Newbie question on upgrades/updates

  • If I go with a CF version, an update would mean reflashing the card, correct? If so, can this be done through the psfense interface, or would I have to remove the card to do this?

    Also, how often are "updates" put out? Is it something where security patches come out all the time, or would I just be reflashing for major version upgrades?

    I ask because I've been looking into Astaro and IPcop as well. They both mention automatic updates. Or is that more of a Linux vs. BSD thing?


  • i dont know what the devs think about this but we have tested upgrading wraps on CF embedded versions with full updates.

    they run 128MB ram on 128 MB cf cards max ram use on upgrade is about 60%

    the process is only on test at the moment but it can work.

    there have been some mini embedded updates by the team but i dont know the status of that.

    overall reflashing is the only supported option.

    i would love to see some more talk about this topic cos pfsense is great on some embedded platforms and they have enough power to take the core features fine

  • Technically flashing with a full update is ok as long as you do not have a wrap.  The wrap bios goes bazerk when a keyboard and video driver are present in the kernel.

    So basically you can "upgrade" with a full update on embedded as long as you know the kernel is not going to interfere with the bios.

    If only PC Engines would fix their bios then we wouldn't even need to call it embedded, it could be called "small" or something or another.

  • scott we run on wrap latest bios and all tests have been fine upgraded a beta4 or there abouts today for test to a 6.2 snapshot and all was fine.

    what is did was create a 6.2 image mount it tar it up and install it as an upgrade new kernal now etc all fine

  • Hrm, so they must have fixed this issue in a recent bios then.

  • Thanks for the feedback. This board is great!

    I'd like to be able to administer the firewall remotely (including updates), so I guess a hard drive version is still the easiest way to go.

Log in to reply