20.7-BETA images with HBSD 12.1

[l0rdraiden]

* Suricata 5 and optimized ET Pro Telemetry rules plugin

What has changed in the "optimized ET Pro Telemetry rules plugin"? or what's new?

How easy is to switch from beta/RC to stable once is relased? can be done in the web ui changing the release branch or something?

Thanks

[Werner Fischer]

Hi Franco,

> I would expect the same outcome. We can look at the crash, but if it works on 11.2 / 20.1 it may be due to new OS code.

regarding this LTE issue I have opened a new topic: https://forum.opnsense.org/index.php?topic=17417.0

Please let me know in case I should do any further testing.

Best regards, Werner

[bimmerdriver]

I installed it in a generation 2 vm on a windows 2019 hyper-v server. The installer hung a couple of times at the same places as have been reported before. Like before, I was able to get past by interrupting it using CTRL-C and re-logging in.

[marjohn56]

Remember to install the new dhcp6c...

[bimmerdriver]

Remember to install the new dhcp6c...

I didn't update anything. dhcp6c seems to be working fine as-is.

[marjohn56]

Did you do a code core update?

[franco]

I'm trying to provide 20.7-BETA2 today. I'm currently struggling with increased workload at my day job...

Please remember that we provide supervised snapshots, not nightly builds. Both have their ups and downs and personally I think nightly breakage is much harder to troubleshoot.


Cheers,
Franco

[marjohn56]

Thanks Franco... your doing your best, as always. We can ask no more.

[franco]

Update has been published. Images to go along with it will follow next week.


Cheers,
Franco

[wget]

Update has been published. Images to go along with it will follow next week.

Hi Franco,

Do you have a link to that new update?

Will it be available here? https://pkg.opnsense.org/FreeBSD:12:amd64/snapshots/

I only see the version dating back from 2020-03-24 :/

[mimugmail]

Grab the ISO and update in there ...

[wget]

Grab the ISO and update in there ...

Ok. After I have upgraded my APU firmware (since I was at it), I reinstalled the system with the aforementioned iso and am now on 20.7.

This is the version I got after having run the update process:

Code Select Expand

OPNsense 20.7.b_181-amd64
FreeBSD 12.1-RELEASE-p5-HBSD
OpenSSL 1.1.1g 21 Apr 2020

The update checker asked me to switch to dev as "the release type needs to be updated" (this is the message I got). But switch to dev didn't get me any further updates.

Note to myself for the future: install the plugins I used BEFORE importing the config. At first I didn't install the plugins which required me to reset to defaults the device, install the plugin and reimport.

In IPv6, my LAN is broken as hell. While the machine received a prefix delegation on WAN, which is well installed on the LAN interface, the OPNsense router is not able to communicate to the outside in IPv6 nor are the machines from the LAN. It seems like a radvd issue (regression). The same config using OpenWRT is working like a charm. I'm on cable modem. Playing around with MTU override, prefix hints or even disabling the firewall (pfctl -d) to ensure ICMPv6 wasn't blocked are all the steps I performed without much results. :/

[wget]

For those falling on this thread using a search engine, the fact that you are not on HardenedBSD 12 and are still on HardenedBSD 11 (FreeBSD 11 based) when you try to upgrade from 20.1 to a dev version of 20.7 is intended.

Like specified on Twitter, due to early showstoppers in the 11.2 -> 12.1 upgrade process, the devs missed the deadline when they froze the code base.

According to that same tweet, the ability to upgrade to a HardenedBSD 12 kernel will be offered with the next RC expected this week or the next ones.