Messages

Hi, so this is not new information, but I am a dumbass. I was running Zenarmor, ntopng, crowdsec, etc, and logging to my m.2 SATA and NVME disks that are in a ZFS mirror. Predictably, I wrote those disks to 0% and 1% life left over about 18 months. I have now implemented ramdisk; moved all logs to local RAM or to a new remote ELK stack; and verified writes are now about 14GB/day. I am looking to install (2) new NVME disks in a ZFS mirror and ditch the SATA.

The datasheet on the Netboard A20 I have indicates that it has "2x M.2. socket (1x with SATA / PCIe x4 switchable & 1x PCIe x4)". How do I switch the first M.2 socket to be NVME? I am running the latest BIOS and I don't see an option to switch that socket between SATA/NVME.

Do I need a jumper or something? If so, is it in place already and I just need to move it, or do I need to procure one? If the latter, what jumper do I need to buy?

I'm also interested in any tips to migrate this ZFS mirror to a new one. I have recent config backups.

If this isn't the right place to ask, please point me in the right direction.

Thanks much in advance!

Solder them to the pins of the MB, maybe? Add some heat shrink tubing - done.

My soldering is primitive and I'm afraid that I'd end up de-soldering the pins instead.

I reached out to Deciso and they are Fedexing a replacement cable assembly free of charge, even though my appliance is out of warranty.

Shout out for great customer service! Support OPNsense!

Hi, I have a Deciso DEC-850v1, and I was doing some surgery to add a second SSD so I could implement ZFS, and I borked the A20 board's power connector. The wires pulled out of the connector, and I can't get them to stay back in. Anyone know what kind of 2-pin connector this is, and how to crimp on a new one?

https://imgur.com/a/ANmEwQk

Hi, this is outside the scope of OPNsense, but I've upgraded the memory and added a second disk to my DEC-850 with an eye towards moving to ZFS, and got to thinking that it would be awesome to install Proxmox VE as a host with OPNsense as a guest (I've done this on other machines, and it works pretty great, but those machines all had VGA/KB/mouse). There is a bunch of spare CPU/memory and disk capacity on this box now, and it would be great to put it to use. Proxmox shows support for serial-based installations.

Anyhow, I'm having trouble after I boot the Proxmox iso USB... on the console I see:

Code Select Expand


Welcome to GRUB!

error: no such device: /.disk/info.
error: no such device: /.disk/mini-info.


•     I've verified the iso hash
  
•     The BIOS is UEFI, latest version
  
•     The device is not configured for secure boot
  

My googling is failing me... I don't understand these error messages, or how to resolve them. Grub hangs and I can't proceed. Not sure if there's a BIOS setting that I need to touch. I've posted on Reddit and in the Proxmox forums but no luck yet.

Any help is greatly appreciated.

Thanks for the interest.

The BIOS is upgraded to the latest now. One thing I have noticed is that I don't see it documented anywhere that the serial console on the DEC wants the flow control set to XON/XOFF. That took me a minute to remember from when I had to touch the BIOS last.

The ZFS install didn't happen yet. Seems I ordered the wrong type SSD. I need an NVME for slot 2 and I had purchased a SATA to match the existing in slot 1. Hopefully I'll get ZFS configured tomorrow.

Thanks again for your help Franco! Any everything you do, too!

Good thing I asked here first :) I had the USB serial console working at one point, but I'll test it again before I start tonight to make sure I can get into the BIOS that way.

Thanks Franco!

Hi, I purchased a DEC-850v1 before ZFS installation was supported, I have upgraded to 24.7.9 and now I'm ready to add a second SSD and move from UFS to ZFS.

I see in the documentation that I can invoke the opnsense-installer from a root shell via SSH. I checked, and it presents me with the option to do a ZFS install. Is this possible (or wise) to try do this via SSH and import the existing configuration?

I have daily FW backups, so if the installation fails I can definitely recover.

Thanks in advance.

zabbix 7 agent and proxy are there now.

Hi, sorry to jump on your post, but how did you create the zabbix_proxy database? I can't get the proxy to connect to the server, and in the logs I see:

Code Select Expand

92056:20240423:144220.197 using configuration file: /usr/local/etc/zabbix64/zabbix_proxy.conf
92056:20240423:144220.198 cannot open database file "zabbix_proxy": [2] No such file or directory
92056:20240423:144220.198 creating database ...
92056:20240423:144220.198 [Z3002] cannot create database 'zabbix_proxy': [0] unable to open database file
92056:20240423:144220.198 cannot initialize database: cannot open database

Hi, I'm trying to set up a Zabbix proxy on a remote OPNsense machine. The Zabbix server shows that the proxy has never connected. Looking in the proxy log files on the OPNsense box, I see

Code Select Expand

92056:20240423:144220.197 using configuration file: /usr/local/etc/zabbix64/zabbix_proxy.conf
92056:20240423:144220.198 cannot open database file "zabbix_proxy": [2] No such file or directory
92056:20240423:144220.198 creating database ...
92056:20240423:144220.198 [Z3002] cannot create database 'zabbix_proxy': [0] unable to open database file
92056:20240423:144220.198 cannot initialize database: cannot open database

When configuring the proxy, I wasn't prompted to configure a database, and I assumed the proxy configuration was doing that behind the scenes. What am I missing here?

Yep. Thanks Raketenmeyer and Franco. That allowed me to move pass the 'stuck boot' non-issue.  :P

When I got the FW fully booted, I still couldn't reach the GUI. I statically configured a laptop with an IP address, and was able to get into the GUI and saw that a lot of services failed to start, DHCP server being among them. I took me another reboot to get everything back up and running.

Not sure why so many services failed to start after the upgrade yesterday, but that was why I had no connectivity when I got home last night.

I attempted to remotely upgrade a DEC-850 that I use for a home firewall. The device didn't come back up after a reboot. When I arrived back home, there was predictably no internet service and the FW couldn't be reached over the network. Serial console was unresponsive, and I had to resort to ungracefully power-cycling the box.

The device was still failing to boot. I eventually resorted to trying to reinstall from USB. This is what I see in the console:

Code Select Expand

uart0: <8250 or 16450 or compatible> port 0x3f8-0x3ff irq 3 flags 0x10 on acpi0
hwpstate0: <Cool`n'Quiet 2.0> on cpu0
Timecounter "TSC" frequency 1497188188 Hz quality 1000
Timecounters tick every 1.000 msec
Trying to mount root from ufs:/dev/ufs/OPNsense_Install [ro,noatime]...
ugen0.1: <0x1022 XHCI root HUB> at usbus0
uhub0 on usbus0
uhub0: <0x1022 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0
Root mount waiting for: usbus0 CAM
uhub0: 8 ports with 8 removable, self powered
Root mount waiting for: usbus0 CAM
ugen0.2: <SanDisk Cruzer> at usbus0
umass0 on uhub0
umass0: <SanDisk Cruzer, class 0/0, rev 2.00/2.00, addr 1> on usbus0
umass0:  SCSI over Bulk-Only; quirks = 0x4100
umass0:1:0: Attached to scbus1
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
ada0 at ahcich0 bus 0 scbus0 target 0 lun 0
ada0: <TS256GMTS952T2 02J0T4GB> ACS-2 ATA SATA 3.x device
ada0: Serial Number G568720070
ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 1024bytes)
ada0: Command Queueing enabled
ada0: 244198MB (500118192 512 byte sectors)
da0 at umass-sim0 bus 0 scbus1 target 0 lun 0
da0: <SanDisk Cruzer 8.02> Removable Direct Access SCSI device
da0: Serial Number 432440190D2010EE
da0: 40.000MB/s transfers
uart0: <8250 or 16450 or compatible> port 0x3f8-0x3ff irq 3 flags 0x10 on acpi0
hwpstate0: <Cool`n'Quiet 2.0> on cpu0
Timecounter "TSC" frequency 1497188188 Hz quality 1000
Timecounters tick every 1.000 msec
Trying to mount root from ufs:/dev/ufs/OPNsense_Install [ro,noatime]...
ugen0.1: <0x1022 XHCI root HUB> at usbus0
uhub0 on usbus0
uhub0: <0x1022 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0
Root mount waiting for: usbus0 CAM
uhub0: 8 ports with 8 removable, self powered
Root mount waiting for: usbus0 CAM
ugen0.2: <SanDisk Cruzer> at usbus0
umass0 on uhub0
umass0: <SanDisk Cruzer, class 0/0, rev 2.00/2.00, addr 1> on usbus0
umass0:  SCSI over Bulk-Only; quirks = 0x4100
umass0:1:0: Attached to scbus1
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
Root mount waiting for: CAM
ada0 at ahcich0 bus 0 scbus0 target 0 lun 0
ada0: <TS256GMTS952T2 02J0T4GB> ACS-2 ATA SATA 3.x device
ada0: Serial Number G568720070
ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 1024bytes)
ada0: Command Queueing enabled
ada0: 244198MB (500118192 512 byte sectors)
da0 at umass-sim0 bus 0 scbus1 target 0 lun 0
da0: <SanDisk Cruzer 8.02> Removable Direct Access SCSI device
da0: Serial Number 432440190D2010EE
da0: 40.000MB/s transfers
da0: 15283MB (31301631 512 byte sectors)
da0: quirks=0x2<NO_6_BYTE>
mountroot: waiting for device /dev/ufs/OPNsense_Install...
ZFS filesystem version: 5
ZFS storage pool version: features support (5000)
igb0: link state changed to UP
debugnet_any_ifnet_update: Bad dn_init result from igb0 (ifp 0xfffff80001ad1800), ignoring.
igb3: link state changed to UP
debugnet_any_ifnet_update: Bad dn_init result from igb3 (ifp 0xfffff80001b72000), ignoring.
intsmb0: <AMD FCH SMBus Controller> at device 20.0 on pci0
smbus0: <System Management Bus> on intsmb0
lo0: link state changed to UP
igb3: link state changed to UP
igb0: link state changed to UP
pflog0: permanently promiscuous mode enabled
da0: 15283MB (31301631 512 byte sectors)
da0: quirks=0x2<NO_6_BYTE>
mountroot: waiting for device /dev/ufs/OPNsense_Install...
ZFS filesystem version: 5
ZFS storage pool version: features support (5000)
igb0: link state changed to UP
debugnet_any_ifnet_update: Bad dn_init result from igb0 (ifp 0xfffff80001ad1800), ignoring.
igb3: link state changed to UP
debugnet_any_ifnet_update: Bad dn_init result from igb3 (ifp 0xfffff80001b72000), ignoring.
intsmb0: <AMD FCH SMBus Controller> at device 20.0 on pci0
smbus0: <System Management Bus> on intsmb0
lo0: link state changed to UP
igb3: link state changed to UP
igb0: link state changed to UP
pflog0: permanently promiscuous mode enabled

Boot hangs at pflog0: permanently promiscuous mode enabled. I have verified the SHA256 hash of the file I downloaded, and tried a different USB memory stick with the same results. Any ideas on what's going on, or what to try next?

Strange, I do see a difference between my results and the people affected. Mine does show frequencies above 2700 which you can see above, as the CPU can turbo to 3100. Im wondering if a little more checking should be performed personally.

So now I'm wondering, should I not be enabling powerd? Should I be using something else?

I also have the DEC-850. I don't think the issue is with how powerd is reporting, as sysctl verifies the CPU frequency is topped at 1500MHz. I am seeing the same behavior with powerd on or off. It looks to me like the C states are not properly defined. I am still searching for the documentation indicating what the supported C states for this CPU are, so that I can try to manually add them via sysctl.

Code Select Expand

root@fw:/home/zzz# sysctl -a | grep cpu.0
dev.cpu.0.temperature: 46.1C
dev.cpu.0.cx_method: C1/hlt C2/io
dev.cpu.0.cx_usage_counters: 0 0
dev.cpu.0.cx_usage: 0.00% 0.00% last 1000000us
dev.cpu.0.cx_lowest: C8
dev.cpu.0.cx_supported: C1/1/0 C2/2/100
dev.cpu.0.freq_levels: 1500/1425 1400/1260 1200/1050
dev.cpu.0.freq: 1500
dev.cpu.0.%parent: acpi0
dev.cpu.0.%pnpinfo: _HID=none _UID=0 _CID=none
dev.cpu.0.%location: handle=\_PR_.C000
dev.cpu.0.%driver: cpu
dev.cpu.0.%desc: ACPI CPU
root@fw:/home/zz#

Hi, I have a Deciso DEC-850 with (4) Intel I210 interfaces, running 21.7.7. I am seeking to optimize them for performance.  Would the following be the correct tunables to apply? Thanks in advance!

Code Select Expand


dev.igb.0.rss_enabled="1"
dev.igb.0.iflib.override_qs_enable="1"
dev.igb.0.iflib.override_nrxqs="4"
dev.igb.0.iflib.override_ntxqs="4"
dev.igb.0.iflib.override_ntxds="4096"
dev.igb.0.iflib.override_nrxds="4096"

dev.igb.1.rss_enabled="1"
dev.igb.1.iflib.override_qs_enable="1"
dev.igb.1.iflib.override_nrxqs="4"
dev.igb.1.iflib.override_ntxqs="4"
dev.igb.1.iflib.override_ntxds="4096"
dev.igb.1.iflib.override_nrxds="4096"

dev.igb.2.rss_enabled="1"
dev.igb.2.iflib.override_qs_enable="1"
dev.igb.2.iflib.override_nrxqs="4"
dev.igb.2.iflib.override_ntxqs="4"
dev.igb.1.iflib.override_ntxds="4096"
dev.igb.1.iflib.override_nrxds="4096"

dev.igb.3.rss_enabled="1"
dev.igb.3.iflib.override_qs_enable="1"
dev.igb.3.iflib.override_nrxqs="4"
dev.igb.3.iflib.override_ntxqs="4"
dev.igb.3.iflib.override_ntxds="4096"
dev.igb.3.iflib.override_nrxds="4096"