OPNsense aarch64 firmware repository

[Maurice]

Suricata is an aarch64 core dependency since 23.7:

https://github.com/opnsense/core/commit/e6994089402

All of the aarch64 packages sets I've released include Suricata. I might be missing something here?

Cheers
Maurice

[franco]

To be frank you said:

"Rust is ignored on aarch64 though, so it's just cmake and go."

Based off of that I thought Suricata wasn't in aarch64, because Suricata builds Rust anyway making exclusion from the aux set pointless?


Cheers,
Franco

[Maurice]

> making exclusion from the aux set pointless?

I think so, yes. As way to often, I thought that excluding Rust from the aux set must have a very serious reason that someone figured out after a lengthy evaluation. Turns out it might have just been overlooked when Suricata was made a core dependency on aarch64?

Cheers
Maurice

[franco]

Could be. Sorry for the confusion. It would be best to add it back to the aux set -- after all the aux stuff does not build directly, but when it is found it will be stored there.


Cheers,
Franco

[Maurice]

OPNsense 24.7.1 aarch64 packages and sets released.

[Maurice]

OPNsense 24.7.2 aarch64 packages and sets released.

[franco]

Nice, thanks!

[rdunkle84]

24.7.2
Clean install not upgrade.
I see an error on console:
HTTPS: Could not open file or uri for loading certificate from /var/etc/cert.pem
00206149AD9D0000:error:16000069:STORE routines:ossl_store_get0_loader_int:unregistered scheme:/usr/src/crypto/openssl/crypto/store/store_register.c:237:scheme=file
00206149AD9D0000:error:80000002:system library:file_open:No such file or directory:/usr/src/crypto/openssl/providers/implementations/storemgmt/file_store.c:267:calling stat(/var/etc/cert.pem)
Unable to load certificate

[franco]

Just a cosmetic issue at the moment when starting with a vanilla 24.7.2 image.

https://github.com/opnsense/core/commit/49aa78594f

[Maurice]

Yes, I noticed this issue when testing the VM images, but decided to release them anyway. Mostly because

- it's not an aarch64 issue,
- there's already a fix in master and
- it's only cosmetic.

When the patch gets officially released, I'll release it, too.

[korhojoa]

Could you also build the DVD for aarch64? I have a pull request that fixes the creation for ARM64. This allows you to install opnsense like any other OS as long as the platform has UEFI available. (which many aarch64 devices do)

[franco]

We can talk about including this PR, but the review questions still stand. And is UEFI really a prerequisite here anyway?

It just doesn't feel very polished.


Cheers,
Franco

[Maurice]

OPNsense 24.7.3 aarch64 packages and sets released. Includes hotfix 24.7.3_1.

[Maurice]

@korhojoa You're the first one to ask about DVD images and it seems you're quite proficient at building them yourself. So I'm not sure who I would be building these for. Also, I wouldn't be able to easily test them. All my work with aarch64 happens on cloud VMs, I don't currently own any suitable hardware. Feel free to donate something.

But I'll look into it if your PR gets merged. It wouldn't be a lot of work to add this to my build process.

Cheers
Maurice

[Maurice]

OPNsense 24.7.4 aarch64 packages and sets released.

[Update 2024-09-15]
Hotfix 24.7.4_1 released.