OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: tillsense on November 24, 2016, 08:07:49 pm

Title: 17.1 beta
Post by: tillsense on November 24, 2016, 08:07:49 pm
I think it's time for first 17.1beta img's for new install..

..and a new thread to upgrade on base 16.7.10 to 17.1b.

cheers till
Title: Re: 17.1 beta
Post by: franco on November 25, 2016, 07:30:32 am
Hi Till,

Almost. :)

We will add the following for 17.1-BETA: images, release notes, and do sporadic updates like we did with 17.1-ALPHA. The upgrade from opnsense-devel will also be semi-automated as an option for the console upgrade option 12 in the usual "fire-and-forget" style.

As soon as 17.1-RC is out, we will add upgrade capabilities to the real 16.7.x releases and release multiple RC images along with it if necessary. With RC, the new signing keys for 17.1 will be added as well. We don't want to publish those too early and are still using the 16.7 keys at this point.

There are some more things that need tweaking before 17.1-BETA can go out:

o GUI has a couple of UI glitches with PHP 7.0 in the MVC framework,
o we still have WiFi to figure out, and
o an secure the approach for loading kernel modules at bootup,
o release 16.7.10 with the package manager fix required for a smooth transition

Looks like we'll be there in two weeks, a little behind schedule.


Cheers,
Franco
Title: Re: 17.1 beta
Post by: SOUK on November 26, 2016, 01:37:24 pm

There are some more things that need tweaking before 17.1-BETA can go out:

o GUI has a couple of UI glitches with PHP 7.0 in the MVC framework,
o we still have WiFi to figure out
o an secure the approach for loading kernel modules at bootup,
o release 16.7.10 with the package manager fix required for a smooth transition

Hi Franco, are you going to be adding driver support for the Intel 8000 series cards, like the 8260. I believe some folks have got it working on FreeBSD11.  It would be nice to finally get a decent Wi-Fi card in my machine.

I've moved back to stable from the experimental version at the moment, but once you've updated the Wi-Fi side of things I will jump back on it to test it again.
Title: Re: 17.1 beta
Post by: franco on November 26, 2016, 03:12:38 pm
Hi SOUK,

Can you point me to a thread with patches/code?


Thanks,
Franco
Title: Re: 17.1 beta
Post by: depekavienna on November 27, 2016, 01:50:29 am
Will 17.1 have FreeRadius [Edit:] plugin included?
Title: Re: 17.1 beta
Post by: franco on November 27, 2016, 10:56:32 am
Nobody is working on a FreeRADIUS plugin as far as I know. It's also not on the priority list/roadmap for the core team.
Title: Re: 17.1 beta
Post by: SOUK on November 27, 2016, 02:37:49 pm
Hi SOUK,

Can you point me to a thread with patches/code?


Thanks,
Franco

I've just got the card detecting finally

The files below are already showing in the 17.1 dev install \boot\kernel directory which are for the IntelĀ® Dual Band Wireless-AC 8260 (Intel 8260ngw) and IntelĀ® Dual Band Wireless-AC 8265 (Intel 8265NGW) M.2 Wi-Fi cards. 

if_iwm.ko
iwm8000cfw.ko


I've just added the following to /boot/loader.conf.local

if_iwm_load="YES"
iwm8000Cfw_load="YES"

I then added the following to /etc/rc.conf.local
wlans_iwm0="wlan0"
ifconfig_wlan0="WPA DHCP"

Its showing its mac address under the Wi-Fi device now, so im going to try and set it up and see how that pans out.
Title: Re: 17.1 beta
Post by: franco on November 28, 2016, 08:09:56 am
Ah, we could add a plugin for the boot loader parts. The rc.conf parts should really be fixed in the GUI for the new 11.0-way of doing wireless setup, but this is a really nifty workaround!

I'm expecting a new device today for my 17.1 testing so this will get done this week, next week is 17.1-BETA.
Title: Re: 17.1 beta
Post by: tillsense on December 19, 2016, 08:49:48 pm
hi,
PHP Error Report

OPNsense 17.1.b_43-d93870896 [17.1.b_14-d3ddbf5f4] OpenSSL 1.0.2j  26 Sep 2016 (amd64)

Code: [Select]
[19-Dec-2016 20:02:16 Europe/Berlin] PHP Warning:  require(/usr/local/www/widgets/api/plugins/system.inc): failed to open stream: No such file or directory in /usr/local/www/widgets/api/get.php on line 66
[19-Dec-2016 20:02:16 Europe/Berlin] PHP Fatal error:  require(): Failed opening required '/usr/local/www/widgets/api/plugins/system.inc' (include_path='.:/usr/local/etc/inc:/usr/local/www:/usr/local/opnsense/mvc:/usr/local/share/pear:/usr/local/opnsense/contrib') in /usr/local/www/widgets/api/get.php on line 66

cheers till
Title: Re: 17.1 beta
Post by: franco on December 20, 2016, 05:06:14 pm
Was this during a "make upgrade" with the dashboard running in the background?
Title: Re: 17.1 beta
Post by: tillsense on December 20, 2016, 07:05:17 pm
hi franco,

ups that can be. will observe this.
I just ignored the report in the dash and reboot to test. No new report  :)

cheers till

--------------------------------------------------------------------
OPNsense 17.1.b_53-amd64
FreeBSD 11.0-RELEASE-p5
OpenSSL 1.0.2j 26 Sep 2016
Title: Re: 17.1 beta
Post by: franco on December 21, 2016, 09:44:35 am
This happens all the time: the web server keeps running, the browser polls the dashboard API and during the installation the files are deleted and recreated.

Haven't found a good way to solve this. It would really need a dedicated web server for running the update so that we could "disable" the other HTTP page temporarily. But if something goes wrong, the web server may not come back so we're better off letting it run...
Title: Re: 17.1 beta
Post by: Free_Norway on December 21, 2016, 10:14:40 am
Hi all

I would like to give the 17.1 Beta a try.
Is there anybody that has tried it in Hyper-V?
Are there any known issues?

Thanks
Sebastian
Title: Re: 17.1 beta
Post by: franco on December 21, 2016, 10:42:23 am
Hi Sebastian,

Our user weust successfully runs 17.1.b in Hyper-V. There are no known issues.


Cheers,
Franco
Title: Re: 17.1 beta
Post by: Free_Norway on December 21, 2016, 08:11:54 pm
Little update on the progress:
When starting the virtual machine choosing generation 2(UEFI support) does not work on my system.
By choosing generation 1, the os installes without a flaw and the basic systems works well.
I found to sings that are not working:
- not possible to update if LibreSSL is selected as the firmware flavour-> i suppose this is by design?
- trying to install suricata ids brakes the install.
I have tried different methodes but in the end all end in the same way.
In the last atempt the whole intrution detection page is vanished after a forced restart.
The only way i found to get back to a completely functioning base system is a reinstall.

Still thanks for the fantastic work everybody is putting into Opnsense

Regards
Sebastian

Title: Re: 17.1 beta
Post by: weust on December 21, 2016, 08:22:23 pm
Gen2 is not supported fully by FreeBSD. Not OPNsense's fault.

If you read the release notes for 17.1 beta, you would have read LibreSSL is not possible with the current beta release.

I don't use Suricata myself since my hardware isn't fast enough, so can't comment on that.
But tried it before and was working then.
Title: Re: 17.1 beta
Post by: franco on December 29, 2016, 10:42:58 pm
A Microsoft employee working on the Hyper-V FreeBSD code gave a good overview over at pfSense:

https://forum.pfsense.org/index.php?topic=119553.msg662706#msg662706