Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Building pfSense - Something basic I'm doing wrong?

    Scheduled Pinned Locked Moved Development
    56 Posts 14 Posters 11.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      ptaylor
      last edited by

      Ok, got signed up for the tools repo.

      Yesterday, I built a new FreeBSD 8.3 VM, and installed git from ports.  I was able to pull the tools repo down to /usr/local/pfsense-tools.

      Using the menu, I set the pfSense TAG to RELENG_2_1_2 and FreeBSD Branch to releng/8.3.

      When I try to build nanoBSD, I saw that there was an issue with the version of git that I had.  These scripts require a version that supports the "single-branch" option.  This morning, I've managed to get git 1.9.0 installed.  I no longer see the error about the single-branch option, but things still aren't building properly.  This is the output I get:

      >>> Using /usr/local/pfsense-tools/builder_scripts/conf/rmlist/remove.list.iso.8 ...
      >>> Operation ./build_nano.sh has started at Wed Apr 23 13:25:22 EDT 2014
      >>> Obtaining FreeBSD sources releng/8.3...Done!
      >>> Removing needed files listed in patches RELENG_2_1_2
      >>> Applying patches from /usr/local/pfsense-tools/builder_scripts/../builder_scripts/conf/patchlist/releng/8.3/patches please wait...No file to patch.  Skipping...
      1 out of 1 hunks ignored--saving rejects to sys/contrib/altq/altq/altq_cbq.h.rej
      No file to patch.  Skipping...
      1 out of 1 hunks ignored--saving rejects to sys/contrib/altq/altq/altq_hfsc.h.rej
      failed to apply altq_max_queues.diff
      No file to patch.  Skipping...
      11 out of 11 hunks ignored--saving rejects to parse.y.rej
      No file to patch.  Skipping...
      14 out of 14 hunks ignored--saving rejects to pfctl_altq.c.rej
      No file to patch.  Skipping...
      
      

      And it just goes on like that for pages…  No file to patch.

      The scripts did successfully pull down /usr/pfSensesrc, so that part looks good.

      I feel like I've done something very basic wrong, but I'm not seeing it.  Was /usr/local/pfsense-tools a bad place to put my copy of the tools repo?  Did I do not install something that is required with my FreeBSD install?

      If there's a walk-through somewhere, just point me that way, but I think this method is probably so new that there isn't anything like that just yet...

      Any help would be greatly appreciated.

      Thanks,
      Paul

      1 Reply Last reply Reply Quote 0
      • E
        eri--
        last edited by

        Yeah you should use tools folder or tell the builder where the new folder is.

        1 Reply Last reply Reply Quote 0
        • F
          freebee
          last edited by

          I get error too.
          My apply patches is not working. Is failing on obtain sources from freebsd. Maybe is not authenticating in git server ?. csup is gone for 8.3…

          1 Reply Last reply Reply Quote 0
          • P
            ptaylor
            last edited by

            I blew away my /usr/pfsense-tools/ folder and ran this command:

            git clone ssh://git@git.pfsense.org/git/pfsense-tools.git tools

            That cloned it into /usr/tools/

            Using menu, I set version to RELENG_2_1_2 / releng/8.3.

            When I try to build, I still get all the "No file to patch" messages.

            So, the name of the directory didn't seem to matter.

            1 Reply Last reply Reply Quote 0
            • C
              cyriles
              last edited by

              Hello,

              I'm facing to a similar issue (impossible to buid pfSense 2.1.X anymore), I may be wrong but I suspect the problem comes from the following commit :

              Point repos URLs to internal git
              rbgarga authored 19 days ago
              b7f866d7340ae723841b40e2c8ccbd5ab18fa9a1

              -export FREEBSD_REPO_BASE=${FREEBSD_REPO_BASE:-"https://github.com/freebsd/freebsd.git"}
              +export FREEBSD_REPO_BASE=${FREEBSD_REPO_BASE:-"git@git.pfmechanics.com:outsidemirrors/freebsd.git"}
              etc, etc …

              Git refuses to connect to that host (git.pfmechanics.com) despite the fact my SSH access is working fine (git.pfsense.org), it looks like a private host being only reachable from ESF employees (which has been configured everywhere for git repos).

              In order to see the commits, I had to push the new pfsense-tools repo to my own github account (private repo of course) ... is it another easier way to see the commits as before ?

              Thanks in advance for any help,

              Best regards,

              Cyriles

              1 Reply Last reply Reply Quote 0
              • P
                ptaylor
                last edited by

                I was just looking for info on git.pfmechanics.com trying to further troubleshoot this, as I ran across this error message:

                >>> Updating BSDInstaller collection...Cloning into 'installer'...
                ssh: connect to host git.pfmechanics.com port 22: No route to host
                fatal: Could not read from remote repository.
                
                

                It looks like several things reference the pfmechanics.com git repo…

                1 Reply Last reply Reply Quote 0
                • P
                  ptaylor
                  last edited by

                  I think I've changed all the references to the internal git repo…  I've attached a zip file to this email (named .zip.txt, just rename it when you download it and unzip).  It's structured by directory, so just unzip it into your copy of the tools repo.  Two files in builder_scripts/ will be replaced, as will two more files under builder_scripts/scripts/

                  I can't say 100% whether this works yet, but my build sure seems to be getting a lot further.

                  pfsense-tools.changes.zip.txt

                  1 Reply Last reply Reply Quote 0
                  • R
                    razzfazz
                    last edited by

                    What worked for me is telling the tools to use subversion for the checkout instead of git:

                    • set USE_SVN to "YES"
                    • set FREEBSD_REPO_BASE "https://svn0.us-west.freebsd.org/base" (replace "us-west" with another geographical mirror as appropriate)
                    1 Reply Last reply Reply Quote 0
                    • P
                      ptaylor
                      last edited by

                      I know hand editing the scripts isn't the most elegant solution, but since ESF just re-opened this late last week, they probably have more work to do to get everything working for people just starting to build their own.

                      I know they've had dev VM images before, but I'm sure whatever they come up with will be good (even if it's just a walk through on how to build your own system).

                      1 Reply Last reply Reply Quote 0
                      • E
                        eri--
                        last edited by

                        There is no need to edit scripts people, think smart.
                        Just use pfsense-build.conf created by set_version.sh to override things.

                        1 Reply Last reply Reply Quote 0
                        • P
                          ptaylor
                          last edited by

                          I only see a single item to customize in the conf file:

                          export FREEBSD_REPO_BASE=https://github.com/freebsd/freebsd.git
                          
                          

                          Perhaps there are other items you can add?  I had to change multiple REPOs in the files I uploaded.

                          So far, my builds have not completed 100% successfully either…

                          Part of the issue is the varying skill levels of everyone involved.  There are some rare individuals that are talented with FreeBSD, networking, and programming.  There are many more that are probably even better at individual aspects I mentioned, but have trouble with others.

                          In my case, I do a lot of PHP programming that's CLI based, mostly for managing (auditing, deploying, etc) the configuration a few thousand switches and almost 900 routers and UTMs.  Back about 6 years ago, I contributed several features to the Monowall project, the most visible one was administrative groups that allow users to have granular access to the GUI, which was brought over to pfSense soon after.

                          In my opinion, the lower the barrier to entry to be able to contribute to pfSense, the better it is for the project.

                          I feel certain that ESF isn't done with their plans for the development community.  I just wish they would share more information with us about what they are planning and give some sort of guidance as to when to expect their plans to come to fruition.

                          At any rate, I'm going to try to wait for ESF before trying much more to build my own image.

                          Edited:  Just noticed that I now have "-1 Karma".  Thanks, whoever apparently doesn't like what I have said.

                          1 Reply Last reply Reply Quote 0
                          • F
                            freebee
                            last edited by

                            #export FREEBSD_REPO_BASE=git@git.pfmechanics.com:outsidemirrors/freebsd.git
                            export USE_SVN=YES
                            export FREEBSD_REPO_BASE=https://svn0.us-west.freebsd.org/base
                            export GIT_REPO_PFSENSE=${GIT_REPO_PFSENSE:-"git://github.com/pfsense/pfsense.git"}

                            1 Reply Last reply Reply Quote 0
                            • E
                              eri--
                              last edited by

                              Well setup has awlays been easy.

                              Checkout latest sources and run build.sh –configure it is a GUI that has been always there.

                              1 Reply Last reply Reply Quote 0
                              • C
                                cyriles
                                last edited by

                                Well, it's still impossible to build anything with the "pfsense-tools" repo which is available through the SSH access (2.1.X).

                                I even tried to backport the ports (through SVN) and pfsense-tools commits from the 10/04/2014 (official 2.1.2 release date) but with even more build ports errors (23 in stand of 4 while trying to build with up to date ports).

                                I'm pretty sure the pfsense-tools repo which is available through the SSH access is not up to date (no commits since the famous day it has been made available again) … it looks like just a clone made to shut up "annoying" people asking for the sources ... I think the simple fact the git repos are linking to a private and local EFS host can only mean there was no initial plans to make it public in the future, am I wrong ? If so then what was the point doing this (commit b7f866d7340ae723841b40e2c8ccbd5ab18fa9a1 for example) ?

                                The only thing which could make sense, is that the new pfsense-tools repo can only be used to build 2.2 releases (not yet tried but I bet I'll face to similar build errors).

                                Let's hope things will soon start moving in the right direction because right now we're all wasting our time, open source is no more meaning anything here (I have the feeling all is done to stop people building by themselves).

                                PS1: I don't like felating dogs or anything else (just in case ... you'll surely understand why I say that; if not then just give a look to the recent threads from the "development" forum section).
                                PS2: Even if you don't have any reasons to trust me, I'm not making any money with pfSense BUT I need to customise my personal installations as most people (in order to save precious time) ... is it now such a crime ?

                                1 Reply Last reply Reply Quote 0
                                • E
                                  eri--
                                  last edited by

                                  Well the tools repo has never been for the general people anyway.
                                  Its trying to get better.

                                  The internal repos committed there are because of speed on having local repos rather than going to github.
                                  Please stop this 'drama' and ask real questions rather than accusations that do not go nowhere and bring nothing of value.

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    cyriles
                                    last edited by

                                    @ermal :

                                    It's not a personal complain, I respect and appreciate your work.

                                    The problem is that I (and I'm sure I'm not the only one) can't buid my own customised pfSense release anymore.

                                    If I well understood the problem, it's a matter of money (ESF) … I'm ready to subscribe to what is necessary but I think the minimum is to communicate, and here there are no communications at all (the injuries are all but a kind of communication, providing an useless pfsense-repo doesn't help anyone).

                                    If nothing changes, then the only solution for me (and most people) will be to move to another real Open Source solution ... is it the point ?

                                    If so then just tell it and the "non founded accusations" will be over (sorry for my English, I'm French and learnt English by myself).

                                    The Real question is : If you were me (without dept programming skills), what would you do ? Is it fair providing an Open Source firewall solution which can't be customized ?

                                    Please take the time to think about what I wrote (the human way, not the capitalist way), else I won't waste more time answering.

                                    Best regards,

                                    Cyriles

                                    1 Reply Last reply Reply Quote 0
                                    • H
                                      heper
                                      last edited by

                                      @cyrilles: perhaps you should just ask how to use the repo (and resolve your errors). Instead you let your imagination run wild, with cospiracy theories.

                                      i'm sure someone will one day write up a nice how-to-build-your-trademark-infrigment-free-software-based-on-pf-source-wiki

                                      until then, i propose people to ask answereable questions ;
                                      in other words, show errors, screenshots, useful info | then perhaps someone who uses the tools daily, can provide an answer.

                                      but thats just my 2 cents

                                      1 Reply Last reply Reply Quote 0
                                      • E
                                        eri--
                                        last edited by

                                        @cyriles:

                                        @ermal :

                                        It's not a personal complain, I respect and appreciate your work.

                                        The problem is that I (and I'm sure I'm not the only one) can't buid my own customised pfSense release anymore.

                                        If I well understood the problem, it's a matter of money (ESF) … I'm ready to subscribe to what is necessary but I think the minimum is to communicate, and here there are no communications at all (the injuries are all but a kind of communication, providing an useless pfsense-repo doesn't help anyone).

                                        If nothing changes, then the only solution for me (and most people) will be to move to another real Open Source solution ... is it the point ?

                                        If so then just tell it and the "non founded accusations" will be over (sorry for my English, I'm French and learnt English by myself).

                                        The Real question is : If you were me (without dept programming skills), what would you do ? Is it fair providing an Open Source firewall solution which can't be customized ?

                                        Please take the time to think about what I wrote (the human way, not the capitalist way), else I won't waste more time answering.

                                        Best regards,

                                        Cyriles

                                        I do not take this personal.
                                        Its just you people complain about things not being open source and than complain that they not work.
                                        If you want open source to fix it yourself have fun its there.

                                        If you want help on thing stop accusing, imagining things and get real.
                                        What you post is you need help and nothing in that is a direct question to what is wrong, you just complain about 'nonclear' things in your mind.

                                        In human way, there have been times when the tools repo has been in very bad shape and no one complained, now that it is in way better position to be understood by general people complains come for policies and not the repository itself.

                                        By the way, I will not answer anything that is not a real question!

                                        1 Reply Last reply Reply Quote 0
                                        • K
                                          kpa
                                          last edited by

                                          It looks like git.pfmechanics.com is either down can not handle the traffic it is getting. You can override the pfsense repo URL by setting GIT_REPO_PFSENSE to git@github.com:pfsense/pfsense.git but unfortunately the URL for the BSD installer repo is hard coded to git@git.pfmechanics.com:pfsense/bsdinstaller.git.

                                          1 Reply Last reply Reply Quote 0
                                          • ?
                                            Guest
                                            last edited by

                                            @kpa:

                                            It looks like git.pfmechanics.com is either down can not handle the traffic it is getting. You can override the pfsense repo URL by setting GIT_REPO_PFSENSE to git@github.com:pfsense/pfsense.git but unfortunately the URL for the BSD installer repo is hard coded to git@git.pfmechanics.com:pfsense/bsdinstaller.git.

                                            I'm not seeing any load issues, and it's been up for 4.5 days:

                                            jim@git:~ % uptime
                                            11:12AM  up 4 days, 10:58, 2 users, load averages: 0.39, 0.40, 0.22
                                            jim@git:~ % date
                                            Tue Apr 29 11:12:27 CDT 2014

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.