freebsd-update fetch hanging in idle state

From: Jonathan Adams <jfadams1963_at_proton.me>
Date: Tue, 19 Dec 2023 23:05:28 UTC
Hi folks,
  I'm updating my FBSD box as per the Security Advisory regarding OpenSSH.

I'm running 14.0-RELEASE-p2, GENERIC kernel in AWS EC2.

`freebsd-update fetch` hangs:

# freebsd-update fetch
src component not installed, skipped
Looking up aws.update.FreeBSD.org mirrors... 1 mirrors found.
Fetching metadata signature for 14.0-RELEASE from dualstack.aws.update.freebsd.org... done.
Fetching metadata index... done.
Inspecting system... done.
Preparing to download files... done.
The following files will be updated as part of updating to
14.0-RELEASE-p4:
/bin/freebsd-version
/boot/kernel/kernel
/boot/kernel/nfscl.ko
/usr/bin/slogin
/usr/bin/ssh
/usr/bin/ssh-keyscan
/usr/include/fs/nfs/nfs_var.h
/usr/lib/debug/boot/kernel/kernel.debug
/usr/lib/debug/boot/kernel/nfscl.ko.debug
/usr/lib/debug/usr/bin/ssh-keyscan.debug
/usr/lib/debug/usr/bin/ssh.debug
/usr/lib/debug/usr/lib/libprivatessh.so.5.debug
/usr/lib/debug/usr/lib32/libprivatessh.so.5.debug
/usr/lib/debug/usr/libexec/ssh-keysign.debug
/usr/lib/debug/usr/sbin/sshd.debug
/usr/lib/libprivatessh.a
/usr/lib/libprivatessh.so.5
/usr/lib32/libprivatessh.a
/usr/lib32/libprivatessh.so.5
/usr/libexec/ssh-keysign
/usr/sbin/sshd
(END)

Running `ps` in another shell shows it inactive and fg:

# ps | grep freebsd | grep -v grep
14473  1  I+   0:00.28 /bin/sh /usr/sbin/freebsd-update fetch

If I kill it (hup or terminate), then run `freebsd-update install`, I get:
"No updates are available to install."

Seems to be stalling on the actual fetch. Watching network connections while it's running shows no activity.

Any ideas? Upgrade from source?


- Jonathan
____________________________________________
"Before Turing, things were done to numbers.
After Turing, numbers began doing things"
- George Dyson