@OPNsense Developers: Any plan to support Espressobin-SBC

[monstermania]

Hi,
the Espressobin project looks like an ideal solution for a SOHO FW (http://espressobin.net/).
In the Espressobin-Forum i found an entry, that pfense is booting up on Espressobin.
http://espressobin.net/forums/topic/pfsense/page/2/#post-1447

Are there any plans to support this hardware with OPNsense!?

best regards
Dirk

[fabian]

You may be able to build id by yourself for that hardware as there is no official ARM image now. I sometimes read in the forum that this may change with FreeBSD 12.

Franco is probably the only one who can answer this question for now.

[gandalf]

Hi,
the Espressobin project looks like an ideal solution for a SOHO FW (http://espressobin.net/).
In the Espressobin-Forum i found an entry, that pfense is booting up on Espressobin.
http://espressobin.net/forums/topic/pfsense/page/2/#post-1447

Are there any plans to support this hardware with OPNsense!?

best regards
Dirk

EspressoBin is the official NetGate SG1100 of pfsense !
-> https://shop.netgate.com/products/1100-pfsense
-> https://forum.netgate.com/topic/139370/announcing-netgate-s-espressobin-based-sg-1100
-> https://forum.netgate.com/topic/144215/release-of-aarch64-images-for-espressobin-v7-board/2?_=1627309374659

[franco]

I wonder how this is related to OPNsense and not considered shameless advertising?

[lilsense]

Now, shouldn't the OPNSense be running OpenBSD?   

[franco]

If you delete half the core code and rewrite the other, yes. That still leaves reengineering firmware updates. Who wants to try?


Cheers,
Franco

[lilsense]

That's should not be Question... The real Question is "Who wants to deal with,'You know who!'?"

LOL

[fabian]

In theory, Linux makes far more sense than OpenBSD, because there are more drivers, important things are implemented there first (i. e. Wireguard), and it has systemd.
The only issue is that I don't have an idea how to get stuff like CARP running there.

A migration makes sense, if it makes FreeBSD would be poorly supported or the change something that OPNsense needs to be rewritten in large pieces anyway.

If you delete half the core code and rewrite the other, yes.

I guess it is mostly the interfaces and the firewall related code that would have to be rewritten. All services are likely working approximately the same on all BSDs and Linux distributions.

That still leaves reengineering firmware updates.

Depending on the operating system, there might be an existing solution for this. For example every Linux distribution has a package management system. For example dnf, apt, pacman. OpenBSD has likely one too.

Who wants to try?

Nope, I don't have infinite time left and likely not anyone else.

[franco]

Depending on the operating system, there might be an existing solution for this. For example every Linux distribution has a package management system. For example dnf, apt, pacman. OpenBSD has likely one too.

pkg_add(1) is nowhere near pkg(8) in terms of automation and scripting. It never has been even in the early days when pkg(ng) was started to move away from pkg_add(1) which was written for FreeBSD and then later adopted by OpenBSD. FreeBSD had ample desire to go past pkg_add(1) due to such shortcomings. OpenBSD rewrote pkg_add(1) later on but it's still largely aimed at people sitting in front of a monitor juggling interactive prompts. It's a bit funny going back into a time machine trying to deal with all sorts of issues that should "just work" in these modern times.


Cheers,
Franco