19.1-BETA images

[franco]

Hi all,

As HardenedBSD has been awesomely delivering their version 11.2 for us and even fixing an issue on i386 while they don't actively support it, it's time to publish a beta test based on this work.

These images are assembled from the latest production release 18.7.6 and will update to 19.1 and later 18.7.x without problems. The key difference is the operating system switch from FreeBSD 11.1 to HardenedBSD 11.2.

BEGIN IMPORTANT NOTE

For this reason, the kernel and base package set are "locked" and MUST NOT be unlocked as this will reinstall the older operating system as OPNsense tries to get back to its latest known version on firmware upgrades. These locks will remove themselves on the final 19.1 transition and update correctly into subsequent 19.1.x.

END IMPORTANT NOTE

You can find a list of feature additions for the upcoming 19.1 here:

https://forum.opnsense.org/index.php?topic=10132.0

Additional features can be inspected in the development version, details here:

https://forum.opnsense.org/index.php?topic=8700.0

Last but not least, images for educational purposes have been published here:

https://pkg.opnsense.org/FreeBSD:11:amd64/snapshots/
https://pkg.opnsense.org/FreeBSD:11:i386/snapshots/

All feedback, comments, problem reports and even neutral "meh, works ok" are appreciated.


Thank you,
Franco on behalf of the OPNsense project

[jebba]

WORKSFORME upgrading via web gui from 18.7.6 on a Netgate SG-4860.

Thanks!

[franco]

Upgrading via web GUI (not using the images) will only give you development features, but not the newer 11.2 operating system. Just FYI.

Thanks for your report!

[jjanzz]

Is it doable to create custom images? I'd like to have an install image with LibreSSL already in it - not unwilling to do the effort myself.

[bob@afrinet.eu]

Still the same boot problem… when reaching the mmc0 :

Code: [Select]

No compatible cards found on the device.

This is well supported in FreeBSD 11.2 so I guess there is a problem with the driver for mmc and supported devices compiled in the Kernel (probably).

[mefford]

Tested to boot successfully into live environment on Fitlet2 with Celeron J3455 Apollo Lake. Had to disable sdhci though, otherwise boot stuck at controller timeout.

Edit:

Using image OPNsense-19.1.b-OpenSSL-vga-amd64.img.bz2 (2018-11-02 23:43)

If anyone looking to disable sdhci,

You can disable the SD slot in pfSense by hitting ESC at the bootloader and then typing these lines:
set hint.sdhci_pci.0.disabled=1
set hint.sdhci_pci.1.disabled=1
boot

Once you are done installing you can permanently disable the SD slot by adding these lines to /boot/loader.conf.local:
hint.sdhci_pci.0.disabled=1
hint.sdhci_pci.1.disabled=1