Crowdsec finally comming to pfSense

w0w

The fact that CrowdSec is still not available in the pfSense repository says a lot. It probably suggests that there are some problems with either maintaining its code or its implementation.

mmetc

@wgstarks said in Crowdsec finally comming to pfSense:

[24.03-RELEASE][root@heimdall.dahoney.me]/root: pkg add -f https://github.com/crowdsecurity/pfSense-pkg-crowdsec/releases/download/v0.1.3-1.6.2/crowdsec-firewall-bouncer-0.0.28_3.pkg
Fetching crowdsec-firewall-bouncer-0.0.28_3.pkg: 100%    4 MiB   3.8MB/s    00:01    
Installing crowdsec-firewall-bouncer-0.0.28_3...
pkg: wrong architecture: FreeBSD:14:amd64 instead of FreeBSD:15:amd64
Extracting crowdsec-firewall-bouncer-0.0.28_3: 100%

If you click "Assets" on the release page you will find the archive for your version

https://github.com/crowdsecurity/pfSense-pkg-crowdsec/releases/download/v0.1.3-1.6.2/freebsd-15-amd64.tar

Download, untar and then pkg install in the right order.

buixor

Our PR has been sitting for the last 9 months or so without feedback: https://github.com/pfsense/FreeBSD-ports/pull/1311

If anybody from the project has a chance to provide us feedback as to what we need to do or improve to see it being merged, don't hesitate to reach out!

wgstarks

@mmetc
Do I need to uninstall the currently installed version first?

wgstarks

@mmetc said in Crowdsec finally comming to pfSense:

@wgstarks said in Crowdsec finally comming to pfSense:
[24.03-RELEASE][root@heimdall.dahoney.me]/root: pkg add -f https://github.com/crowdsecurity/pfSense-pkg-crowdsec/releases/download/v0.1.3-1.6.2/crowdsec-firewall-bouncer-0.0.28_3.pkg
Fetching crowdsec-firewall-bouncer-0.0.28_3.pkg: 100%    4 MiB   3.8MB/s    00:01    
Installing crowdsec-firewall-bouncer-0.0.28_3...
pkg: wrong architecture: FreeBSD:14:amd64 instead of FreeBSD:15:amd64
Extracting crowdsec-firewall-bouncer-0.0.28_3: 100%
If you click "Assets" on the release page you will find the archive for your version

https://github.com/crowdsecurity/pfSense-pkg-crowdsec/releases/download/v0.1.3-1.6.2/freebsd-15-amd64.tar

Download, untar and then pkg install in the right order.

Also not sure what the commands are to download, untar and install since I’m pretty sure the links will change for the untarred files.

wgstarks

@wgstarks said in Crowdsec finally comming to pfSense:

@mmetc said in Crowdsec finally comming to pfSense:
@wgstarks said in Crowdsec finally comming to pfSense:
[24.03-RELEASE][root@heimdall.dahoney.me]/root: pkg add -f https://github.com/crowdsecurity/pfSense-pkg-crowdsec/releases/download/v0.1.3-1.6.2/crowdsec-firewall-bouncer-0.0.28_3.pkg
Fetching crowdsec-firewall-bouncer-0.0.28_3.pkg: 100%    4 MiB   3.8MB/s    00:01    
Installing crowdsec-firewall-bouncer-0.0.28_3...
pkg: wrong architecture: FreeBSD:14:amd64 instead of FreeBSD:15:amd64
Extracting crowdsec-firewall-bouncer-0.0.28_3: 100%
If you click "Assets" on the release page you will find the archive for your version

https://github.com/crowdsecurity/pfSense-pkg-crowdsec/releases/download/v0.1.3-1.6.2/freebsd-15-amd64.tar

Download, untar and then pkg install in the right order.
Also not sure what the commands are to download, untar and install since I’m pretty sure the links will change for the untarred files.

Tracked down the answers for myself.
To download-

fetch <link to tarball>

To untar-

tar xvf <name of file>

Install commands-

# setenv IGNORE_OSVERSION yes
# pkg add -f /root/abseil-20230125.3.pkg
# pkg add -f /root/re2-20240501.pkg
# pkg add -f /root/crowdsec-firewall-bouncer-0.0.28_3.pkg
# pkg add -f /root/crowdsec-1.6.2.pkg
# pkg add -f /root/pfSense-pkg-crowdsec-0.1.3.pkg

Install whitelist-

sudo cscli parsers install crowdsecurity/whitelists

I deleted the originally installed pkg so re-registered-

sudo cscli capi register

And re-enrolled-

sudo cscli console enroll -e context clzeha7k80004l6087uikulpm

And then reloaded the pkg-

sudo service crowdsec onereload

Still no crowdsec package in package manager though. Maybe that will get fixed later???

provels

Have there been any more thoughts about including Crowdsec as an official pfSsense package?

Sergei_Shablovsky

@provels said in Crowdsec finally comming to pfSense:

Have there been any more thoughts about including Crowdsec as an official pfSsense package?

Upvoting this!