OPNsense 20.1 on RaspberryPI 3

[NI2O]

@securigeek

Download the latest nightly image per the link given by spikerguy. then restore the image to an SDCard in the usual RPi manner. Install the card into the RPi and power on.

First time out you'll need a keyboard and screen attached to the Pi. Follow the setup step as if it was a regular PC install and then you are done.

[yrzr]

Any tutorial for how to build the image by myself, please?

I tried https://github.com/nekoprog/tools but the boot process always stuck at a kernel panic. I am wondering that it is caused by old HardenedBSD kernel 11, as I found that FreeBSD only supports rpi3 after version 12.

[Ftz57]

First of all, a big thanks for the work you made here Rene, i ve been pleased to read all that 👍👍
I just put my hand on a pi 4 and i m following the fresh update of openbsd and freebsd on it as they both work now!!! with usb support.
Rene i believed i could make my own image too but after reading your long and hard path i m not so enthousiast at all!!!
I saw you was on new project and probably dont have no more so much time for that but could you just try to build a pi 4 image for all of us pleaaaaaase??? Or at least the way the build one now that you resolved the multiple problems you got to build a working one for pi 3...

[rainfactor]

Sorry for the noobish question

What image you guys used with the Pi. I have a Pi3B+ and I have downloaded the latest nightly image.
The USB adapter seems to be recognized fine however the internal Ethernet  is missing.

What Am I missing. In the initial setup I'm being presented only with 1 interface which is the USB

Thank you

[rene_]

First of all, a big thanks for the work you made here Rene, i ve been pleased to read all that 👍👍
I just put my hand on a pi 4 and i m following the fresh update of openbsd and freebsd on it as they both work now!!! with usb support.
Rene i believed i could make my own image too but after reading your long and hard path i m not so enthousiast at all!!!

Thank you :-)

I saw you was on new project and probably dont have no more so much time for that but could you just try to build a pi 4 image for all of us pleaaaaaase??? Or at least the way the build one now that you resolved the multiple problems you got to build a working one for pi 3...

Yea, more or less, but i am on it.
The current problem is, that freebsd on its own is still not supported for freebsd.
You can track that here -> https://wiki.freebsd.org/arm/Raspberry%20Pi
As soon theres progress, i will start porting opnsense to the pi4, just because i'm interessted at the GBit port performance with opnsense on it 

Sorry for the noobish question

What image you guys used with the Pi. I have a Pi3B+ and I have downloaded the latest nightly image.
The USB adapter seems to be recognized fine however the internal Ethernet  is missing.

What Am I missing. In the initial setup I'm being presented only with 1 interface which is the USB

Thank you

Try the setup walkthrough without any usb adapter, configure the adapter afterwards.


All the best out there,
René

[breakaway]

Hi @rene_

EDIT: It appears this was a layer 8 issue After taking a couple minutes to boot up, I got an IP after plugging in my laptop to the ethernet port of the Pi. Thanks @rene_ for all your work on this!

I have finally managed to get a Raspberry Pi 3B+ (lots of supply issue due to corona virus). But unfortunately I don't have much success.

Downloaded the image OPNsense-201911290406-OpenSSL-arm-aarch64-RPI3.img.gz, unzipped it and wrote it to the sdcard from my mac using this command

Code: [Select]

dd if=OPNsense-201911250722-OpenSSL-arm-aarch64-RPI3.img of=/dev/disk2 bs=1m conv=sync
After doing this, I put the SDcard into my Pi3B+ but I get solid red light, no image on screen and no IP address if I plug my laptop into the network port. I have also tried Build 201911290406 (the latest one), with the same results. I've also tried several different SDCards too (Samsung Evo Plus 32GB).

Any ideas?

EDIT: It appears this was a layer 8 issue After taking a couple minutes to boot up, I got an IP after plugging in my laptop to the ethernet port of the Pi. Thanks @rene_ for all your work on this!

[rene_]

Thank you :-)

[chemlud]

Are there plans for an official release? I'm still a little reluctant to download my personal security appliance from a private repo ;-)

[spikerguy]

Good point but there is no official release until 30.7.

Maybe you can build one yourself using the nekoprogs tools.
Tools Link

Good Luck.

[oscarr]

I think that Raspberry Pi 4 is great thing for projects where you want to make use of GPIO connector.

I have RPi4 - on shelf since half year.
Too sensitive to use while children are in area. Too complex for simple projects - waste of resources.
Still laggy as for desktop PC (IMHO on RaspberryPi OS mouse cursor is laggy - don't know how on other systems).
I'm slowly accepting sad truth - that it was mistake to buy it.

[spikerguy]

I think that Raspberry Pi 4 is great thing for projects where you want to make use of GPIO connector.

I have RPi4 - on shelf since half year.
Too sensitive to use while children are in area. Too complex for simple projects - waste of resources.
Still laggy as for desktop PC (IMHO on RaspberryPi OS mouse cursor is laggy - don't know how on other systems).
I'm slowly accepting sad truth - that it was mistake to buy it.

I doubt that you have explored enough of Linux operating system for the RPI4, You should try Manjaro ARM XFCE edition it is fully usable for normal desktop use case but please don't expect X86 applications which are not made for aarch64 yet to work on it.
Link Here

Sorry opnsense forum for advertising  Manjaro ARM I am a maintainer there 

@rene hello,

Can you share how you were able to build aarch64 opnsense image for  RPI3, Freebsd team have added support for RockPiE which have 2 Lan ports so I tried to add its support to Opnsense tool maintained by @nekoprog but base and packages seems to fail while compiling, I have reported it to opnsense tools git issue.

I would like to know your method if you're willing to share your work. It will help the community in adding support for more devices which already have support for freebsd.

Thank you.

[rene_]

So, 20.7 was released a couple of days ago ... and the base is finally bsd 12.1

i will start work again on this in next days or weeks, as soon as i have enough time for this.

i will answer all you questions than, because its not everything in my head right now 

As soon i got a stable way to compile for rpi3 and maybe other devices, i will create a pull request to the official git repo.
Afterwards, everyone should be able to compile there own images from official source.

[oscarr]

Spikerguy, so you say that in Manjaro ARM there is hardware cursor experience? Because on RespberyOS it behave like software rendered which means it's laggy when you move it quickly.

I apologize that I forgot to mention some Raspberry Pi features that makes it usable for geeks and tinkers (camera and display slot etc). It is great thing for teenagers, students or for unique projects, but using it as PC is like driving with small excavator.

That's about RPi.
In case of OPNsense 20.7 - it is great. I found that USB WiFi adapter by Mediatec/Ralink RT5572 works perfectly, also gigabit ethernet adapters TP-Link UE300 and ANKER A7611 works as well.

Gigabit adapters are not so perfectly working as WiFi - if they go into powersaving mode, they wont be automatically reinitiated after plugging cable in.
Also for boot I had to add init script into /usr/local/etc/rc.syshook.d/early/

Code: [Select]

#!/bin/sh
usbconfig -d `usbconfig list | grep "Realtek USB 10/100/1000 LAN" | cut -c5-7` set_config 1

[Ftz57]

Ok Rene, i'll try to follow the road
I'll install a full bsd 12.1 to be able to (i hope 🤞) build a pi4 image.

[spikerguy]

So, 20.7 was released a couple of days ago ... and the base is finally bsd 12.1

i will start work again on this in next days or weeks, as soon as i have enough time for this.

i will answer all you questions than, because its not everything in my head right now 

As soon i got a stable way to compile for rpi3 and maybe other devices, i will create a pull request to the official git repo.
Afterwards, everyone should be able to compile there own images from official source.

Looking forward for this, Maybe you can reuse nekoprogs tools to get a stable method to build images, I have tried it and it kindly of works but there is some compiling issue which seems to be due to using freebsd instead of hardenedbsd to compile from source, I will try compiling it on hardenedbsd over the weekend. This was advised by the opnsense team when I shared the error logs on git issue.

Can you share how do you build images currently? I have many boards laying around maybe we can make use of it to build natively for aarch64.

Spikerguy, so you say that in Manjaro ARM there is hardware cursor experience? Because on RespberyOS it behave like software rendered which means it's laggy when you move it quickly.

I apologize that I forgot to mention some Raspberry Pi features that makes it usable for geeks and tinkers (camera and display slot etc). It is great thing for teenagers, students or for unique projects, but using it as PC is like driving with small excavator.

That's about RPi.
In case of OPNsense 20.7 - it is great. I found that USB WiFi adapter by Mediatec/Ralink RT5572 works perfectly, also gigabit ethernet adapters TP-Link UE300 and ANKER A7611 works as well.

Gigabit adapters are not so perfectly working as WiFi - if they go into powersaving mode, they wont be automatically reinitiated after plugging cable in.
Also for boot I had to add init script into /usr/local/etc/rc.syshook.d/early/

Code: [Select]

#!/bin/sh
usbconfig -d `usbconfig list | grep "Realtek USB 10/100/1000 LAN" | cut -c5-7` set_config 1

Yes Manjaro arm have GPU acceleration for RPI using their gpu drivers, Please move to Manjaro forum for further discussion.