17.1 beta

[tillsense]

I think it's time for first 17.1beta img's for new install..

..and a new thread to upgrade on base 16.7.10 to 17.1b.

cheers till

[franco]

Hi Till,

Almost.

We will add the following for 17.1-BETA: images, release notes, and do sporadic updates like we did with 17.1-ALPHA. The upgrade from opnsense-devel will also be semi-automated as an option for the console upgrade option 12 in the usual "fire-and-forget" style.

As soon as 17.1-RC is out, we will add upgrade capabilities to the real 16.7.x releases and release multiple RC images along with it if necessary. With RC, the new signing keys for 17.1 will be added as well. We don't want to publish those too early and are still using the 16.7 keys at this point.

There are some more things that need tweaking before 17.1-BETA can go out:

o GUI has a couple of UI glitches with PHP 7.0 in the MVC framework,
o we still have WiFi to figure out, and
o an secure the approach for loading kernel modules at bootup,
o release 16.7.10 with the package manager fix required for a smooth transition

Looks like we'll be there in two weeks, a little behind schedule.


Cheers,
Franco

[SOUK]

There are some more things that need tweaking before 17.1-BETA can go out:

o GUI has a couple of UI glitches with PHP 7.0 in the MVC framework,
o we still have WiFi to figure out
o an secure the approach for loading kernel modules at bootup,
o release 16.7.10 with the package manager fix required for a smooth transition

Hi Franco, are you going to be adding driver support for the Intel 8000 series cards, like the 8260. I believe some folks have got it working on FreeBSD11.  It would be nice to finally get a decent Wi-Fi card in my machine.

I've moved back to stable from the experimental version at the moment, but once you've updated the Wi-Fi side of things I will jump back on it to test it again.

[franco]

Hi SOUK,

Can you point me to a thread with patches/code?


Thanks,
Franco

[depekavienna]

Will 17.1 have FreeRadius [Edit:] plugin included?

[franco]

Nobody is working on a FreeRADIUS plugin as far as I know. It's also not on the priority list/roadmap for the core team.

[SOUK]

Hi SOUK,

Can you point me to a thread with patches/code?


Thanks,
Franco

I've just got the card detecting finally

The files below are already showing in the 17.1 dev install \boot\kernel directory which are for the Intel® Dual Band Wireless-AC 8260 (Intel 8260ngw) and Intel® Dual Band Wireless-AC 8265 (Intel 8265NGW) M.2 Wi-Fi cards. 

if_iwm.ko
iwm8000cfw.ko

I've just added the following to /boot/loader.conf.local

if_iwm_load="YES"
iwm8000Cfw_load="YES"

I then added the following to /etc/rc.conf.local
wlans_iwm0="wlan0"
ifconfig_wlan0="WPA DHCP"

Its showing its mac address under the Wi-Fi device now, so im going to try and set it up and see how that pans out.

[franco]

Ah, we could add a plugin for the boot loader parts. The rc.conf parts should really be fixed in the GUI for the new 11.0-way of doing wireless setup, but this is a really nifty workaround!

I'm expecting a new device today for my 17.1 testing so this will get done this week, next week is 17.1-BETA.

[tillsense]

hi,
PHP Error Report

OPNsense 17.1.b_43-d93870896 [17.1.b_14-d3ddbf5f4] OpenSSL 1.0.2j  26 Sep 2016 (amd64)

Code: [Select]

[19-Dec-2016 20:02:16 Europe/Berlin] PHP Warning:  require(/usr/local/www/widgets/api/plugins/system.inc): failed to open stream: No such file or directory in /usr/local/www/widgets/api/get.php on line 66
[19-Dec-2016 20:02:16 Europe/Berlin] PHP Fatal error:  require(): Failed opening required '/usr/local/www/widgets/api/plugins/system.inc' (include_path='.:/usr/local/etc/inc:/usr/local/www:/usr/local/opnsense/mvc:/usr/local/share/pear:/usr/local/opnsense/contrib') in /usr/local/www/widgets/api/get.php on line 66

cheers till

[franco]

Was this during a "make upgrade" with the dashboard running in the background?

[tillsense]

hi franco,

ups that can be. will observe this.
I just ignored the report in the dash and reboot to test. No new report 

cheers till

--------------------------------------------------------------------
OPNsense 17.1.b_53-amd64
FreeBSD 11.0-RELEASE-p5
OpenSSL 1.0.2j 26 Sep 2016

[franco]

This happens all the time: the web server keeps running, the browser polls the dashboard API and during the installation the files are deleted and recreated.

Haven't found a good way to solve this. It would really need a dedicated web server for running the update so that we could "disable" the other HTTP page temporarily. But if something goes wrong, the web server may not come back so we're better off letting it run...

[Free_Norway]

Hi all

I would like to give the 17.1 Beta a try.
Is there anybody that has tried it in Hyper-V?
Are there any known issues?

Thanks
Sebastian

[franco]

Hi Sebastian,

Our user weust successfully runs 17.1.b in Hyper-V. There are no known issues.


Cheers,
Franco

[Free_Norway]

Little update on the progress:
When starting the virtual machine choosing generation 2(UEFI support) does not work on my system.
By choosing generation 1, the os installes without a flaw and the basic systems works well.
I found to sings that are not working:
- not possible to update if LibreSSL is selected as the firmware flavour-> i suppose this is by design?
- trying to install suricata ids brakes the install.
I have tried different methodes but in the end all end in the same way.
In the last atempt the whole intrution detection page is vanished after a forced restart.
The only way i found to get back to a completely functioning base system is a reinstall.

Still thanks for the fantastic work everybody is putting into Opnsense

Regards
Sebastian