Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    automate install from template config

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    5 Posts 4 Posters 1.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Sparty
      last edited by

      I'm looking for a way to install pfsense with zero user interaction from an existing config.xml, I've looked at two existing posts without any success (9 year old posts) https://forum.netgate.com/topic/15711/solved-injecting-config-file-in-embedded-img and this doc (https://www.netgate.com/docs/pfsense/backup/automatically-restore-during-install.html) which also doesn't work. "restore existing config" just resets back to menu.

      Are there any current docs describing how to automate these things?

      1 Reply Last reply Reply Quote 0
      • S
        Sparty
        last edited by

        I was able to modify these two files to fit my needs, removing all prompts and selecting which options work with my hardware, I would appreciate a standard/supported way to do this.

        /etc/rc.local
        /usr/libexec/bsdinstall/auto

        mdconfig -a -t vnode -f pfSense-2.4.3-Custom.img
        mkdir FreeBSD_Install
        mount /dev/ufs/FreeBSD_Install FreeBSD_Install
        

        edit the files listed, remove prompts, etc.

        umount FreeBSD_Install
        mdconfig -du md1
        

        Write your new img file to usb, I also put my config file at /root/ and updated the path check from /tmp/recovered_config to /root/config.xml

        if [ -r /root/config.xml ] ; then
                /bin/cp -r /root/config.xml ${BSDINSTALL_CHROOT}/cf/conf/
                # Set a flag to let the installed system know this may need extra processing
                /usr/bin/touch ${BSDINSTALL_CHROOT}/cf/conf/installer_copied_config
                # Only set the package sync flag if the restored config.xml contains active packages
                if [ `/usr/bin/grep -c '<package>' ${BSDINSTALL_CHROOT}/cf/conf/config.xml` -gt 0 ]; then
                        /usr/bin/touch ${BSDINSTALL_CHROOT}/cf/conf/needs_package_sync_after_reboot
                fi
                # If there is an existing configuration, then there is no need to run the wizard.
                if [ -r ${BSDINSTALL_CHROOT}/cf/conf/trigger_initial_wizard ]; then
                        rm -f ${BSDINSTALL_CHROOT}/cf/conf/trigger_initial_wizard
                fi
        fi
        
        1 Reply Last reply Reply Quote 0
        • A
          allenrobin Banned
          last edited by allenrobin

          This post is deleted!
          1 Reply Last reply Reply Quote 0
          • V
            Visseroth
            last edited by

            I know this is a old post but I thought worth waking up.
            It certainly would be a major time saver for those that deploy many of these firewalls for customers/clients.
            Granted this is generally something only used on new deployments but it would be great to be able to just import a config containing things like General settings, System -> Advanced Settings, DNS settings, Package settings, ect.
            While yes I understand you can granularity import by selecting what you want to import from another config but there are things imported that shouldn't be imported.
            Basically I'm just saying it would be nice to be able to create a template to use on new installations while still keeping that new installation unique, IE certificates, shell keys, ect.

            Again, sorry to wake up a old thread, I thought it worth bringing back to attention as I searched for a option to do a template but seemingly only came up with this thread.

            J 1 Reply Last reply Reply Quote 0
            • J
              Jarhead @Visseroth
              last edited by

              @visseroth You already can.
              Google it. You just add a config folder on the flash drive.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.