• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

PC Engines apu2 experiences

Scheduled Pinned Locked Moved Hardware
711 Posts 73 Posters 878.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • V
    Vollans @logan5247
    last edited by Mar 5, 2021, 8:37 PM

    @logan5247 I don’t see any inherent dangers in leaving the snapshot hanging around, unless you are really tight for space. Snapshots only record changed files, so it’s not a huge thing. Personally, I use it for a couple of reasons.

    1. Fully installed with patches base OS before any fiddling - that way if you screw up you can roll back and undo your “magic” that was more Weasley than Granger.

    2. Snapshot once fully tweaked and working, so you’ve got a known working system to roll back to

    3. Just before a major upgrade

    Here’s my snapshot catalogue:

    NAME                              USED  AVAIL  REFER  MOUNTPOINT
    zroot                            2.90G  9.21G    88K  /zroot
    zroot@210219                         0      -    88K  -
    zroot@2-4-5p1-base                   0      -    88K  -
    zroot@2-4-5-p1                       0      -    88K  -
    zroot/ROOT                       2.14G  9.21G    88K  none
    zroot/ROOT@210219                    0      -    88K  -
    zroot/ROOT@2-4-5p1-base              0      -    88K  -
    zroot/ROOT@2-4-5-p1                  0      -    88K  -
    zroot/ROOT/default               2.14G  9.21G  1.84G  /
    zroot/ROOT/default@210219         146M      -  1.14G  -
    zroot/ROOT/default@2-4-5p1-base  36.3M      -  1.43G  -
    zroot/ROOT/default@2-4-5-p1      36.5M      -  1.43G  -
    zroot/tmp                         512K  9.21G   512K  /tmp
    zroot/var                         776M  9.21G   396M  /var
    zroot/var@210219                  183M      -   527M  -
    zroot/var@2-4-5p1-base           52.1M      -   409M  -
    zroot/var@2-4-5-p1               61.5M      -   434M  -
    

    The space used as it goes along is tiny. The upgrade to 2.5 that I ended up rolling back from only used about 900MB IIRC.

    L 1 Reply Last reply Mar 8, 2021, 8:31 PM Reply Quote 0
    • K
      kevindd992002
      last edited by Mar 6, 2021, 4:18 AM

      Without doing manual snapshots, is there an advantage of using ZFS over the old UFS? I am on ZFS on a single SSD and I forgot what its advantage is when I posted here a few years ago.

      V Q 2 Replies Last reply Mar 6, 2021, 6:29 AM Reply Quote 0
      • V
        Vollans @kevindd992002
        last edited by Mar 6, 2021, 6:29 AM

        @kevindd992002 Better resilience if you have a crash. UFS has a horrid habit of collapsing in an unrecoverable heap, ZFS is far more likely to recover gracefully.

        1 Reply Last reply Reply Quote 1
        • Q
          Qinn @kevindd992002
          last edited by Mar 6, 2021, 8:18 AM

          @kevindd992002 said in PC Engines apu2 experiences:

          Without doing manual snapshots, is there an advantage of using ZFS over the old UFS? I am on ZFS on a single SSD and I forgot what its advantage is when I posted here a few years ago.

          ....of course RAID with ZFS gives more redundancy, best is more disks using RAID. As the problem with a single disk and "copies" is the same as creating an mdadm raid-1 using two partitions of the same disk: you have data redundancy, but not disk redundancy, as disk failure will cause the loss of both data sets.

          Comparing UFS with ZFS, well ZFS, like btrfs, is copy-on-write, so power surges are never a problem and ZFS requires a system with ECC memory (APU2 has this), otherwise you're still not 100% safeguarded against bit errors.

          Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
          Firmware: Latest-stable-pfSense CE (amd64)
          Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

          1 Reply Last reply Reply Quote 2
          • L
            logan5247 @Vollans
            last edited by Mar 8, 2021, 8:31 PM

            @vollans Sorry to keep asking questions.

            1. ) If I snapshot zroot do I need to snapshot zroot/ROOT and zroot/ROOT/default? Does zroot not include everything else?
            1. Let's say I did a snapshot, made a change, and successfully rolled back:
            zfs rollback zroot/var@20210308
            zfs rollback zroot/ROOT/default@20210308
            zfs rollback zroot/ROOT@20210308
            zfs rollback zroot@20210308
            shutdown -r now
            

            And now my zfs list looks like this (after the rollback):

            NAME                          USED  AVAIL  REFER  MOUNTPOINT
            zroot                         674M  12.4G    96K  /zroot
            zroot@20210308                   0      -    96K  -
            zroot/ROOT                    665M  12.4G    96K  none
            zroot/ROOT@20210308              0      -    96K  -
            zroot/ROOT/default            665M  12.4G   665M  /
            zroot/ROOT/default@20210308   388K      -   665M  -
            zroot/tmp                     144K  12.4G   144K  /tmp
            zroot/var                    7.02M  12.4G  6.62M  /var
            zroot/var@20210308            400K      -  6.62M  -
            

            How do I know what set of filesystems I'm running on? Is there something like an "active" marker in zfs list?

            V 1 Reply Last reply Mar 8, 2021, 8:54 PM Reply Quote 0
            • V
              VAMike @logan5247
              last edited by Mar 8, 2021, 8:54 PM

              @logan5247 this really should get its own zfs thread, it has nothing to do with the apu2

              V 1 Reply Last reply Mar 8, 2021, 11:15 PM Reply Quote 0
              • V
                Vollans @VAMike
                last edited by Mar 8, 2021, 11:15 PM

                @vamike I agree, but quickly in summary, you're always running the one without the @ sign - that's the current live version. You can see that the size of the "backup" of zroot is nothing. The size of zroot/ROOT/default's backup is bigger. zroot doesn't include the other, effectively, "partitions".

                1 Reply Last reply Reply Quote 0
                • Q
                  Qinn @dem
                  last edited by Qinn Mar 10, 2021, 2:52 PM Mar 10, 2021, 2:51 PM

                  @dem said in PC Engines apu2 experiences:

                  @vollans I did a quick test in a virtual machine to figure out what the commands would be. This appears to work:

                  On a running 2.4.5-p1 system:

                  zpool checkpoint zroot
                  

                  Booted from the 2.5.0 installer and in the Rescue Shell:

                  zpool import -f -N --rewind-to-checkpoint zroot
                  zpool export zroot
                  poweroff
                  

                  I would like to know how you booted from the 2.5.0 installer using a virtual pfsense machine and got to the Rescue Shell?

                  Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                  Firmware: Latest-stable-pfSense CE (amd64)
                  Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                  D 1 Reply Last reply Mar 10, 2021, 3:04 PM Reply Quote 0
                  • D
                    dem @Qinn
                    last edited by Mar 10, 2021, 3:04 PM

                    @qinn In VirtualBox I put the file pfSense-CE-2.5.0-RELEASE-amd64.iso in the virtual optical drive and booted to this screen, where I selected Rescue Shell:

                    02_rescue.png

                    Q 1 Reply Last reply Mar 10, 2021, 3:27 PM Reply Quote 1
                    • Q
                      Qinn @dem
                      last edited by Mar 10, 2021, 3:27 PM

                      @dem Thanks for the quick reply, I understand that.
                      What I would like to know is how you get to the Virtual pfSense from here as the virtual pfsense machine is not running and access the checkpoint you made?

                      Btw I am using VM workstation!

                      Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                      Firmware: Latest-stable-pfSense CE (amd64)
                      Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                      D V 2 Replies Last reply Mar 10, 2021, 3:34 PM Reply Quote 0
                      • D
                        dem @Qinn
                        last edited by dem Mar 10, 2021, 3:50 PM Mar 10, 2021, 3:34 PM

                        @qinn Sorry I wasn't clear: I put the installer image into the virtual optical drive of the same virtual pfSense instance that I checkpointed, so the installer has access to the same virtual disk and can locate the checkpointed zroot pool.

                        Edited to add: My goal was to simulate booting an apu2 from the memstick image in order to rewind a checkpoint, but I don't have a spare apu2 to test with. If I actually ran pfSense in a virtual machine I would use virtual machine snapshots before any upgrade.

                        1 Reply Last reply Reply Quote 1
                        • V
                          VAMike @Qinn
                          last edited by Mar 10, 2021, 3:56 PM

                          @qinn I never would have guessed this was somehow specific to the apu2

                          D 1 Reply Last reply Mar 10, 2021, 4:00 PM Reply Quote 0
                          • D
                            dem @VAMike
                            last edited by Mar 10, 2021, 4:00 PM

                            @vamike It's not, but @vollans rolled back an upgrade of his apu2 using ZFS and that sparked interest in using ZFS to recover from a failed upgrade.

                            V 1 Reply Last reply Mar 10, 2021, 4:41 PM Reply Quote 0
                            • V
                              VAMike @dem
                              last edited by Mar 10, 2021, 4:41 PM

                              @dem so he should start another thread so that people actually interested in apu2 experiences can find those without digging through unrelated zfs support questions

                              V 1 Reply Last reply Mar 10, 2021, 8:27 PM Reply Quote 1
                              • V
                                Vollans @VAMike
                                last edited by Mar 10, 2021, 8:27 PM

                                @vamike I agreed it wasn't relevant here 2 days ago, and stopped responding. 🤷

                                1 Reply Last reply Reply Quote 0
                                • S
                                  sikita
                                  last edited by sikita Mar 12, 2021, 9:43 AM Mar 12, 2021, 9:40 AM

                                  Why pfsense 2.5 shows "AES-NI CPU Crypto: No" when in 2.4.x there was YES on APU2? Also on 2.5 there is in other line: Hardware crypto AES-CBC,AES-CCM,AES-GCM,AES-ICM,AES-XTS

                                  B Q 2 Replies Last reply Mar 12, 2021, 9:58 AM Reply Quote 0
                                  • B
                                    bigsy @sikita
                                    last edited by Mar 12, 2021, 9:58 AM

                                    @sikita said in PC Engines apu2 experiences:

                                    Why pfsense 2.5 shows "AES-NI CPU Crypto: No" when in 2.4.x there was YES on APU2?

                                    Anything to do with this problem? If so, it appears to be fixed in 2.5.1.

                                    S 1 Reply Last reply Mar 12, 2021, 10:08 AM Reply Quote 1
                                    • S
                                      sikita @bigsy
                                      last edited by sikita Mar 12, 2021, 10:16 AM Mar 12, 2021, 10:08 AM

                                      @bigsy Ok, thank you. Seems to be GUI bug and does not involve using HW crypto.

                                      1 Reply Last reply Reply Quote 0
                                      • Q
                                        Qinn @sikita
                                        last edited by Qinn Mar 12, 2021, 4:51 PM Mar 12, 2021, 3:28 PM

                                        @sikita I am on pfSense 2.5.0 and here it says:

                                        Firefox_Screenshot_2021-03-12T16-51-01.718Z.png

                                        Do you have AES-NI enabled?

                                        Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                        Firmware: Latest-stable-pfSense CE (amd64)
                                        Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                        Q 1 Reply Last reply Mar 19, 2021, 11:51 AM Reply Quote 0
                                        • Q
                                          Qinn @Qinn
                                          last edited by Mar 19, 2021, 11:51 AM

                                          Can anyone share there System / Advanced / Networking on a APU2

                                          Mine are

                                          Firefox_Screenshot_2021-03-19T11-29-42.923Z.png

                                          as these are the defaults, grabbed them from a VM installation, which is not quit the same setup.

                                          The old and not anymore recommend settings from https://teklager.se/en/knowledge-base/apu2-1-gigabit-throughput-pfsense/ are quit different!

                                          ...and there is a new settings present in 2.5.0. " hn ALTQ support"

                                          Could anyone elaborate on all these or there settings?

                                          Hardeware: Intel(R) Celeron(R) J4125 CPU @ 2.00GHz 102 GB mSATA SSD (ZFS)
                                          Firmware: Latest-stable-pfSense CE (amd64)
                                          Packages: pfBlockerNG devel-beta (beta tester) - Avahi - Notes - Ntopng - PIMD/udpbroadcastrelay - Service Watchdog - System Patches

                                          1 Reply Last reply Reply Quote 0
                                          602 out of 711
                                          • First post
                                            602/711
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received