21.7 freeze on netmap on APU4C

[Darkopnsense]

Hello,

On my APU4C in console mode OPNSENSE is stuck at

Final extract at blockage
>>> Invoking start script 'c-icap'
c_icap already running? (pid = 70083).
>>> Error in start script 'c-icap'
>>> Invoking start script 'frr'
Checking zebra.conf
176.562159 [853] iflib_netmap_config txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
177.417110 [853] iflib_netmap_config txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
177.817266 [853] iflib_netmap_config txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048

An idea to be able to unlock, without reformatting?
Start with a usb key and go to modify the zebra.conf file BUT I currently have no knowledge of its structure and composition.

Thanks for some help in unlocking this situation.

Cordially,



ORIGINAL DU PROCESSUS
/boot/kernel/kernel text=0x184dd54 data=0x1e3968+0x76ed60 syms=[0x8+0x18fde0+0x8+0x1ae221]
/boot/entropy size=0x1000
/boot/kernel/carp.ko size 0x10250 at 0x2892000
/boot/kernel/if_bridge.ko size 0xf998 at 0x28a3000
loading required module 'bridgestp'
/boot/kernel/bridgestp.ko size 0x72a8 at 0x28b3000
/boot/kernel/if_enc.ko size 0x3e78 at 0x28bb000
/boot/kernel/if_gre.ko size 0xb1c0 at 0x28bf000
/boot/kernel/if_lagg.ko size 0x16008 at 0x28cb000
/boot/kernel/if_tap.ko size 0x8b60 at 0x28e2000
/boot/kernel/pf.ko size 0x584a0 at 0x28eb000
/boot/kernel/pflog.ko size 0x2af8 at 0x2944000
/boot/kernel/pfsync.ko size 0xec30 at 0x2947000
Booting...
KDB: debugger backends: ddb
KDB: current backend: ddb
---<<BOOT>>---
Copyright (c) 2013-2019 The HardenedBSD Project.
Copyright (c) 1992-2019 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD is a registered trademark of The FreeBSD Foundation.
FreeBSD 12.1-RELEASE-p19-HBSD #0  c89981353e9(stable/21.7)-dirty: Wed Jul 21 14:36:43 CEST 2021
    root@sensey:/usr/obj/usr/src/amd64.amd64/sys/SMP amd64
FreeBSD clang version 8.0.1 (tags/RELEASE_801/final 366581) (based on LLVM 8.0.1)
VT(vga): resolution 640x480
HardenedBSD: initialize and check features (__HardenedBSD_version 1200059 __FreeBSD_version 1201000).
CPU: AMD GX-412TC SOC                                (998.15-MHz K8-class CPU)
  Origin="AuthenticAMD"  Id=0x730f01  Family=0x16  Model=0x30  Stepping=1
  Features=0x178bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2,HTT>
  Features2=0x3ed8220b<SSE3,PCLMULQDQ,MON,SSSE3,CX16,SSE4.1,SSE4.2,MOVBE,POPCNT,AESNI,XSAVE,OSXSAVE,AVX,F16C>
  AMD Features=0x2e500800<SYSCALL,NX,MMX+,FFXSR,Page1GB,RDTSCP,LM>
  AMD Features2=0x1d4037ff<LAHF,CMP,SVM,ExtAPIC,CR8,ABM,SSE4A,MAS,Prefetch,OSVW,IBS,SKINIT,WDT,Topology,PNXC,DBE,PTSC,PL2I>
  Structured Extended Features=0x8<BMI1>
  XSAVE Features=0x1<XSAVEOPT>
  SVM: NP,NRIP,AFlush,DAssist,NAsids=8
  TSC: P-state invariant, performance statistics
real memory  = 4294967296 (4096 MB)
avail memory = 4085932032 (3896 MB)
Event timer "LAPIC" quality 600
ACPI APIC Table: <COREv4 COREBOOT>
FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
FreeBSD/SMP: 1 package(s) x 4 core(s)
random: unblocking device.
ioapic0 <Version 2.1> irqs 0-23 on motherboard
ioapic1 <Version 2.1> irqs 24-55 on motherboard
Launching APs: 1 2 3
Timecounter "TSC" frequency 998148450 Hz quality 1000
wlan: mac acl policy registered
random: entropy device external interface
kbd0 at kbdmux0
module_register_init: MOD_LOAD (vesa, 0xffffffff812907f0, 0) error 19
000.000054 [4344] netmap_init               netmap: loaded module
[ath_hal] loaded
nexus0
vtvga0: <VT VGA driver> on motherboard
cryptosoft0: <software crypto> on motherboard
acpi0: <COREv4 COREBOOT> on motherboard
acpi0: Power Button (fixed)
cpu0: <ACPI CPU> on acpi0
atrtc0: <AT realtime clock> port 0x70-0x71 irq 8 on acpi0
atrtc0: registered as a time-of-day clock, resolution 1.000000s
Event timer "RTC" frequency 32768 Hz quality 0
attimer0: <AT timer> port 0x40-0x43 irq 0 on acpi0
Timecounter "i8254" frequency 1193182 Hz quality 0
Event timer "i8254" frequency 1193182 Hz quality 100
hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
Timecounter "HPET" frequency 14318180 Hz quality 950
Timecounter "ACPI-safe" frequency 3579545 Hz quality 850
acpi_timer0: <32-bit timer at 3.579545MHz> port 0x818-0x81b on acpi0
pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
pcib0: could not evaluate _ADR - AE_NOT_FOUND
pci0: <ACPI PCI bus> on pcib0
pci0: <base peripheral, IOMMU> at device 0.2 (no driver attached)
pcib1: <ACPI PCI-PCI bridge> irq 24 at device 2.1 on pci0
pcib1: failed to allocate initial I/O port window: 0x1000-0x1fff
pci1: <ACPI PCI bus> on pcib1
igb0: <Intel(R) I211 (Copper)> mem 0xd0000000-0xd001ffff,0xd0020000-0xd0023fff irq 24 at device 0.0 on pci1
igb0: Using 1024 TX descriptors and 1024 RX descriptors
igb0: Using 2 RX queues 2 TX queues
igb0: Using MSI-X interrupts with 3 vectors
igb0: Ethernet address: 00:0d:b9:53:f4:98
igb0: netmap queues/slots: TX 2/1024, RX 2/1024
pcib2: <ACPI PCI-PCI bridge> irq 25 at device 2.2 on pci0
pci2: <ACPI PCI bus> on pcib2
igb1: <Intel(R) I211 (Copper)> port 0x2000-0x201f mem 0xd0100000-0xd011ffff,0xd0120000-0xd0123fff irq 28 at device 0.0 on pci2
igb1: Using 1024 TX descriptors and 1024 RX descriptors
igb1: Using 2 RX queues 2 TX queues
igb1: Using MSI-X interrupts with 3 vectors
igb1: Ethernet address: 00:0d:b9:53:f4:99
igb1: netmap queues/slots: TX 2/1024, RX 2/1024
pcib3: <ACPI PCI-PCI bridge> irq 26 at device 2.3 on pci0
pci3: <ACPI PCI bus> on pcib3
igb2: <Intel(R) I211 (Copper)> port 0x3000-0x301f mem 0xd0200000-0xd021ffff,0xd0220000-0xd0223fff irq 32 at device 0.0 on pci3
igb2: Using 1024 TX descriptors and 1024 RX descriptors
igb2: Using 2 RX queues 2 TX queues
igb2: Using MSI-X interrupts with 3 vectors
igb2: Ethernet address: 00:0d:b9:53:f4:9a
igb2: netmap queues/slots: TX 2/1024, RX 2/1024
pcib4: <ACPI PCI-PCI bridge> irq 27 at device 2.4 on pci0
pci4: <ACPI PCI bus> on pcib4
igb3: <Intel(R) I211 (Copper)> port 0x4000-0x401f mem 0xd0300000-0xd031ffff,0xd0320000-0xd0323fff irq 36 at device 0.0 on pci4
igb3: Using 1024 TX descriptors and 1024 RX descriptors
igb3: Using 2 RX queues 2 TX queues
igb3: Using MSI-X interrupts with 3 vectors
igb3: Ethernet address: 00:0d:b9:53:f4:9b
igb3: netmap queues/slots: TX 2/1024, RX 2/1024
pci0: <encrypt/decrypt> at device 8.0 (no driver attached)
xhci0: <AMD FCH USB 3.0 controller> mem 0xd0622000-0xd0623fff irq 18 at device 16.0 on pci0
xhci0: 32 bytes context size, 64-bit DMA
xhci0: Unable to map MSI-X table
usbus0 on xhci0
usbus0: 5.0Gbps Super Speed USB v3.0
ahci0: <AMD Hudson-2 AHCI SATA controller> port 0x5010-0x5017,0x5020-0x5023,0x5018-0x501f,0x5024-0x5027,0x5000-0x500f mem 0xd0625000-0xd06253ff at devic
ahci0: AHCI v1.30 with 2 6Gbps ports, Port Multiplier supported with FBS
ahcich0: <AHCI channel> at channel 0 on ahci0
ahcich1: <AHCI channel> at channel 1 on ahci0
ehci0: <AMD FCH USB 2.0 controller> mem 0xd0626000-0xd06260ff irq 18 at device 19.0 on pci0
usbus1: EHCI version 1.0
usbus1 on ehci0
usbus1: 480Mbps High Speed USB v2.0
isab0: <PCI-ISA bridge> at device 20.3 on pci0
isa0: <ISA bus> on isab0
sdhci_pci0: <Generic SD HCI> mem 0xd0627000-0xd06270ff at device 20.7 on pci0
sdhci_pci0: 1 slot(s) allocated
acpi_tz0: <Thermal Zone> on acpi0
uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
uart0: console (115200,n,8,1)
uart1: <16550 or compatible> port 0x2f8-0x2ff irq 3 on acpi0
orm0: <ISA Option ROM> at iomem 0xee800-0xeffff pnpid ORM0000 on isa0
hwpstate0: <Cool`n'Quiet 2.0> on cpu0
Timecounters tick every 1.000 msec
ugen1.1: <AMD EHCI root HUB> at usbus1
ugen0.1: <0x1022 XHCI root HUB> at usbus0
uhub0: <AMD EHCI root HUB, class 9/0, rev 2.00/1.00, addr 1> on usbus1
uhub1: <0x1022 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0
ada0 at ahcich0 bus 0 scbus0 target 0 lun 0
ada0: <KINGSTON SUV500MS120G 003056RI> ACS-4 ATA SATA 3.x device
ada0: Serial Number 50026B7782F951FC
ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 512bytes)
ada0: Command Queueing enabled
ada0: 114473MB (234441648 512 byte sectors)
Trying to mount root from ufs:/dev/ufs/OPNsense [rw]...
WARNING: /mnt was not properly dismounted
Mounting filesystems...
tunefs: soft updates remains unchanged as enabled
tunefs: file system reloaded
uhub1: 4 ports with 4 removable, self powered
tunefs: issue TRIM to the disk remains unchanged as enabled
tunefs: file system reloaded
** /dev/ufs/OPNsense
** Last Mounted on /mnt
** Root file system
** Phase 1 - Check Blocks and Sizes
uhub0: 2 ports with 2 removable, self powered
INCORRECT BLOCK COUNT I=5538260 (192 should be 176)
CORRECT? yes

ugen1.2: <vendor 0x0438 product 0x7900> at usbus1
uhub2 on uhub0
uhub2: <vendor 0x0438 product 0x7900, class 9/0, rev 2.00/0.18, addr 2> on usbus1
** Phase 2 - Check Pathnames
uhub2: 4 ports with 4 removable, self powered
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
UNREF FILE  I=5618857  OWNER=ntopng MODE=100600
SIZE=0 MTIME=Jul 29 09:57 2021
RECONNECT? yes

UNREF FILE  I=5618992  OWNER=ntopng MODE=100600
SIZE=0 MTIME=Jul 29 09:57 2021
RECONNECT? yes

UNREF FILE  I=5619052  OWNER=ntopng MODE=100600
SIZE=0 MTIME=Jul 29 09:57 2021
RECONNECT? yes

UNREF FILE  I=6179734  OWNER=ntopng MODE=100600
SIZE=0 MTIME=Jul 29 09:57 2021
RECONNECT? yes

** Phase 5 - Check Cyl groups
FREE BLK COUNT(S) WRONG IN SUPERBLK
SALVAGE? yes

SUMMARY INFORMATION BAD
SALVAGE? yes

BLK(S) MISSING IN BIT MAPS
SALVAGE? yes

100517 files, 4980946 used, 19339897 free (26121 frags, 2414222 blocks, 0.1% fragmentation)

***** FILE SYSTEM STILL DIRTY *****

***** FILE SYSTEM WAS MODIFIED *****

***** PLEASE RERUN FSCK *****
** /dev/ufs/OPNsense
** Last Mounted on /mnt
** Root file system
** Phase 1 - Check Blocks and Sizes
** Phase 2 - Check Pathnames
** Phase 3 - Check Connectivity
** Phase 4 - Check Reference Counts
** Phase 5 - Check Cyl groups
100517 files, 4980946 used, 19339897 free (26121 frags, 2414222 blocks, 0.1% fragmentation)

***** FILE SYSTEM MARKED CLEAN *****
Setting hostuuid: 66d7a789-40ee-11ea-ab2f-000db953f498.
Setting hostid: 0xc2349197.
Configuring vt: keymap blanktime.
Configuring crash dump device: /dev/ada0s1b
warning: total configured swap (4194304 pages) exceeds maximum recommended amount (4007336 pages).
warning: increase kern.maxswzone or reduce amount of swap.
swapon: adding /dev/ada0s1b as swap device
warning: total configured swap (4718592 pages) exceeds maximum recommended amount (4007336 pages).
warning: increase kern.maxswzone or reduce amount of swap.
.ELF ldconfig path: /lib /usr/lib /usr/local/lib /usr/local/lib/compat/pkg /usr/local/lib/compat/pkg /usr/local/lib/ipsec /usr/local/lib/mysql /usr/loca
32-bit compatibility ldconfig path:
done.
>>> Invoking early script 'upgrade'
>>> Invoking early script 'configd'
Starting configd.
>>> Invoking early script 'templates'
Generating configuration: OK
>>> Invoking early script 'backup'
>>> Invoking backup script 'captiveportal'
>>> Invoking backup script 'dhcpleases'
>>> Invoking backup script 'duid'
>>> Invoking backup script 'netflow'
>>> Invoking backup script 'rrd'
>>> Invoking early script 'carp'
CARP event system: OK
Launching the init system...done.
Initializing...........done.
igb0: link state changed to UP
igb1: link state changed to UP
Starting device manager...done.
Configuring login behaviour...done.
Configuring loopback interface...done.
Configuring kernel modules...done.
Setting up extended sysctls...done.
Setting timezone...done.
Writing firmware setting...done.
Writing trust files...done.
Setting hostname: Pare-Feu.pujnet
Generating /etc/hosts...done.
Configuring system logging...done.
Configuring loopback interface...done.
Creating wireless clone interfaces...done.
Creating OpenVPN instances...done.
Configuring WAN interface...done.
Configuring iTINC interface...done.
Configuring LAN interface...done.
Creating IPsec VTI instances...done.
Generating /etc/resolv.conf...done.
Configuring firewall.......done.
Starting PFLOG...done.
Configuring OpenSSH...done.
Starting web GUI...done.
Configuring CRON...done.
Setting up routes...done.
Generating /etc/hosts...done.
Starting DHCPv4 service...done.
Starting Unbound DNS...done.
Setting up gateway monitors...done.
Configuring firewall.......done.
Starting PFLOG...done.
Syncing OpenVPN settings...done.
Configuring dynamic DNS clients...done.
Starting NTP service...deferred.
Configure OpenDNS...done.
Starting Unbound DNS...done.
Generating RRD graphs...done.
Configuring system logging...done.
>>> Invoking start script 'newwanip'
Reconfiguring IPv4 on igb1: OK
Reconfiguring routes: OK
>>> Invoking start script 'freebsd'
chown: /var/mib_indexes: No such file or directory
Certificates generated /usr/local/share/ntopng/httpdocs/ssl/ntopng-cert.pem
Starting suricata.
29/7/2021 -- 10:02:10 - <Info> - Including configuration file installed_rules.yaml.
29/7/2021 -- 10:02:10 - <Info> - Configuration node 'rule-files' redefined.
29/7/2021 -- 10:02:10 - <Info> - Including configuration file custom.yaml.
Starting snmpd.
Starting redis.
starting tincd
tinc0
Starting maltrailserver.
Starting maltrailsensor.
Starting ntopng.
29/Jul/2021 10:02:14 [Ntop.cpp:2347] Setting local networks to 127.0.0.0/8,fe80::/10
29/Jul/2021 10:02:14 [Redis.cpp:162] Successfully connected to redis 127.0.0.1@0
29/Jul/2021 10:02:14 [Redis.cpp:162] Successfully connected to redis 127.0.0.1@0
29/Jul/2021 10:02:16 [Ntop.cpp:2287] Parent process is exiting (this is normal)
WARNING: attempt to domain_add(netgraph) after domainfinalize()
setup igb0
setup igb1 [egress only]
Starting monit.
Starting Monit 5.28.0 daemon with http interface at /var/run/monit.sock
Starting mongod.
/usr/local/etc/rc.d/mongod: WARNING: failed to start mongod
Starting flowd_aggregate.
Starting flowd.
kill: 177: No such process
No matching processes were found
mdconfig: ioctl(/dev/mdctl): Invalid argument
newfs: /dev/md43: could not find special device
mount: /dev/md43: No such file or directory
Starting eastpect.
Starting collectd.
option = Hostname; value = APU4C;
option = FQDNLookup; value = true;
option = Interval; value = 10.000000;
Created new plugin context.
Starting clamav_clamd.
755.564735 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
usb_dev_suspend_peer: Setting device remote wakeup failed
Starting clamav_freshclam.
Starting c_icap.
>>> Invoking start script 'syslog-ng'
Stopping syslog_ng.
Waiting for PIDS: 27871.
Starting syslog_ng.
>>> Invoking start script 'c-icap'
c_icap already running?  (pid=70083).
>>> Error in start script 'c-icap'
>>> Invoking start script 'frr'
Checking zebra.conf
176.562159 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
177.417110 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048
177.817266 [ 853] iflib_netmap_config       txr 2 rxr 2 txd 1024 rxd 1024 rbufsz 2048

[Darkopnsense]

Salvation,

As no answer, I downloaded the OPNsense-21.7-OpenSSL-serial-amd64 file and generated my key.

I start and end of not receiving ...

Now problem with the install image.

ada0 at ahcich0 bus 0 scbus0 target 0 mon 0
ada0: <KINGSTON SUV500MS120G 003056RI> ACS-4 ATA SATA 3.x device
ada0: Serial Number 50026B7782F951FC
ada0: 600.000MB / s transfers (SATA 3.x, UDMA6, PIO 512bytes)
ada0: Command Queueing enabled
ada0: 114473MB (234441648 512 byte sectors)
Trying to mount root from ufs: / dev / ufs / OPNsense_Install [ro, noatime] ...
mountroot: waiting for device / dev / ufs / OPNsense_Install ...
Mounting from ufs: / dev / ufs / OPNsense_Install failed with error 19.

Loader variables:
  vfs.root.mountfrom = ufs: / dev / ufs / OPNsense_Install
  vfs.root.mountfrom.options = ro, noatime

Manual root filesystem specification:
  <fstype>: <device> [options]
      Mount <device> using filesystem <fstype>
      and with the specified (optional) option list.

    eg. eggs: / dev / da0s1a
        zfs: zroot / ROOT / default
        cd9660: / dev / cd0 ro
          (which is equivalent to: mount -t cd9660 -o ro / dev / cd0 /)

  ? List valid disk boot devices
  . Yield 1 second (for background tasks)
  <empty line> Abort manual input

mountroot>

When it doesn't want it, it doesn't.

Cordially,

[franco]

Can you reinstall the kernel from the firmware GUI? The kernel was altered to avoid a bad commit that is allegedly causing these troubles.


Cheers,
Franco

[Darkopnsense]

Good evening Franco,

Thank you for the answer however I do not understand its meaning, my mother tongue is French (sorry).

My APU4C is crashed on zebra.conf when I am connected in console mode (DB9 + putty) & I do not have access to the graphical interface (webgui) from a browser (edge, chrome, vivldi, brave, firefox) .

That's why I tried to generate an installation key to all overwrite with the image OPNsense-21.7-OpenSSL-serial-amd64, download on two different servers and two different USB keys.

I am in failure even if I want to start on a new hard drive, my keys do not work for an installation.

I am perplexed, either the procedure to change (In the PUTTY console in SSH on 192.168.1.1: 22 enter Login as: installer + Pssw entry: opnsense + entry), or the image has a problem, or I am incompetent.

Cordially,

[Darkopnsense]

Hello,

I answer myself.

I tried to generate an install key with the image OPNsense-21.7-OpenSSL-serial-amd64, upload to two different servers and two different USB drives.
There is a priming however the system aborts, as indicated
 on the posts above.

From my software library I just regenerated the OPNsense-20.1-OpenSSL-serial-amd64 image on my key or I overwrote the OPNsense-21.7-OpenSSL-serial-amd64 image.
The usual procedure in console mode (DB9 + putty) & (In the PUTTY console in SSH on 192.168.1.1: 22 enter Login as: installer + Pssw entry: opnsense + enter) works normally.

If I understood correctly version 21.7 has been rewritten. Reading the posts, many of us have disappointments about the generation of the installation media, I let this new version mature. No one is perfect, I know something about it.

Cordially,

[franco]

What I mean was after 21.7 installation go to System: Firmware: GUI, "Packages" tab and under "kernel" in the right click "reinstall" button and let the system reboot. It will replace the bad kernel.


Cheers,
Franco