does not need a new image: its updates bring it to the same version.

Managed updates

Padmini can run your updates for you: tested first in our lab, a snapshot first, in your maintenance window. That is part of our support and AMC.