12781
17.1 Legacy Series / Re: Helping with ARM support + recommended ARM hardware
« on: November 27, 2016, 10:55:35 am »
Hi depekavienna,
ARM is pretty fragmented. We've put out a build for "armv6" Architecture based on a 16.7.x release based on FreeBSD 10.3.
For all other architectures or things that require FreeBSD 11.x or higher the ecosystem has to be built from scratch.
If Banana Pi M1 is armv6, then you can use the same instructions as RPI1-B, but need to switch the kernel back before final reboot:
# mv /boot/kernel /boot/kernel.opnsense
# mv /boot/kernel.old /boot/kernel
As far as changes go, I went through all the commits for the upcoming 17.1:
1. A significant patch that we have is for symmetric traffic shaping, something that doesn't work on FreeBSD in conjunction with pf+ipfw at the moment. The patch actually dates back to m0n0wall. Not having this patch in the kernel may cause traffic shaping to not fully adhere to its setup, but the scope is really small and causes no other service interruption.
https://github.com/opnsense/src/commit/4036f873755a3ceeb73c9292065c3530ebfd08e0
2. We have several imported features from HardenedBSD: ASLR, PIE and SEGVGUARD. All of those are optional.
https://github.com/opnsense/src/commit/2d787654c799ace1e033ee69a9fe7e7156eccff4
https://github.com/opnsense/src/commit/885c2e557f71a67020c72c5997fa3c9280e1e9a4
https://github.com/opnsense/src/commit/132c9174a61dbfac2cdc8081fed65382f42373c8
3. We build a slightly different kernel config than GENERIC and src.conf for base.
https://github.com/opnsense/tools/blob/master/config/17.1/SMP
https://github.com/opnsense/tools/blob/master/config/17.1/src.conf
That's it for 17.1. For 16.7 the list is still a little longer due to inherited patches, but compatible too as far as I have seen.
EDIT: BANANAPI is for 11.0 only, so no prebuilt packages yet.
ftp://ftp.freebsd.org/pub/FreeBSD/releases/arm/armv6/ISO-IMAGES/11.0/
Cheers,
Franco
ARM is pretty fragmented. We've put out a build for "armv6" Architecture based on a 16.7.x release based on FreeBSD 10.3.
For all other architectures or things that require FreeBSD 11.x or higher the ecosystem has to be built from scratch.
If Banana Pi M1 is armv6, then you can use the same instructions as RPI1-B, but need to switch the kernel back before final reboot:
# mv /boot/kernel /boot/kernel.opnsense
# mv /boot/kernel.old /boot/kernel
As far as changes go, I went through all the commits for the upcoming 17.1:
1. A significant patch that we have is for symmetric traffic shaping, something that doesn't work on FreeBSD in conjunction with pf+ipfw at the moment. The patch actually dates back to m0n0wall. Not having this patch in the kernel may cause traffic shaping to not fully adhere to its setup, but the scope is really small and causes no other service interruption.
https://github.com/opnsense/src/commit/4036f873755a3ceeb73c9292065c3530ebfd08e0
2. We have several imported features from HardenedBSD: ASLR, PIE and SEGVGUARD. All of those are optional.
https://github.com/opnsense/src/commit/2d787654c799ace1e033ee69a9fe7e7156eccff4
https://github.com/opnsense/src/commit/885c2e557f71a67020c72c5997fa3c9280e1e9a4
https://github.com/opnsense/src/commit/132c9174a61dbfac2cdc8081fed65382f42373c8
3. We build a slightly different kernel config than GENERIC and src.conf for base.
https://github.com/opnsense/tools/blob/master/config/17.1/SMP
https://github.com/opnsense/tools/blob/master/config/17.1/src.conf
That's it for 17.1. For 16.7 the list is still a little longer due to inherited patches, but compatible too as far as I have seen.
EDIT: BANANAPI is for 11.0 only, so no prebuilt packages yet.
ftp://ftp.freebsd.org/pub/FreeBSD/releases/arm/armv6/ISO-IMAGES/11.0/
Cheers,
Franco