Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    QEMU VM: Version 2.8 Won't Boot

    Scheduled Pinned Locked Moved Development
    21 Posts 5 Posters 455 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      nickf1227
      last edited by nickf1227

      Hi All,

      Tried to upgrade my pfsense vm today. Its virtualized under Incus in TrueNAS and is working as expected in 2.7.2. When trying to upgrade to 2.8, everything seems to work as planned, but when it comes up in 2.8 it hangs here
      78f543a6-2c19-4014-8954-5fd89a496de4-image.png

      Under 2.7 these seem to be QEMU PCIe rootport devices
      66214d82-0d07-4b92-a7e9-e29c23debb5d-image.png

      Is there a change in the driver for QEMU in FreeBSD 15.0 thats breaking this for me?

      N 2 Replies Last reply Reply Quote 0
      • N
        netblues @nickf1227
        last edited by

        This post is deleted!
        1 Reply Last reply Reply Quote 0
        • N
          netblues @nickf1227
          last edited by netblues

          @nickf1227 see here

          and here
          ce version

          Not exactly the same, but its always that some devices are missing in freebsd15 and kvm

          N 1 Reply Last reply Reply Quote 0
          • N
            nickf1227 @netblues
            last edited by nickf1227

            @netblues Interesting. So for you, it boots, but devices were just not showing up at all?
            In my case, I'm doing PCI-E passthru of an Intel X710, not a virtio network adapter. Although there is a virtio network adapter in the system, even if its not being used.
            a1025999-2503-4c1e-b5f5-06247ec1cd4b-image.png
            9b8bb40d-6d8b-4c6c-9d36-6425e12506e1-image.png

            N 1 Reply Last reply Reply Quote 0
            • N
              netblues @nickf1227
              last edited by

              @nickf1227 I get all sorts of cases.
              Under redhat kvm, no virtio devices at all.

              At hetzner kvm, I only get ONE!! and it misses the rest.

              Certainly there is something going on with virtialization and freebsd15

              Proxmox has better luck too.

              What worked for me is changing the emulated machine from q35 to 440fx.
              But then this doesn;t support passthrough If i recall.

              N 1 Reply Last reply Reply Quote 0
              • N
                nickf1227 @netblues
                last edited by nickf1227

                @netblues Right...so the newer kernel works with an emulated chipset form 1996 but not an emulated chipset from 2010. Lol.

                Sigh.

                All I wanted was working DNS with Kea DHCP. :(

                N 1 Reply Last reply Reply Quote 0
                • N
                  netblues @nickf1227
                  last edited by

                  @nickf1227 The thing is, that if this is broken upstream, its hard for pfsense to fix.
                  Unless of course it fails on aws or azure ;-)
                  But I doubt it. aws is xen, not kvm.

                  Up to now, we can't agree on a replicated issue :( to build a solid case.

                  N 1 Reply Last reply Reply Quote 0
                  • N
                    nickf1227 @netblues
                    last edited by

                    @netblues Sure, this is clearly a FreeBSD problem, no doubt. I just wish we'd see genuine efforts to get an open source firewall on Linux, from Netgate or otherwise. With the marketshare of KVM, this kinda thing shouldnt happen.

                    N 1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      Are these systems using Q35+SeaBIOS or Q35+OVMF (UEFI)?

                      Granted I have only tried on Proxmox but mine are all working, even if I force modern virtio NICs. I don't have anything using passthrough, though.

                      My VMs use either i440fx+SeaBIOS or (more commonly) q35+OVMF, though I did try one q35+SeaBIOS and it still worked here, too.

                      That first screenshot it's hard to tell if it froze there or just stopped displaying kernel messages on that console. Maybe try adding a serial port to the VM (if it doesn't already have one) and attach to that and see if you get any other output there.

                      Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      N N 2 Replies Last reply Reply Quote 0
                      • N
                        netblues @jimp
                        last edited by netblues

                        @jimp I tried the uefi path, on q35 but it fails to boot completely.
                        Most probably it needs a reinstall.
                        Reinstalling with plus to a different vm isn't an option due to licensing too.

                        (and I can't justify spending $120 AND put debug effort too.)

                        jimpJ 1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate @netblues
                          last edited by

                          @netblues said in QEMU VM: Version 2.8 Won't Boot:

                          @jimp I tried the uefi path, on q35 but it fails to boot completely.
                          Most probably it needs a reinstall.

                          If you were running BIOS before, then it would need reinstalled. It needs an EFI disk added to the VM and then installed as EFI so it has a proper EFI partition/loader/etc. You'd most likely also need to make sure Secure Boot is disabled in there.

                          Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          N 1 Reply Last reply Reply Quote 0
                          • N
                            netblues @jimp
                            last edited by

                            @jimp Yes, indeed. Secure boot was disabled, but still, with no efi, its futile.

                            1 Reply Last reply Reply Quote 0
                            • N
                              netblues @nickf1227
                              last edited by

                              @nickf1227 said in QEMU VM: Version 2.8 Won't Boot:

                              an open source firewall on Linux

                              Well, there is ipfire, but with all the bells and whistles pfsense has, rebasing to linux is only for april fools day ๐Ÿค 

                              1 Reply Last reply Reply Quote 0
                              • N
                                nickf1227 @jimp
                                last edited by

                                @jimp Hey man, thanks for your reply

                                That screenshot comes from the console itself while its booting, a-la a display device/VNC. Happy to give it another go with a serial connection, but I dont think thats possible without a virtio-VM agent?
                                034333a5-8421-4cca-bedb-0aa0e85fb7bc-image.png

                                jimpJ 1 Reply Last reply Reply Quote 0
                                • jimpJ
                                  jimp Rebel Alliance Developer Netgate @nickf1227
                                  last edited by

                                  @nickf1227 said in QEMU VM: Version 2.8 Won't Boot:

                                  @jimp Hey man, thanks for your reply

                                  That screenshot comes from the console itself while its booting, a-la a display device/VNC. Happy to give it another go with a serial connection, but I dont think thats possible without a virtio-VM agent?

                                  I'm not sure what all might be available on TrueNAS but at least on Proxmox for a serial console on a guest you run qm terminal <id> from the Proxmox host (e.g. over ssh). IIRC that's just part of qemu-server so it may be there already.

                                  It may not be printing anything there but it's good to rule it out at least.

                                  Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                  Need help fast? Netgate Global Support!

                                  Do not Chat/PM for help!

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by stephenw10

                                    Since you're hitting this locally try setting the loader value: debug.acpi.disabled="pci"

                                    It looks like this is an ACPI bug preventing the OS finding the PCI devices. Setting that falls back to probing the bus/tree.

                                    I expect it to still fail but the changes output would be useful in diagnosing the problem.

                                    Edit: Actually that seems to prevent any detection in Q35....

                                    N 1 Reply Last reply Reply Quote 0
                                    • N
                                      netblues @stephenw10
                                      last edited by

                                      @stephenw10 Finally its all related to uefi.
                                      Booting via bios to q35 and newer freebsd leads to missing virtio interfaces.

                                      Reinstalling with uefi boot makes virtio interfaces available.
                                      This is probably an upgade nightmare, since there is no warning.
                                      A warning can be easily added by checking if an update is on q35 without uefi boot.

                                      Just an idea

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        It's a bug in the ACPI driver that happened to be present when we branched 25.03 and 2.8: https://reviews.freebsd.org/D48285

                                        We picked back the fix two weeks ago it should be in the current public beta (May 10th). Are you testing that?

                                        N 1 Reply Last reply Reply Quote 0
                                        • N
                                          netblues @stephenw10
                                          last edited by

                                          @stephenw10 So you are saying that q35 with bios boot would work?
                                          I need to boot 2.8 beta first under q35.
                                          If the fix isn't there how can I test it?

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Yes as I understand it that issue is fixed in the May 10th 2.8 beta. I assume you were testing with an earlier beta version?

                                            C 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.