[WORKAROUND] can't install opnsense

[Julien]

Hi Guys,
we have build a new pc/ router for testing a ASUS MOBO.
while boating with the usb its takes for ever to show the boat page and its hangs on loading boatx86
i've tried many usbs but none of them works.
i've downlaoded pfsense and tried the iso and it works.
the boat is UEFI on the MOBO, any suggestion why i can't get it installed ?

[franco]

Use 16.7-RC2, either VGA or CDROM, it has the newly added UEFI support.

[Julien]

a big thank you for your quick reply.
i've tried this but it still not working
http://mirror.ams1.nl.leaseweb.net/opnsense/releases/mirror/OPNsense-16.7.r2-OpenSSL-vga-amd64.img.bz2
http://mirror.ams1.nl.leaseweb.net/opnsense/releases/mirror/OPNsense-16.7.r2-OpenSSL-cdrom-amd64.iso.bz2
or i need the i386 ?
it load the USB but does not provide the installation see screenshot

thank you

[Julien]

Any suggestions guys ? i am stuck here
somehow the usb won't mount

[Tikimotel]

Have you tried it in a USB 2.0 port? The da0 GPT seems to get rejected, is what I gather from the partial screenshot?
Can you choose UEFI with CSM support "yes" in the bios?
With all the UEFI failures in security, I would not trust UEFI that much. (Lenovo / with copy-paste Intel BIOS SDK with insecure bootcode)

btw.
I use passmark's imageUSB software (http://osforensics.com/tools/write-usb-images.html) or Rufus (https://rufus.akeo.ie/?locale=en_US) to create USB img

[Julien]

thank you for your answer,
i tried both usb3 and 2 both are rejected.
burned the ISO to a DVD , now its installing with a external DVD, seems to working till now.
80% installing

[Julien]

its appear to works , thank you for the UEFI Drivers on the Version 16.7.
with a external USB DVD it does works.

[franco]

This seems overly funny, because it boots UEFI, boots the kernel from the GPT root partition and them barfs before it mounts root for going into multi-user mode.

This could maybe work with kern.cam.boot_delay=10000 but I've never seen this manifest on GPT before.

https://github.com/opnsense/tools/issues/28

In any way, I was going to suggest the ISO, looking good.

[Julien]

we are happy with the External DVD as it mount it automatically.
i never seen it either, nothing on the net to troubleshoot.
glad i could fix it .
thank you guys for your help and for the UEFI driver

[cirtes]

Adding data point. Same problem with HP EliteDesk Mini G1.

I'll check to see if there is a BIOS update.

[cirtes]

Just to complete my report on the HPE EliteDesk Mini G1 - Known limitation with FreeBSD + USB3.0 + Haswell Lynx Point chipset.

Details here: https://www.freebsd.org/doc/handbook/usb-disks.html

Official recommendation: "disable xHCI/USB3 in the system BIOS"

Hope that helps folks who see this error.

Unfortunately, for my case there is only USB 3.0 on the system so no way to turn it off.

I verified with FreeBSD 10.3 where the error is same as OpnSense
Worked fine with FreeBSD Beta 3 of release 11

[franco]

Hi cirtes,

Thanks for the summary.

I don't expect this to be backported to FreeBSD 10.4, so we may have to wait/aim for 11, which could hit 17.1 depending on how our roadmap will be set up and how well the migration path from 10 to 11 goes.

Some have reported that working around this using an USB CD drive or a CD emulator disk works for them.


Cheers,
Franco

[cirtes]

Thanks Franco for the suggestion.

I did try deep and hard to work around.

Even built a USB HDD with Grub boot RAM disk for the ISO image, hoping that would bypass the USB 3.0 / Chipset limitation but no luck. Same error 19.

Because this system is a fancy mini-pc, only interface available for storage besides the USB 3.0 is the M2-8022 PCIe slot that is exclusively PCIe 4-Lane (i.e. cannot boot SATA SSD). Unfortunately, those SSD drives are very expensive right now, so I'll try the i386 image to see if that is less confused with UEFI/USB30 and final option is to run in a hyper-visor.

Many thanks.

[franco]

Is there any chance you could install from a different system? The installer uses labels so the installed disk should boot ok in the box after moving it.

[cirtes]

Oooh, that is fancy! I did not know that is an option.

I will certainly try this weekend. Have a spare drive for it.

I'll post results.

Many thanks Franco.